Archives for AWS - Page 6
Security Audits of AWS Accounts – Roles, Policies and equivalents on GCP and Azure
What should be audited? And why FullAdmin is a terrible idea. (Also read, KMS based data encryption on AWS and Google Cloud) CloudTrail logs, CloudWatch log groups, GuardDuty logs, Inspector logs,…
Cloud KMS and AWS KMS – Encrypting data using native cloud services on Google cloud and AWS
A note on terminology - Cloud KMS refers to Google's KMS offering. It will never be used for AWS. AWS KMS is known as AWS KMS. CMK (Customer managed key)…
Installing an SSL certificate on an EC2 instance
Pre Requisites You would need these three items: The actual Server certificate (.crt file) Private key (.crt file) CA bundle (contains intermediate certificates and the root certificate). This chain of…
ec2 with public IP is still not accessible
As long as the subnet containing the EC2 has an internet gateway (route), then the only other issue could be the SG on the EC2. The security group needs to…
Remediate Non Compliant Resources using Custom AWS Config
Using System Manager Documents (SSM Docs) To remediate non compliant resources, one could leverage existing Systems Manager documents to accomplish this. Clicking on ‘Edit Config Rule’ –> 'Manage remediation' by…
PCI Compliance for 3 Tier Apps hosted on AWS
PCI Compliance requires that the network as well as the data be secured – both at rest and in transit. Here are some relevant AWS services that help achieve PCI…
Control Tower vs Landing Zones in AWS –High Level Recap
Control Tower Pros Self Service model - A 'better' supported service - with shorter AWS support response times (compared to Landing Zones) Lower Complexity - most customers report smoother execution…
Check available IP addresses in an AWS Subnet
Install the AWS CLI. Get your AWS IAM user's access key (downloads a csv file) Connect to your aws account - (from cmd prompt, type aws configure). Enter your access…
Blue Green Deployments and Testing – AWS
When an application is developed and deployed to an AWS Elastic Beanstalk environment, having two separate, but identical, environments—blue and green—increases availability and reduces risk. The blue environment is the…
monitoring and alerting , AWS cloudwatch vs GCP stackdriver
Overview For alerting based on monitored CPU, RAM etc., Amazon CloudWatch and Stackdriver are part of your native cloud monitoring services. Some of the features offered by Amazon CloudWatch are:…