Steyn Huizinga

CTO AWS | AWS APN Ambassador | AWS Premier Consulting Partner | Xebia

Securing your secrets in the cloud

2021-11-02 1 min read AWS
Have you spotted access keys in code? Putting it directly in your code might not be a good idea. Maybe you saw that Kubernetes offers secrets for this. Have you found your Kubernetes secrets to be readable by everyone? So where do you put your secrets in a secure way? In this session we will look at various solutions, such as Hashicorp Vault, Kubernetes, and solutions offered by AWS. Guests: Jeroen Willemsen (Xebia)
AWS Club Cloud 2021 Security

Threat detection and response in the cloud

2021-11-02 1 min read AWS
In this session we talk about how to do detection and response in the AWS public cloud and what native AWS services can be used to do this. What options are available and what (if any) 3rd party solutions play a role here? If it was up to us, what are the top use cases a security operations. Guests: Christiaan van Tienhoven (TKP) - Martijn Doedens (Oblivion)
AWS Club Cloud 2021 Security

First glance at AWS CloudFormation Guard 2.0

2021-05-18 3 min read AWS
Yesterday AWS CloudFormation Guard version 2.0 was introduced. Guard is an open source tool that can be used to validate CloudFormation templates against certain rules. You can use it for linting your templates both on syntax and semantics. Linting tools are essential in CI/CD pipelines and an powerful addition when it comes to validating structured and human-readable files such as JSON and YAML. In your delivery pipelines you would preferably run linting tests as early as possible, before proceeding to steps such as compile and deploy steps et cetera(fail-fast). Continue reading
AWS Security Open Source

Defense in depth matters

2021-05-12 9 min read AWS
Recently a nasty vulnerability in AWS CloudShell was reported by Google’s Project Zero. Due to a bug in the library handling interaction with the shell and the browser an attacker could trigger remote code execution. AWS CloudShell is a browser based shell which gives a pre-authenticated web-based shell. The service most-often used by a user with administrator privileges on the AWS console. Via remote shell the credentials of the user starting AWS CloudShell can be obtained and can be used to call AWS services. Continue reading
AWS Security

Optimizing your security footprint in AWS — part 2

2021-03-31 6 min read AWS
In the last few years the costs for running security went skyrocketing. We’ve seen an explosion of security solutions, all fighting for their own place in cybersecurity. I’m pretty sure each solution has its purpose, but from a CISO perspective the landscape is getting more complex and more expensive each year, or friendly phrased: less cost-effective. Public cloud is the main driver for innovation. With the arrival of new thinking, new capabilities and reinventing how we run IT things have changed tremendously. Continue reading
AWS Security

Optimizing your security footprint in AWS — part 1

2021-03-23 6 min read AWS
In the last few years the costs for running security went skyrocketing. We’ve seen an explosion of security solutions, all fighting for their own place in cybersecurity. I’m pretty sure each solution has its purpose, but from a CISO perspective the landscape is getting more complex and more expensive each year, or friendly phrased: less cost-effective. Public cloud is the main driver for innovation. With the arrival of new thinking, new capabilities and reinventing how we run IT things have changed tremendously. Continue reading
AWS Security
Newer posts
© 2024 by Lednerb - rss
Bilberry Hugo Theme