Author Archives: anuj - Page 36
Protecting Data in S3 Buckets
Broadly, you can protect these via IAM Policies and via Encryption Default Encryption The objects are encrypted using server-side encryption with either Amazon S3-managed keys (SSE-S3) or customer master keys…
GCP Foundation via Terraform
Google has put out a few examples of cloud foundational components - integrated into a single terraform solution that is called from a bootstrap module. Need an experienced AWS/GCP/Azure…
F5 on AWS
What roles are required to install BigIP on an EC2 or Compute Instance? F5 requires a custom AWS role with three policies attached: { "Version": "2012-10-17", "Statement": , "Resource": "*"…
Backup and Recovery AWS, Azure or GCP
Backup and recovery conversations often get derailed. While everyone understands RTO and RPO, it is hard to apply these metrics in a granular fashion. To that end, it is better…
ADFS and SSO Federated Users in AWS
(Also see - Functional Roles and AWS managed policies) Permissions Set and SSO Groups SSO Groups are created within AWS IAM (they come directly from the IdP). The actual permissions…
AWS Managed Policies for work functions
Keep in mind that anything with 'Admin' in it allows creation of other users as well as attaching / detaching policies to users. Anything with 'user' in it, has no…
Custom IAM Roles in GCP
Also read - Roles, IAM in GCP and AWS Managed Policies for On Premises Work Functions and Base Roles for Developers in GCP Can Anyone Create Custom Roles? No. Only…
AWS Custom Groups and (Managed) Policies Needed
This is meant to be a quick recap of some recommended custom AWS Groups and the included Managed Policies. A Network Admin Group AWS managed policy name: NetworkAdministrator A Security Auditor…
Oracle on AWS RDS
These are some field tips for migrating Oracle databases to AWS RDS (or custom EC2 instances). Tuning, Monitoring, Pricing, Backup tips are included. Often, a reference to the appropriate AWS…
KMS Basics AWS (or GCP)
This content is password protected. To view it please enter your password below: Password: