Introduction In my work with AWS Systems Manager (SSM) documents, I faced a challenge that might resonate with anyone managing complex automation: passing information between steps. Each step in an SSM document executes independently, and I wanted to keep my commands clean, organized, and effective. However, without an easy way...
Introduction In my daily work managing cloud infrastructure, I often faced the challenge of efficiently configuring services and running commands across many machines. With numerous EC2 instances running different applications, it was important to ensure consistent security settings and configurations. However, manually logging into each instance, executing commands, and checking...
Operating systems are becoming increasingly intricate, demanding meticulous configuration to ensure robust security. Nowhere is this more evident than with EC2 instances, where the operating system is dynamic and subject to change. The challenge lies in securing these instances. Enter the Center for Internet Security (CIS) Benchmarks - a guidance...
GuardDuty Unveiled 🧯 Before we dive into the nitty-gritty of runtime protection, let's take a moment to understand what AWS GuardDuty is all about. GuardDuty is like a vigilant digital sentry, constantly scanning your AWS environment for any signs of malicious activity. It uses intelligent threat detection algorithms, machine...
Introduction If you've been following our journey, you'll recall our previous explorations into the AWS Session Manager and AWS Inspector Vulnerability Management. In our ongoing quest for comprehensive cloud security, we've peeled back layers to uncover the practical applications and benefits of these integral...
Do you want to keep your AWS workloads secure? 🔐 If so, you need to know what software components are running on your workloads. This is where software bills of materials (SBOMs) come in. SBOMs are a comprehensive list of the software components used in a software application. They can be...
