Cloud Security

Infrastructure as code (IaC) is undoubtedly changing how engineers approach the cloud. IaC, when coupled with dev tools and automation, opens up new avenues for infrastructure performance, scalability, and now security. By embedding IaC security and compliance controls into your version control systems and CI/CD pipelines, you can start

In terms of AWS security, first the good news: Amazon Web Services offers an impressive collection of security monitoring and logging capabilities. Now the bad news: these tools are entirely too fragmented and complex, with a range of little-known gaps and complications which can be impermeable to even experienced cloud

Introduction Kubernetes, like any other secure system, supports the following concepts: * Authentication: Verifying and proving identities for users and groups, and service accounts * Authorization: Allowing users to perform specific actions with Kubernetes resources * Accounting: Storing subjects actions, typically for auditing purposes Authorization – the process of handling users’ access to resources

Log Reality It is very common that an organisation keeps their logs (or a subset of them) whether on premise or on cloud such as AWS, often forwarding them to a Security Incident and Event Management (SIEM) system. There are a few main drivers for doing so: * Log Retention — frameworks

VIMAGE was first presented in the Paper “Implementing a Clonable Network Stack in the FreeBSD Kernel” by Macro Zec in 2003 and VIMAGE code appeared first in FreeBSD 8.0, however it wasn’t until FreeBSD 12.0 that VIMAGE was built into FreeBSD GENERIC kernels and it is a

TrueTime’s benefits for Cloud Spanner TrueTime is a highly available, distributed clock that is provided to applications on all Google servers1. TrueTime enables applications to generate monotonically increasing timestamps: an application can compute a timestamp T that is guaranteed to be greater than any timestamp T’ if T’ finished