Blog / writing
A deep dive into SSRF and cloud instance metadata services: what 169.254.169.254 exposes, how attackers reach it, and why IMDSv2 fixes it.
Read more: SSRF to Full Cloud Compromise: Understanding IMDS RiskWhat scanners miss: a real production gap between Trivy and AWS Inspector, solved with Falco runtime security on AWS EKS.
Read more: Kubernetes Runtime Security with Falco on AWS EKSCan't tell if an IP is public or private? Learn the simple rule and CIDR math behind every reserved IP address range.
Read more: Stop Googling It: Is That IP Public or Private?A common approach to serving static assets in the AWS cloud is to upload files, such as images, PDFs, or icons, to an S3 bucket. A frequent “shortcut” many…
Read more: The Hidden Risks of Public Read Access in S3 for Frontend Assetswhile creating an AWS VPC, you are asked to provide a CIDR block for your VPC or a CIDR block for the different subnets within your availability zone. Have…
Read more: Learn about Subnetting and how it is used in AWS VPCThis article is a step-by-step practical guide on deploying a containerized application on Amazon EKS, monitoring the application using Prometheus and…
Read more: A Comprehensive Guide to Containerizing Applications, Orchestrating with Kubernetes, and Monitoring with Prometheus.Containers have become a crucial component of application development because they help ensure the code works consistently across different development…
Read more: Deploying your Nodejs App on Amazon Elastic Container ServiceUnderstanding Network architecture is very much necessary because it helps you comprehend the kind of architecture your business needs.
Read more: Exploring Traditional and AWS Cloud (2-Tier and 3-Tier) Network DesignsWelcome back to the IAC and CloudFormation Series; this will be the last article for the series. As our CloudFormation Template increases based on the…
Read more: Nested Stacks, Layered Stacks, and Cross Stacks
