Stopping Host Spoofing via X-Forwarded-Host with a CloudFront Function

Replacing a Public ALB Behind CloudFront with VPC Origins + an Internal ALB, and Moving to ECS Native Blue/Green

Removing the emSign roots from container CA bundles after the eMudhra intermediate CA key compromise

Rolling Out Google Cloud Organization Policies from Dry-Run to Enforce: Process and Pitfalls

Rolling Out GuardDuty Runtime Monitoring for ECS Fargate from the Delegated Administrator with Terraform

Sharing Route 53 Resolver DNS Firewall Rule Groups Across an Organization with AWS RAM and Rolling Out from ALERT to BLOCK

S3 Server Access Logs Can't Be Delivered to a Bucket with Object Lock Retention

Azure / AWS / Google Cloud Security Guardrails Cheat Sheet: What Defender for Cloud Maps To

Blocking Creation of Unused Google Cloud Services Org-Wide with IAM Deny Policies

Keeping Google Cloud Service Account Keys From Going Stale