Technology

Defining Security Invariants
Defining Security Invariants

Defining Security Invariants - 2025 revision to include SCP, RCP, Declarative Policies

Implementing Security Invariants in an AWS Management Account
Implementing Security Invariants in an AWS Management Account

How do you deploy security invariants in an AWS org management account? With Permission Boundaries tied to every principal.

Minimally Viable Cloud Governance
Minimally Viable Cloud Governance

Everyone has a preferred cloud provider and you probably govern that one pretty well. But like it or not, your organization is using the other providers and you need to govern them too. This blog post covers the minimum things to do in your non-preferred providers.

Public Access Key - 2023
Public Access Key - 2023

I deliberately published an Access Key and Secrets. Here's what happened.