Security Engineering
Security model implementation and strategies
Software Supply Chain Security on AWS: Keyless Signing, SBOMs, and SLSA Provenance
2026-07-01
Unified Threat Detection on AWS: Security Hub, GuardDuty, and Automated EC2 Isolation
2026-06-17
Runtime Security on EKS: Tetragon eBPF Enforcement, Falco Detection, and GuardDuty
2026-06-14
Building an AWS Data Perimeter, Part 2: SCPs, RCPs, and Proving the Perimeter Holds
2026-06-01
Building an AWS Data Perimeter, Part 1: Design, Org Bootstrap, and Infrastructure
2026-05-29
EKS Workload Identity: IRSA, OIDC Token Exchange, and When to Use Pod Identity
2026-05-11
Article
IAM Problems I Keep Finding
2026-02-07
Article
IAM Patterns That Scale
2026-01-22
Article
Why I Stopped Creating IAM Users
2026-01-21
Article
IAM Basics I Keep Coming Back To
2026-01-20
AWS Secrets Management
2025-12-10
Inspector to SSM Vulnerability Patching Automation
2025-11-12
Article
AWS CLI Security Commands
2025-10-08
Article
Multi-Tool Container Security Scanning with AWS Integration
2025-09-11
Article
Implementing and Securing OWASP Juice Shop with AWS WAF
2025-09-05
Article
Secrets Management in Go Applications From Environment Variables to Vault
2025-08-14
Building an IaC Security Scanner in Go
2025-07-09
Article
AWS IAM Roles & Permissions Series - Detailed Outlines
2025-05-20
Article
Monitoring Tells You It’s Broken; Observability Tells You Why
2024-09-20
How a Bank Fixed Their Security Nightmare With Defense in Depth
2024-02-10
Why One layered defense Never Works and What Does
2024-01-19
Article
Separation of Concerns vs Least Privilege: Why They're Not the Same (and How to Use Both)
2023-07-14