Breaking and Hardening Azure Workload Identities: From Long-Lived Secrets to GitHub OIDC FederationReplacing a client secret with OIDC does not automatically give you least privilege. It solves one important problem: How does the workload authenticate? It does not automatically solve another equaSep 10 · 20 min readazurepj.hashnode.dev
Enterprise Multi-Cloud Web Application Firewall Evaluation PlatformEnterprise-Grade Multi-Cloud Web Application Firewall Evaluation Using Terraform Modern enterprises rarely operate within a single cloud provider. Business acquisitions, regulatory requirements, disasJul 21 · 25 min readgcppro.hashnode.dev
Building a Zero Trust Serverless Security Architecture on GCP using Terraform, Cloud Run, Cloud Armor, and Global Load BalancingIntroduction Traditional perimeter-based security models are increasingly ineffective for modern cloud-native applications, especially in serverless environments where infrastructure abstraction removMay 29 · 8 min readgcppro.hashnode.dev
Building a Multi-Account Zero-Trust Governance Architecture in AWS Using Terraform, SCPs, and CloudTrailIntroduction Most AWS “security projects” stop at deploying a few services and calling it secure. Real cloud governance engineering is different. The difficult part is not provisioning infrastructure.May 10 · 6 min readfridaysecurity.hashnode.dev
🔐Project 7: Automated Threat Containment in AWS – Building a Cloud-Native SOAR WorkflowModern cloud security is not about alerts. It’s about automated response. In this project, I built a Cloud-native SOAR workflow that: Detects high-severity threats Automatically isolates an EC2 instance Sends security notifications Requires zero ...Feb 13 · 3 min readfridaysecurity.hashnode.dev
