Input Validation: Because Users Are Creative, and Attackers Are More Creative
There is a special kind of optimism that exists in software development.
Read article: Input Validation: Because Users Are Creative, and Attackers Are More CreativeAWS
6 articles tagged AWS.
AWS Outposts Migration Security Considerations: Part 2
The most common reaction to that image has been, “WTF?” I decided to go with it and use the image as originally generated.
Read article: AWS Outposts Migration Security Considerations: Part 2
AWS Outposts Migration Security Considerations: Part 1
AWS Outposts moves the AWS cloud services into your onprem data center. It is a hybrid-cloud platform from Amazon Web Services that extends AWS infrastructure and services into your own datacenter, colocation facility, etc. With AWS Outposts, AWS ships you AWS-designed racks with pre-configured…
Read article: AWS Outposts Migration Security Considerations: Part 1
Achieving Application Environment Isolation
Your production environment should be isolated from your non-production environments. In fact, every application environment should be isolated from every other environment. Sounds simple in practice, but how does one accomplish this? Through a multi-layered isolation strategy:
Read article: Achieving Application Environment Isolation
OpenID Connect Authorization Code Flow with AWS Cognito
Earlier this year, I was working on a project that was using AWS Cognito (as the identity stack) and the AWS API Gateway (as the front-door to all of the API calls). AWS Cognito is a relatively new player in the identity space. It doesn’t support the full OAuth2 or OpenID Connect specs, but, does…
Read article: OpenID Connect Authorization Code Flow with AWS Cognito
The Many Ways of Approaching Identity Architecture
At some point in the finite past, I had the good fortune to become involved in a project that was essentially completely greenfield. An unnamed company, in an unnamed industry decided to try something new. In a page right out of “The Innovator’s dilemma”, they spun up a new, separate organization,…
Read article: The Many Ways of Approaching Identity Architecture