Security

A practical approach to protecting AI systems across their lifecycle.

Comprehensive guide to data security across three states - at rest, in transit, and in use - covering encryption, permissions, and resiliency patterns for protecting organizational data.

In this, the second of a multi-part series on securing your workloads, I’ll look more broadly and why, where, and how, you should be securing your network. I’ll look at both the principles and AWS services that help you reduce the risk of network based breaches. The introduction to the Security at all levels gives an overview of what I believe security in depth means and why we should all follow the principles.

Security in depth, defence in depth, layered security, zero trust; all terms that get spoken but often not fully understood. Mainly because much of these security principles have evolved over time and depending on the lens applied a different term has emerged. In this, the first of a series focused on security, I’ll try and unpack what security in depth means (at least for me) and why you should be considering a layered security approach. I will try and keep these posts a mix of technical and non-technical details, and where possible utilise real world examples to highlight my thoughts. Future post will focus on the implementation of security from different perspectives such as application, data, and infrastructure.

Prevent bill shock and unexpected AWS charges through account security, budgets, cost anomaly detection, credential protection, and service cost understanding.

So you built and secured your VPC. But solutions are not working? How to understand VPC Flow Logs and use them to troubleshoot connectivity in AWS.

Practical guide to implementing layered network security using NACLs and Security Groups in multi-tier VPC architectures and production environments.

Technical comparison of Network ACLs and Security Groups - understanding stateful vs stateless processing, rule evaluation, and when to use each.