Nicolas MalavalDive deep on our AWS landing zone: Architecture, Decisions made, Lessons learnt — Part 3Other aspects of our landing zone on AWS: encryption at rest, network, backup, access to production and management ports, FinOps.10 min read·Oct 3, 2023--1--1
Nicolas MalavalDive deep on our AWS landing zone: Architecture, Decisions made, Lessons learnt — Part 2Measures implemented to maintain or monitor compliance in our landing zone on AWS, and inform application teams of their security posture.10 min read·Oct 3, 2023----
Nicolas MalavalDive deep on our AWS landing zone: Architecture, Decisions made, Lessons learnt — Part 1Context in which we built our landing zone, architecture and decisions made on account structure, IAM for AWS and security services14 min read·Oct 3, 2023--2--2
Nicolas MalavalWhy I built my own tool to deploy landing zones on AWSSince I couldn’t find a suitable solution, I built a tool AWS Orga Deployer to deploy infra-as-code at the scale of an AWS organization10 min read·Sep 16, 2023--2--2
Nicolas MalavalHow to record system operator activities on AWS using Amazon AppStream 2.0 and Session ManagerSolution to record human activities on AWS, reduce the risk of data exfiltration, and capture the reason for access to protected systems16 min read·Aug 11, 2022--1--1