Stopping Host Spoofing via X-Forwarded-Host with a CloudFront Function

Replacing a Public ALB Behind CloudFront with VPC Origins + an Internal ALB, and Moving to ECS Native Blue/Green

Removing the emSign roots from container CA bundles after the eMudhra intermediate CA key compromise

Rolling Out GuardDuty Runtime Monitoring for ECS Fargate from the Delegated Administrator with Terraform

Sharing Route 53 Resolver DNS Firewall Rule Groups Across an Organization with AWS RAM and Rolling Out from ALERT to BLOCK

S3 Server Access Logs Can't Be Delivered to a Bucket with Object Lock Retention

Azure / AWS / Google Cloud Security Guardrails Cheat Sheet: What Defender for Cloud Maps To

Replacing NAT Gateway with fck-nat: 90% Cost Cut, and Almost Getting Stuck with a Tainted ASG

Trimming Unused Namespaces Lowers the CloudWatch Bill from Datadog's AWS Integration

Fixing SES Emails Landing in Spam with a Dedicated Sending Subdomain and DKIM