EC2 Hardening Guide: Secure AWS Instances Step by Step
This guide delves into the technical aspects of hardening EC2 instances, covering topics from instance selection to monitoring and automation, aligning with AWS’s security recommendations.
Aws
AWS Incident Response Toolkit: Playbook, Terraform Automation & Forensic Tools
A complete incident response toolkit for AWS — playbook template, Terraform notification pipeline, Lambda alert functions, and a forensic tool reference. Free download.
AWS Security Monitoring Without the Enterprise Price Tag
How to build a real AWS security monitoring stack without enterprise pricing — using CloudTrail, EventBridge, GuardDuty, and open-source tools like Wazuh and OpenSearch.
Stop Using Access Keys: AWS Temporary Credentials Done Right
Ditch long-term access keys. Practical guide to IAM roles, STS, and temporary credentials — with real mistakes to avoid and least-privilege patterns that work.
AWS Incident Response Guide: The Framework for Cloud-Native IR (2026)
The full framework for AWS incident response — why cloud IR is fundamentally different, how to build maturity progressively, and how to actually test your plan with tabletop exercises.
How I Passed the AWS Certified Security – Specialty (SCS-C02) Exam in 2025
My real-world journey passing the AWS Certified Security – Specialty (SCS-C02) exam. Study strategies, mistakes, resources, and tips for future candidates.
Automate IAM Least Privilege with Access Analyzer & Terraform
Automate least-privilege IAM roles using Access Analyzer policy generation, CloudTrail-based scoping, and Terraform integration.
How to Detect AWS Root Account Usage (And Respond to It)
Detect and alert on AWS root account usage using CloudTrail, EventBridge, SNS, and optional Slack notifications. Step-by-step setup with CLI commands and Terraform included.