Swwapnil Pawar

5 days ago

DDoS Attack Detected? How To Prevent It?

I have been consulting a company and their marketing website (+20M unique monthly visitors). This level of exposure comes with a great risk of various attacks, the most common of which is DDoS. To protect their marketing website, We have chosen “Cloudflare” as our CDN partner. Why? Here are things…

Security

6 min read

DDoS Attack Detected? How To Prevent It?

Security

6 min read

Published in The Security Chef

·Jan 26

Improving AWS Security posture: Key learning from the State of AWS Security study

Introduction Datadog recently released a study on the State of AWS Security in 2022. They analyzed the AWS security posture of 600+ organizations and thousands of AWS accounts and concluded that: IAM users are often mismanaged and the industry views leaked access keys as a major cause of breaches in AWS…

AWS

5 min read

Improving AWS Security posture: Key learning from the State of AWS Security study

AWS

5 min read

Jan 21

Configure access to the EC2 Serial Console of an unreachable or inaccessible Linux instance

You might have come across a situation where your Amazon Elastic Compute Cloud (Amazon EC2) Linux instance is unreachable or inaccessible. In order to troubleshoot boot, network configuration, and other issues, you would like to use EC2 Serial Console at the OS Level. In this blog, We will look at…

AWS

8 min read

Configure access to the EC2 Serial Console of an unreachable or inaccessible Linux instance

AWS

8 min read

Jan 15

Region Locking On AWS

AWS originally enabled all new AWS Regions by default, which enabled your users to create resources in any Region. Now, when AWS adds a Region, the new Region is disabled by default. …

AWS

4 min read

AWS

4 min read

Published in The Security Chef

·Jan 8

Performing Audit On Your AWS KMS Cryptographic Keys

In this article, we are going to learn how to work with AWS monitoring services to control and understand the usage, state, and availability of your customer master keys (CMKs) in AWS KMS. Monitoring is an important aspect to consider in your design to ensure the reliability, maintainability, and performance…

AWS

5 min read

Performing Audit On Your AWS KMS Cryptographic Keys

AWS

5 min read

Jan 8

AWS Config as a dedicated account in an Organization

Soner Kalayci

Its a good idea to have a separate compliance AWS account (Similar to Security tooling and Log…

Its a good idea to have a separate compliance AWS account (Similar to Security tooling and Log Archiving) to manage AWS Config. This way we manage the compliance configuration in a proper manner. Thanks for sharing!

1 min read

Its a good idea to have a separate compliance AWS account (Similar to Security tooling and Log Archiving) to manage AWS Config. This way we manage the compliance configuration in a proper manner.

Thanks for sharing!

Published in The Security Chef

·Dec 13, 2022

Advanced Access Control Mechanisms Using AWS KMS

AWS Key Management Service (AWS KMS) is a managed service that makes it easy for you to create and control the cryptographic keys that are used to protect your data. AWS KMS uses hardware security modules (HSM) to protect and validate your AWS KMS keys under the FIPS 140–2 Cryptographic…

AWS

5 min read

Advanced Access Control
Mechanisms Using AWS KMS

AWS

5 min read

Published in The Security Chef

·Dec 13, 2022

NTP Amplification Attack: What it is and How to Mitigate?

Those of you who don’t know about NTP, Let’s first understand what NTP is and how it can be used by hacker to perform DDoS attack on the server. NTP stands for “Network Time Protocol”. The Network Time Protocol is designed to allow internet connected devices to synchronize their internal…

Security

4 min read

NTP Amplification Attack: What it is and How to Mitigate?

Security

4 min read

Published in The Security Chef

·Dec 1, 2022

Secure API Gateway From DDoS/DoS Attack Impacts In AWS

As you all know, Amazon API Gateway is a fully-managed service that enables developers to create, publish, maintain, monitor, and secure APIs at any scale. APIs act as the front door for applications to access data, business logic, or functionality from backend services. Using API Gateway, you can create RESTful…

API

5 min read

Secure API Gateway From DDoS/DoS Attack Impacts In AWS

API

5 min read

Nov 29, 2022

Deploy AWS Organization Resources By Using CloudFormation Template

AWS Organizations now supports AWS CloudFormation. This feature allows you to create and update AWS accounts, organizational units (OUs), and policies within your organization by using CloudFormation templates. With this latest integration, you can efficiently codify and automate the deployment of your resources in AWS Organizations. You can now manage…

AWS

8 min read

Deploy AWS Organization Resources By Using CloudFormation Template

AWS

8 min read