Protecting and Observing AWS Architectures: WAF, Shield, Secrets, and Monitoring

A small team ships a public API on an Application Load Balancer. No WAF attached. Database credentials sit in plain text inside the EC2 user data script, because that was faster than setting up someth