Cloud Security Engineering

Cloud security engineering sits between architecture, operations, detection, and response. The goal is to make secure cloud usage easier than insecure cloud usage, then verify those controls with useful signals.

Themes

• aws-centralized-root-access
• identity-and-access
• infrastructure-security
• detections-and-response

Questions Worth Writing About

• What control prevents the most damage if credentials leak?
• Which findings need an alert, and which need an automated ticket?
• Where should security live: platform modules, policy engines, CI, runtime detection, or all of the above?
• How do we keep least privilege from becoming a spreadsheet theater project?