I saw a conversation happening on LinkedIn after the announcement of Delegated Administration for CloudFormation StackSets accompanied with concerns about governance of the solution. With a little too much hubris I threw down how IAM guardrails could solve all the problems…then I got around to actually digging into how they…

I know jq is far more powerful than what is represented here. This is an attempt to have a place to refer back to since I always have to refamiliarize myself with the syntax and logic each time I revisit jq. I hope that this helps someone else in getting…

Enforcing the use of approved and secured resources within AWS compute just got simpler. Thanks to a recent update by AWS, organizations can supplement their image creation process with additional guardrails. …

Managing baseline AMIs is critical to providing a secure, quick to production solution. …

Prior to all certification tests, I poke around on reddit, etc. to get a feeling for what others have experienced with the test that I’m planning on taking. Since more of us are doing more activities from home, it was disappointing to see that many people had very negative opinions…

Many organizations have established Security Programs that include a Security Information and Event Management solution or application such as Splunk, Elasticsearch, logz.io, etc. One of the first steps to enable the security team to respond to issues is ensuring they know the issues exist. Enabling a delegated administrator account for…

Having defined new standards and begun remediation efforts, it becomes obvious when innovation begins to outpace governance. Teams start provisioning new resources with noncompliant configurations quicker than operations teams can remediate the discrepancies. It becomes a hole that grows exceedingly difficult to dig back out from under. Config service provides…

In attempting to ready all new accounts for provisioning of resources through our CICD pipeline, we needed to create roles that trusted roles in our pipeline account. However, seeing as my team was creating new accounts before the DevOps team was able to provision the role in the pipeline account…

The use of CloudFormation StackSets to deploy resources across multiple accounts has proven to be incredibly powerful and convenient. With the introduction of service-managed deployments, the ability to implement account baselines at an OU level has reduced the overhead of creation and management of the resources. With self-managed deployments of…