Published in Towards AWS·PinnedMember-onlySetup AWS SecurityHub with Terraform in Less than a MinuteA simple example of setting up SecurityHub at the Organization level with Terraform. — I’m gonna show you how to create a SecurityHub multi-account setup using terraform. AWS Organizations If you are using AWS Organizations, you have something similar to the setup below. For configuring SecurityHub at the Organization level, you need to add securityhub.amazonaws.com to service access principals. …Dev Ops2 min read
Published in Better Programming·PinnedMember-onlyStore Secrets in Repositories (Safely), and Deploy Them With TerraformStore sensitive values even in public repositories — The title sounds promising, right? Store secrets in repositories it’s challenging, and it should be. Mostly because secret values are the most sensitive stuff in every organization. You’re managing the keys of the kingdom, and they should be treated with the importance they deserve. Like Peter’s uncle used to say: …Terraform5 min read
Published in Towards AWS·PinnedMember-only10 Things I Did to Increase CloudTrail Logs SecurityEngineering teams that build, scale, and manage cloud-based applications on AWS know that at some point in time, their applications and infrastructure will be under attack. But as applications expand and new features are added, securing workloads in AWS becomes an increasingly complex task. To add visibility and audibility, AWS…AWS10 min read
Published in Better Programming·Feb 15Member-onlyMulti-Account Multi-Region Inventory on AWSRun SQL-like queries and gets a full inventory of AWS resources from all accounts and regions — In this article, I’m gonna explain how to use AWS Config to have a complete inventory of resources, in all accounts and regions, from a centralized point where I can run SQL queries to filter them. Run SQL queries with Config From AWS product page: AWS Config is a service that enables you to assess…AWS4 min read
Published in Better Programming·Jan 24Member-onlyA Deep Dive Into DevSecOps: CI/CD Pipeline SecurityBest practices and tools to master DevSecOps — What is DevSecOps? DevSecOps stands for Development, Security, and Operations. In the most basic meaning, it’s defined as an approach that promotes security in the SDLC (Software Development Life Cycle). The primary goal is shift-to-left the responsibility. Security tools are integrated early in the development cycle, usually in CI/CD pipelines, to let Devs…Dev Ops6 min read
Published in Towards AWS·Jan 19Member-onlyUsing AWS Macie to classify databasesData breaches are the number 1 threat today, and every company should be doing something to protect their most sensitive data. That sounds nice on paper but in practice, it’s a pain in the ass. Setting up security policies for protecting data is not big trouble, I think that this…Data Security4 min read
Apr 15, 2020Member-onlyAWS HoneyKeys — Fast and reliable way to detect intrusions on serversHackers love AWS Keys, It gives access to an entire cloud. It’s the most valuable treasure that an attacker could find inside a compromised server. — In this post I will show how we can use fake access keys, to detect compromised instances in our production environment. Scope We will talk about how to detect intruders early on systems, with real-time alerts. We won’t discuss mitigations or protections to prevent this kind of attack.AWS6 min read
