Introduction As a developer working with AWS Lambda, I’ve always loved the idea of serverless computing - deploying code without worrying about managing servers. However, one challenge that frequently came up was handling Python dependencies in Lambda functions. Deploying a Lambda function with multiple dependencies can be cumbersome, especially...
Introduction Every DevOps engineer knows the importance of secure, streamlined workflows. A while ago, I found myself managing an array of AWS resources across multiple accounts. My goal was to automate deployments and other tasks using GitHub Actions. The catch? I wanted to avoid hardcoding AWS secret keys in my...
Introduction Welcome to the exciting world of cloud security! My journey with AWS security began in 2019 when I earned my first certification, the AWS Certified Solutions Architect Associate and later also the AWS Security Specialty. Since then, my fascination with the cloud has only grown, and I've...
Introduction Imagine you're sitting in a room full of cloud architects and penetration testers, discussing the latest advancements in cloud security. The topic of the day is AWS's transition from Instance Metadata Service version 1 (IMDSv1) to version 2 (IMDSv2). A lot of people in the...
Introduced by Gartner in 2021, Cloud-Native Application Protection Platform promises a single pane of glass for all your cloud security needs. 🛡️ Imagine having all your security tools working together seamlessly, like the Avengers assembling to fight a threat! 💥 But what exactly is CNAPP, and how does it work? Let'...
Operating systems are becoming increasingly intricate, demanding meticulous configuration to ensure robust security. Nowhere is this more evident than with EC2 instances, where the operating system is dynamic and subject to change. The challenge lies in securing these instances. Enter the Center for Internet Security (CIS) Benchmarks - a guidance...
