© 2026 Hashnode
Introduction You're a DevOps engineer responsible for 50 EC2 instances. It's Friday at 4 PM. A critical CVE ( Common Vulnerabilities and Exposures ) just dropped, a vulnerability in OpenSSL affecting every Linux server. Your security team wants all i...

Introduction Introduction Traditionally, managing private EC2 instances in AWS required SSH key pairs and bastion hosts. This approach meant opening inbound ports such as SSH (22) or RDP (3389), which not only increased the attack surface but also ad...

Connecting to a private AWS database shouldn’t feel like hacking through a jungle of jump boxes and VPNs. In our team’s early days, though, that was our reality. This post is a candid look at how we improved the developer experience and security of a...

Introduction Why move away from SSH? Managing SSH keys is a hassle Open SSH ports expose security risks No built-in logging for SSH sessions What is AWS Systems Manager (SSM) Session Manager? Secure, agent-based access to EC2 Works over AWS APIs, ...
