Viewing profile — ndomer

Hello! I am the author of this post if anyone has any questions :) The library discussed is available on Github here: https://github.com/transcend-io/secret-value and is on npm to …

One big thing not mentioned here: the massive collection of managed services AWS gives you at no cost. The biggest example is probably IAM, which makes it easy to control which ser…

Apologies for the confusion! I picked BeyondCorp as there seems to be a number of references to it as a more general-cloud term than anything Google Cloud specific. As some example…

(Author here) At Transcend, we use a bastion host (like others have mentioned). The key difference that we do that I don't think has been covered is that our bastion only makes out…

(Author here) I think the second most secure way to handle service authentication is to protect your ports with strong auth, like this article talks about. But the most secure way …

This is a great question! I hoped this would get brought up, as it is very important. I decided against covering in this blog as I felt it was already fairly long, but the tldr is …

(Author of the blog here) This is a great question! I hoped this would get brought up, as it is very important. I decided against covering in this blog as I felt it was already fai…

For sure, VPNs will always be used. I think it'll take a BeyondCorp SaaS company to really take off (or have it become a more "Managed"auth method from the big cloud providers). At…

Hello everyone! At Transcend, we've used BeyondCorp for all of our internal sites, as well as for our communication between services. Please let us know if you have any questions a…

This blog post aims to show that not only are making Lambda@Edge functions in Terraform possible, but that it can actually be a pleasant experience.

Hello! I authored this post, and would love to get some community feedback. I've really enjoyed using both Terraform and Terragrunt, and think you and your company would as well. P…