It’s easy to imagine a hacker breaching an environment using a zero-day exploit but often breaches are from far more mundane reasons. The World Economic Forum’s Global Risks Report found that 95% of cybersecurity issues are a result of human error. Let’s look at three common Cloud Configuration Management mistakes and how to avoid them.… Read more »
Author: John Richards
What’s in a Name? – AWS Security Group Naming Conventions
A well-developed naming convention saves time, reduces mistakes, and increases security. The veracity of that statement may seem questionable at first glance. Does it matter what an AWS security group is named? The name has no impact on functionality, so it may seem like a waste of time to create governance around it. However, as… Read more »
Did you leave your AWS VPC door open? – 4 best practices for securing Amazon VPCs
How private a VPC is, depends on the choices made when setting it up. The default options that provide quick and easy access can also be inherently insecure. Amazon’s Virtual Private Cloud (VPC) is a virtual networking concept that allows AWS resources to communicate with each other over a private virtual network.