6 articles tagged with "aws"
The cloud bill isn't a finance problem that got outsourced to engineering. It's an engineering problem that finance is being blamed for. Here's how to think about cost like a system property, not a monthly surprise.
IAM policies control what identities can do — but SCPs control what's even possible. Here's why Service Control Policies are the most underused security tool in AWS Organizations, and how to actually use them.
Hardcoded AWS credentials in Docker containers and .env files are a breach waiting to happen. Workload identity gives your services cloud access without a single long-lived key in sight.
Your 8-core VM is running at 3% CPU. Your Kubernetes pods are OOMKilled every Tuesday. Right-sizing fixes both — but only if you stop guessing and start measuring what your workloads actually need.
KMS doesn't encrypt your data — it encrypts the key that encrypts your data. That's envelope encryption, and once it clicks, cloud secrets management makes total sense.
Server-Side Request Forgery sounds complicated, but the concept is delightfully evil: trick a server into making HTTP requests *it* shouldn't be making, then read what comes back. It took down Capital One. It lives in your URL-fetching code. Let's fix that.