SMSesank Munukutla (Naga)inazurepj.hashnode.dev·2d ago · 20 min readBreaking and Hardening Azure Workload Identities: From Long-Lived Secrets to GitHub OIDC FederationReplacing a client secret with OIDC does not automatically give you least privilege. It solves one important problem: How does the workload authenticate? It does not automatically solve another equa00
SMSesank Munukutla (Naga)ingcppro.hashnode.dev·Jul 21 · 25 min readEnterprise Multi-Cloud Web Application Firewall Evaluation PlatformEnterprise-Grade Multi-Cloud Web Application Firewall Evaluation Using Terraform Modern enterprises rarely operate within a single cloud provider. Business acquisitions, regulatory requirements, disas00
SMSesank Munukutla (Naga)ingcppro.hashnode.dev·May 29 · 8 min readBuilding a Zero Trust Serverless Security Architecture on GCP using Terraform, Cloud Run, Cloud Armor, and Global Load BalancingIntroduction Traditional perimeter-based security models are increasingly ineffective for modern cloud-native applications, especially in serverless environments where infrastructure abstraction remov00
SMSesank Munukutla (Naga)infridaysecurity.hashnode.dev·May 10 · 6 min readBuilding a Multi-Account Zero-Trust Governance Architecture in AWS Using Terraform, SCPs, and CloudTrailIntroduction Most AWS “security projects” stop at deploying a few services and calling it secure. Real cloud governance engineering is different. The difficult part is not provisioning infrastructure.00
SMSesank Munukutla (Naga)infridaysecurity.hashnode.dev·Feb 13 · 3 min read🔐Project 7: Automated Threat Containment in AWS – Building a Cloud-Native SOAR WorkflowModern cloud security is not about alerts. It’s about automated response. In this project, I built a Cloud-native SOAR workflow that: Detects high-severity threats Automatically isolates an EC2 instance Sends security notifications Requires zero ...00
