AWS by Vlad Frantskevich

Sign in Subscribe Contact me

Topic

Security

A collection of 7 issues

How Split-View DNS Can Improve Your Business Operations

After a grueling week at the office, you decided to unwind and catch up on some work from the comfort of home. You fired up a laptop, established a secure connection through the VPN client, and typed "erp.mycompany.com" into the browser. Unfortunately, an error message popped

How connect to EC2 in a private subnet from a local terminal

Modern security standards demand that organizations place application servers, databases, and other business-critical resources in private subnets to prevent direct access from the Internet. It is good practice, but...

Building an Anonymization Pipeline - Creating Safe Data

Data anonymization is not as simple as it seems. This book helps you understand the common terms and issues. It helps to find the right spot on the Identifiability Spectrum (share everything vs. share nothing). Then, apply the "Five Safes" risk management framework...

Easy way to enforce and test Least Privilege AWS IAM Policy

It is hard to count how many times I saw companies grant AdministratorAccess to developers and partners. I know you trust them, but...

How to separate public and management traffic on AWS EC2

When industry or certification security requirements demand that no ports except 443 be opened on public subnets, but your application needs other ports accessible to work properly, or you need to SSH to the instance to perform maintenance/troubleshooting activities. Can it be done?...

How to consolidate all AWS accounts and enforce unified restrictions with AWS Organizations

Managing multiple accounts and resources can become increasingly complex as your AWS environment grows and scales. On February 27, 2017, AWS launched Organizations, which became widely popular across many business types and sizes...

How to improve cloud security with AWS Client VPN in 10 minutes

Many organizations rely on AWS Security Groups to manage access to private resources. However, most risk-ignorant organizations provide overly optimistic access, such as allowing connections from any IP address (0.0.0.0/0). This approach is often adopted to avoid the administrative burden of updating IP addresses whenever users