IAM Least Privilege in AWS: Access Analyzer Guide

How to audit and refine IAM permissions using Access Analyzer, CloudTrail, and service access history — enforcing least privilege the right way in AWS.

June 9, 2025 · 4 min · 800 words · Javier Pulido

AWS Session Manager Setup: Replace SSH with Zero Inbound Ports

Step-by-step SSM Session Manager setup — IAM role, instance profile, session logging, and removing SSH entirely. No keys, no bastions, no port 22.

June 3, 2025 · 5 min · 901 words · Javier Pulido

EC2 Hardening Guide: Secure AWS Instances Step by Step

This guide delves into the technical aspects of hardening EC2 instances, covering topics from instance selection to monitoring and automation, aligning with AWS’s security recommendations.

May 29, 2025 · 2 min · 391 words · Javier Pulido

AWS Incident Response Guide: The Framework for Cloud-Native IR (2026)

The full framework for AWS incident response — why cloud IR is fundamentally different, how to build maturity progressively, and how to actually test your plan with tabletop exercises.

May 4, 2025 · 17 min · 3477 words · Javier Pulido

Automate IAM Least Privilege with Access Analyzer & Terraform

Automate least-privilege IAM roles using Access Analyzer policy generation, CloudTrail-based scoping, and Terraform integration.

April 21, 2025 · 4 min · 799 words · Javier Pulido

How to Detect AWS Root Account Usage (And Respond to It)

Detect and alert on AWS root account usage using CloudTrail, EventBridge, SNS, and optional Slack notifications. Step-by-step setup with CLI commands and Terraform included.

April 21, 2025 · 5 min · 863 words · Javier Pulido