Feb 11 · 12 min read · Introduction You're a DevOps engineer responsible for 50 EC2 instances. It's Friday at 4 PM. A critical CVE ( Common Vulnerabilities and Exposures ) just dropped, a vulnerability in OpenSSL affecting every Linux server. Your security team wants all i...
Join discussion
Jan 31 · 4 min read · Scenario: A company's CloudOps Engineer deploys four new Amazon EC2 instances by using the standard Amazon Linux 2 Amazon Machine Image (AMI). The company needs to be able to use AWS Systems Manager to manage the instances. The Engineer notices that ...
Join discussionSep 29, 2025 · 5 min read · Introduction Introduction Traditionally, managing private EC2 instances in AWS required SSH key pairs and bastion hosts. This approach meant opening inbound ports such as SSH (22) or RDP (3389), which not only increased the attack surface but also ad...
Join discussion
Sep 12, 2025 · 4 min read · SSE를 통해 private DB를 외부에 노출하지 않고 접근할 수 있는 방법을 알아보겠습니다. private Instance에 접근하기 중요한 데이터와 비즈니스 로직이 들어있는 Instance들의 경우에는 보안을 위해 인터넷에 노출시키지 않고 사설망에 두고 운영하는 경우가 많습니다. 사설망에 있는 Instance들을 private Instance라고 합니다. 인터넷에 노출되지 않아 보안이 강력해지지만 관리자들도 접근할 수 없게되어 privat...
Join discussion
Aug 22, 2025 · 5 min read · Introduction: Why SSH Became a Liability SSH has been the default way to access servers for decades. It’s familiar, powerful, and deeply ingrained in how engineers work. But in modern cloud environments, familiar doesn’t always mean secure. A few yea...
Join discussionApr 9, 2025 · 21 min read · Connecting to a private AWS database shouldn’t feel like hacking through a jungle of jump boxes and VPNs. In our team’s early days, though, that was our reality. This post is a candid look at how we improved the developer experience and security of a...
Join discussion
Feb 28, 2025 · 3 min read · Introduction Why move away from SSH? Managing SSH keys is a hassle Open SSH ports expose security risks No built-in logging for SSH sessions What is AWS Systems Manager (SSM) Session Manager? Secure, agent-based access to EC2 Works over AWS APIs, ...
Join discussion
Jan 30, 2025 · 4 min read · Introduction AWS Systems Manager Parameter Store is a powerful service that allows you to securely store and manage configuration data and secrets. However, there are times when you need to duplicate or rename an existing parameter, whether for envir...
Join discussionJul 14, 2024 · 7 min read · Here, the common belief that pictures speaks a thousand words, is not only accepted but also put into practice !! Hello readers, in this hands-on guide, we will learn how can we administer the AWS cloud for the following situation: Consider there is...
Join discussion