My InfoSec Ramblings

When I make decisions at work, I am mentally programmed and in many/most cases try to find the core value that this step mapped to - from a ...

So JWTs are a very common stateless authentication token that are generated server side, and sent to a client. Every request that the client...

I switched from being a penetration tester after nearly 7 years at Security Innovation to a security engineer at 98point6, an exciting healt...

There are multiple parts to writing IAM least privilege policies. This document attempts to touch on the best ways to do each of these ta...

I was walking home on a Saturday afternoon across a shopping center which has a Bank of America branch (where I have an account)....

This blog defines a number of services that are relevant to AWS security. It is recommended that you know all these services as well as pos...

VPC: This is the DMZ/Vlan/Segmentation equivalent for the cloud. You can create a VPC, create subnets inside the VPC and then assign EC2...

Application Discovery Service: This one's to find out what offline servers you have and make a list of all that to then display them i...

RDS: AWS's relational database system which is basically hosting MySQL, PostGres, MSSQL, Oracle, Amazon's own AuroraDB and MariaD...

S3: This is arguably (along with EC2) the most popular service that AWS offers. In short it allows users to store their files in it - beha...

Here is an image from the Docker website that describes how containers work. Teams are increasingly building their workflows around Doc...

This blog summarizes some of the AWS Compute services. I deliberately do not cover the ones that deal with containers, as I plan to blog se...

This is a post to help me remember the various parts of CSP. The w3 specification for CSP is very readable - this is NOT a replacement for ...

tl;dr: * You can configure client-side and server-side authentication using SSH certificates with the existing openssh daemon. * You nev...

This post summarizes the AWS services that are used to help you write code and reliably build, test and deploy it faster that things would ...