Hardened Amazon Linux 2 AMI with EC2 Image Builder
Step-by-step guide to build a hardened Amazon Linux 2 AMI with EC2 Image Builder including CIS benchmarks, IMDSv2 enforcement, auditd, and logging configuration.
Security
IAM Least Privilege in AWS: Access Analyzer Guide
How to audit and refine IAM permissions using Access Analyzer, CloudTrail, and service access history — enforcing least privilege the right way in AWS.
AWS Session Manager Setup: Replace SSH with Zero Inbound Ports
Step-by-step SSM Session Manager setup — IAM role, instance profile, session logging, and removing SSH entirely. No keys, no bastions, no port 22.
EC2 Hardening Guide: Secure AWS Instances Step by Step
This guide delves into the technical aspects of hardening EC2 instances, covering topics from instance selection to monitoring and automation, aligning with AWS’s security recommendations.
AWS Incident Response Toolkit: Playbook, Terraform Automation & Forensic Tools
A complete incident response toolkit for AWS — playbook template, Terraform notification pipeline, Lambda alert functions, and a forensic tool reference. Free download.
Automate IAM Least Privilege with Access Analyzer & Terraform
Automate least-privilege IAM roles using Access Analyzer policy generation, CloudTrail-based scoping, and Terraform integration.
How to Detect AWS Root Account Usage (And Respond to It)
Detect and alert on AWS root account usage using CloudTrail, EventBridge, SNS, and optional Slack notifications. Step-by-step setup with CLI commands and Terraform included.