Governance
- CloudWatch Logs: Cost deep dive
Understanding CloudWatch Logs pricing, pinpointing cost drivers with Cost Explorer and Athena, and why the Infrequent Access tier might not save you money.
- AWS Config: Cost deep dive
A guide to AWS Config pricing, recording options, and how SecurityHub rollouts silently increase your bill.
- 7 ways to access your organizational backbone (powered by AWS)
Engaging in a cloud engineer's mindset encourages many responsibilities. The cloud is a great place for developers and has been proven to...
- CIEM Part 2: Measure risk probability in IAM
This is the second part of my CIEM series. In the first part, we covered the least-privilege principle and found out that one important...
- CIEM Part 1: How least privilege leads to a false sense of security
This is the start of a series about Cloud Identity Entitlement Management (CIEM). I will try to explain in depth what challenges you will...
- Cloud Trail and Athena: Yet another solution design
Using Athena to query cloud trail logs is a common solution designed for mid to big-sized AWS environments. Typically an IT Platform team...
- Secure IT Infrastructure with ABAC and SCP
Whoever starts to use a multi-account environment on AWS will face a lot of challenges in terms of governance and compliance. As a...
- AWS Identity Center: How to retrieve your current account assignments
Find out how to retrieve Account Assignments in AWS Identity Center.