Author Archives: anuj - Page 35
Security Readers and Security Admins in GCP
Also read - Built in Security related Managed Policies in AWS and GCP GCP has over a few thousand built in (predefined) roles for a variety of activities. Level 1…
Best Practices around GCP Service Accounts
This content is password protected. To view it please enter your password below: Password:
S3 data protection best practices
Notes from the Field Apart from standard AWS recommendations around s3 data protection, these are some tips from hands on engagements around S3 data backups (from data centers) S3…
Protecting Data in S3 Buckets
Broadly, you can protect these via IAM Policies and via Encryption Default Encryption The objects are encrypted using server-side encryption with either Amazon S3-managed keys (SSE-S3) or customer master keys…
GCP Foundation via Terraform
Google has put out a few examples of cloud foundational components - integrated into a single terraform solution that is called from a bootstrap module. Need an experienced AWS/GCP/Azure…
F5 on AWS
What roles are required to install BigIP on an EC2 or Compute Instance? F5 requires a custom AWS role with three policies attached: { "Version": "2012-10-17", "Statement": , "Resource": "*"…
Backup and Recovery AWS, Azure or GCP
Backup and recovery conversations often get derailed. While everyone understands RTO and RPO, it is hard to apply these metrics in a granular fashion. To that end, it is better…
ADFS and SSO Federated Users in AWS
(Also see - Functional Roles and AWS managed policies) Permissions Set and SSO Groups SSO Groups are created within AWS IAM (they come directly from the IdP). The actual permissions…
AWS Managed Policies for work functions
Keep in mind that anything with 'Admin' in it allows creation of other users as well as attaching / detaching policies to users. Anything with 'user' in it, has no…
Custom IAM Roles in GCP
Also read - Roles, IAM in GCP and AWS Managed Policies for On Premises Work Functions and Base Roles for Developers in GCP Can Anyone Create Custom Roles? No. Only…