Nicolas MalavalDive deep on our AWS landing zone: Architecture, Decisions made, Lessons learnt — Part 3Other aspects of our landing zone on AWS: encryption at rest, network, backup, access to production and management ports, FinOps.Oct 3, 20231Oct 3, 20231
Nicolas MalavalDive deep on our AWS landing zone: Architecture, Decisions made, Lessons learnt — Part 2Measures implemented to maintain or monitor compliance in our landing zone on AWS, and inform application teams of their security posture.Oct 3, 2023Oct 3, 2023
Nicolas MalavalDive deep on our AWS landing zone: Architecture, Decisions made, Lessons learnt — Part 1Context in which we built our landing zone, architecture and decisions made on account structure, IAM for AWS and security servicesOct 3, 20232Oct 3, 20232
Nicolas MalavalWhy I built my own tool to deploy landing zones on AWSSince I couldn’t find a suitable solution, I built a tool AWS Orga Deployer to deploy infra-as-code at the scale of an AWS organizationSep 16, 20232Sep 16, 20232
Nicolas MalavalHow to record system operator activities on AWS using Amazon AppStream 2.0 and Session ManagerSolution to record human activities on AWS, reduce the risk of data exfiltration, and capture the reason for access to protected systemsAug 11, 20221Aug 11, 20221