AWS SSM Connect for no ingress EC2 instances
No Ingress EC2 is a great security option to completely block off all access to an EC2 instance. How then, will management users connect to this instance? This is a…
AWS DDOS Protection
AWS Shield A managed Distributed Denial of Service (DDoS) protection service. It detects and automatically mitigates attacks that could potentially result in downtime for your application. A DDoS attack results…
Protecting EC2 instances on AWS – Basic EC2 Security
Also read - No Ingress EC2 Instances Here are a couple of simple, yet often ignored, best practices around EC2 instance access. Access to EC2 instances via Systems Manager Only (Management…
Routes in AWS – Destinations and Targets
routes in aws Also read - Palo Alto East West and Ingress Egress Filtering - on GCP and AWS Routes in AWS Overview - Destinations versus Targets Routes are composed…
AWS – Which PaaS services require a VPC?
Several PaaS services use the compute platform (compute engine on GCP and EC2 on AWS). These services ARE actually part of your VPC - even though it may seem like…
AWS SSO Groups and Root Users
How do SSO groups work in an AWS organization? How do you restrict root users at lower levels in an organization? AWS SSO Groups and Permission Sets Users use their…
AWS Risk Factors – Some Common AWS Risks
aws risk Also read - Google Cloud Security Audit Amazon Web Services is leading the public cloud space with an ever increasing list of service offerings. AWS EC2, S3 and…