Viewing profile — bnchandrapal

TL;DR: Add MFA to AWS root user. If you don't have MFA with root AND your email server of root email is hosted in same AWS account, it gets tricky to recover. Sidenote, I was shock…

Yes, you're right. Reading my statement in hindsight shows thats not correct. My intention was to convey that you can check for the existence of common IAM users and roles in the a…

https://badshah.io/ Blog posts on Cloud Security, DevSecOps and other personal experiments+experiences in security RSS: https://badshah.io/index.xml

Ahhh. AWS Control tower has not cost but it requires AWS Config to be enabled. Config is yet another AWS service that can get costly over time (if continuous monitoring of changes …

Out of curiosity, did you have any data lakes on S3? Did you find optimization techniques for the same?

There are a few AWS security services which are free/priced reasonably. Some free services: 1. AWS Org (Disable services and enforce guardrails) 2. VPC (Create private networks) 3.…