Managing Amazon GuardDuty Security Findings Across Multiple Accounts
In our previous article, we discussed how GuardDuty can help organizations monitor their workloads and AWS accounts from malicious activities and how to monitor findings with Amazon CloudWatch Events. Imagine that your organization has multiple AWS accounts for different workloads, teams, and projects. With every account, you need to monitor GuardDuty findings individually. It will be quite difficult for your security team to monitor these findings with their constant switching between AWS accounts. Amazon [...]
Monitoring GuardDuty Findings with Amazon CloudWatch Events
Large scale cyber attacks are now becoming normal in this age of interconnectivity. As we rely more and more on cloud technologies, companies are looking to tap into digital innovations to improve their businesses. Cyber attacks are costing companies millions of dollars of downtime not to mention the possibility of lawsuits whenever an attack occurs. It is imperative that security teams have the means to prevent, detect, and take actions to ensure that the [...]
Aurora Serverless Tutorial Part 2
In the first part of this tutorial, we gave a walkthrough on Aurora Serverless and its use case. You can read the article here. For this tutorial, we will do some hands-on training and create an Aurora Serverless database. Creating an Aurora Serverless Database: 1. Open the AWS console and go to RDS. Click the button “Create database”. 2. Choose Amazon Aurora. You can either choose MySQL or PostgreSQL compatibility. In this tutorial, we [...]
Aurora Serverless Tutorial – Part 1
What is Aurora Serverless? Before we get into it, let us briefly define Aurora and serverless first. Aurora is a fully managed, closed source relational database that is compatible with MySQL and PostgreSQL. According to Amazon, it is five times faster than the standard MySQL and three times faster than PostgreSQL. It uses a distributed architecture that provides fault tolerance and high availability. Serverless is a technique in the cloud that follows the ‘pay-per-use’ [...]
Google Cloud Source Repositories
Google Cloud Source Repositories Cheat Sheet A fully managed git repository where you can securely manage your code. Features You will be able to extend your git workflow with Cloud Source Repositories. Set up a repository as a Git remote. Push, pull, clone, log, and perform other Git operations as required by your workflow. You can create multiple repositories for a single Google Cloud project. This allows you to organize the code associated with [...]
Google Cloud Deployment Manager
Google Cloud Deployment Manager Cheat Sheet Google Cloud Deployment Manager is an infrastructure deployment service that automates the creation and management of Google Cloud resources. Features You can write template and configuration files and utilize them to create deployments that have a variety of Google Cloud services working together, such as: Cloud Storage Compute Engine Cloud SQL A configuration defines the structure of your deployment. You must specify a configuration on a YAML file [...]
Google Cloud Billing
Bookmarks Features Cloud Billing Account & Payments Profile Cloud Billing Reports Cloud Billing Budgets Overview of Cloud Billing roles in IAM Validate Your Knowledge Google Cloud Billing Cheat Sheet You can configure billing on Google Cloud in a variety of ways to meet different needs. To use Google Cloud services, you must have a valid Cloud Billing account, Features If you have a project that [...]
Google Cloud Console
Google Cloud Console Cheat Sheet Google Cloud Console is a web admin interface to manage your Google cloud infrastructure. Features You can create projects on Google Cloud Console. With Cloud Console, you can quickly find and check the health of all your cloud resources in one place, including virtual machines, network settings, and data storage. Logging Manage and audit user access to project resources. Track down production issues quickly by viewing logs. You can [...]
Google Cloud Key Management Service
Google Cloud KMS Cheat Sheet The Google Cloud Key Management Service (KMS) is a cloud-hosted key management service that enables you to manage encryption keys on the Google Cloud Platform. Features Lets you manage your symmetric and asymmetric cryptographic keys the same way you manage them in an on-premises environment. You can decide to use the keys generated by Cloud KMS with other Google Cloud services. These keys are known as customer-managed encryption keys [...]
Google Cloud Identity and Access Management (IAM)
Bookmarks Features Roles Service Accounts Policy Groups Best Practices Validate Your Knowledge Google Cloud IAM Cheat Sheet Create and manage permissions for your Google Cloud resources with Identity Access Management (IAM). Provides a unified view into your organization’s security policy with built-in auditing to ease compliance purposes. Features Lets you authorize who can take specific actions on resources to give you full control and [...]