AmazonSSMManagedInstanceCore: Full Policy Breakdown
Full breakdown of every permission in the AmazonSSMManagedInstanceCore IAM policy, plus a least-privilege custom alternative for production EC2 instances.
Ssm
AWS Session Manager Setup: Replace SSH with Zero Inbound Ports
Step-by-step SSM Session Manager setup — IAM role, instance profile, session logging, and removing SSH entirely. No keys, no bastions, no port 22.
AWS Incident Response Guide: The Framework for Cloud-Native IR (2026)
The full framework for AWS incident response — why cloud IR is fundamentally different, how to build maturity progressively, and how to actually test your plan with tabletop exercises.