Security Basics
The three controls that stop most cloud account compromises: MFA on the root identity, roles instead of long lived keys, and least privilege on AWS, Google Cloud, and Azure, plus a takeover checklist.
6 min read
Security Basics
How identities, groups, policies, and scopes fit together in AWS IAM, Google Cloud IAM, Azure RBAC, Oracle Cloud compartments, and IBM Cloud access groups, with patterns that work on every provider.
5 min read
Security Basics
Harden a Linux VPS on DigitalOcean, Hetzner, or BinaryLane with a provider firewall and ufw, key only SSH, Fail2ban jails for public services, and unattended security updates that keep packages patched.
6 min read
Security Basics
Where cloud secrets belong: AWS Secrets Manager, Parameter Store, Google Secret Manager, and Azure Key Vault, scoped API tokens on Vultr and Linode, delivery to applications, rotation, and leak detection.
6 min read
Security Basics
What cloud audit logs record, how AWS CloudTrail, Google Cloud Audit Logs, the Azure Monitor activity log, and Alibaba Cloud ActionTrail differ, and how to retain, search, protect, and alert on them.
6 min read
Security Basics
What cloud acceptable use policies prohibit on AWS, DigitalOcean, Amazon SES, and other providers, the extra rules for email sending, how abuse enforcement works, and how to keep an account compliant.
5 min read