19 items across 4 sections
Leave EC2 behind. Stop a whole Fargate task set and force AWS Lambda invocations to error and to stall, using AWS FIS. Real Terraform, real numbers, and the exact setup gotchas for the Lambda fault-injection extension.
Part 1 of 4 in the Lambda Security Series. Why "managed" doesn't mean secure: overprivileged execution roles, secrets in environment variables, public function URLs, deprecated runtimes, and event-data injection.
Part 2 of 4 in the Lambda Security Series. A deep look at lambda-security-scanner: 19 read-only checks across configuration, access control, network, logging, and supply chain, scored 0 to 100 and mapped to ten compliance frameworks.
Part 3 of 4 in the Lambda Security Series. Map every Lambda security finding to ten compliance frameworks (PCI DSS, HIPAA, SOC 2, ISO 27001, NIST, GDPR), then fix each of the 19 checks with a precise AWS CLI command.
Part 4 of 4 in the Lambda Security Series. The half no posture scanner reaches: event-data injection, stealable execution-role credentials, insecure deserialization, dependency and code scanning, runtime secrets, and detection.
Deploy and run Python and Node.js functions locally with LocalEmu, executed inside the official AWS Lambda runtime images. No AWS account, no credentials, no cost.
How I built CognitoApi, an open-source serverless authentication API on AWS Cognito that handles 50,000 users for free with MFA, token management, and complete user lifecycle support.
How I built a secure, scalable file sharing solution using AWS Lambda, API Gateway, and Cognito with zero infrastructure to manage and 91% cost reduction.
A complete beginner-to-builder guide for AWS SAM with Python. Learn to create, test locally, deploy, debug, and manage serverless APIs step by step.
A serverless IAM activity monitoring tool that tracks IAM, STS, and console signin events across all AWS regions with real-time security alerts and long-term analytics.
Learn how to systematically identify Lambda functions running on deprecated runtimes across all AWS regions with CLI and Lambda automation tools.
Complete guide to AWS Lambda covering the execution model, deployment options, triggers, cold starts, concurrency, pricing, and production architecture patterns.
Complete guide to Amazon DynamoDB covering data modeling, primary keys, secondary indexes, capacity modes, transactions, streams, global tables, DAX caching, and production best practices.
Complete guide to Amazon API Gateway covering REST API vs HTTP API, Lambda integration, authorization, custom domains, throttling, caching, WebSocket APIs, and production best practices.
Complete guide to Amazon SQS and SNS covering standard and FIFO queues, dead-letter queues, SNS fan-out, message filtering, Lambda integration, encryption, pricing, and event-driven architecture patterns.
Six production-proven AWS architecture patterns: three-tier web apps, serverless APIs, event-driven processing, static websites, data lakes, and multi-region disaster recovery with diagrams and implementation guides.
Our AWS security experts can help you implement best practices across all these topics.
Contact Us