A Backup Strategy That Survives a Bad Day
Snapshots in the same account protect against the failures that rarely happen and not the ones that do.
TopicGuide
Cloud Security
Account hardening, keys, identity, network controls and the mistakes that cost most.
10 articles
All topics
Keeping Storage Buckets Private
Public buckets are the most reported cloud data exposure there is.
Cloud Compliance Without the Jargon
Shared responsibility, certifications and data residency explained in terms of what you actually have to do.
MFA on Cloud Accounts: Which Method, and Why It Matters
Not all second factors are equal. The difference between SMS and a security key is the difference between slowing an…
Least Privilege Without Breaking Everything
Everyone agrees with least privilege and almost nobody implements it, because the obvious approach breaks production.
API Keys and Secrets: Where They Leak and How to Stop It
Most cloud breaches start with a credential that should never have existed.
Linux Server Hardening That Actually Matters
Hardening guides run to hundreds of items. About eight of them account for nearly all the real-world benefit.
DDoS and Abuse: What Providers Handle and What You Must
Providers absorb the large, dumb attacks. The ones that take sites down are small, cheap and aimed at your…
Audit Logging: The Thing You Wish You Had Turned On
Audit logs are useless the day you enable them and invaluable the day something goes wrong.
Security Groups, Firewalls and What Actually Filters Your Traffic
Cloud networks have several filtering layers with confusingly similar names.
Keep reading
The rest of the library covers provider choice, server sizing, security, cost control and deployment.