PinnedAWS Governance — Service Control PoliciesAWS Organizations and Service Control Policies (SCP) play a crucial role in security, compliance and governance.Mar 28, 20233Mar 28, 20233
PinnedCWPP — Agents, Agentless or Hybrid?Agent or agentless CWPP? Hybrid approach can fill the gaps in an agentless approach to provide a holistic security posture.Mar 4, 20231Mar 4, 20231
Get Your Ducks in a Row: Analyzing AWS VPC flow logs with DuckDBAWS VPC flow logs provide lot of value for troubleshooting network setup, analyzing traffic patterns, bottlenecks and for security…Sep 291Sep 291
Putting AWS on a Diet: Slimming down cloud costs, one byte at a time!Cloud spend on production workloads is typically less than 40 to 60 percentage of total bills. Lower environments, CI/CD infrastructure…May 5May 5
Review: CloudTrail Lake IntegrationsAWS CloudTrail provides audit capabilities for risk, governance and compliance. CloudTrail Lake (CTL) provides ability to query the audit…Feb 19, 2023Feb 19, 2023
SIEM/SOAR — Red team bypassCloud attacks haven’t yet become very sophisticated. In AWS, most of the external attacks are related to resource mis-configurations…Feb 8, 2023Feb 8, 2023
Server-Side Encryption — Do you need it?Is “encryption at rest” in the cloud same as it is in datacenters or employee laptops? Do we need it?Nov 30, 2022Nov 30, 2022
Published inBetter ProgrammingAWS CloudTrail — The Good, the Bad, and the UglyGlue your audit trails together easilyMar 8, 2023Mar 8, 2023
CIEM — Managing Excess Permissions in Public CloudCloud Security teams have heard of Cloud Infrastructure Entitlement Management (CIEM). It’s one of many buzzwords in Cloud Security. One…Aug 8, 2022Aug 8, 2022
Cloud Security — Network Security (CSNS)Virtual networking in the Cloud has become very complicated. Current crop of security tools focus heavily on only resource…Jul 22, 2022Jul 22, 2022