https://saugaattiwari.com.np/topics/aws-security/Recent content in AWS Security on Saugat TiwariHugo -- 0.155.0en-ushttps://saugaattiwari.com.np/blog/aws-lambda-microvms/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/aws-lambda-microvms/AWS Lambda MicroVMs launched June 2026. This hands-on guide walks through the complete setup: IAM roles, MicroVM image build, launching, auth tokens, and hitting your endpoint including real errors and fixes not in the AWS docs yet.https://saugaattiwari.com.np/blog/aws-config-conformance-packs/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/aws-config-conformance-packs/A deep dive into AWS Config Conformance Packs: methodology, implementation, and lifecycle management for enforcing organizational compliance across accounts and regions.https://saugaattiwari.com.np/blog/centralized-log-management-using-cloudtrail/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/centralized-log-management-using-cloudtrail/How to build centralized log management in AWS using AWS CloudTrail to capture, aggregate, and analyse account and API activity across your organization.https://saugaattiwari.com.np/blog/aws-rcp/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/aws-rcp/A comprehensive guide to AWS Resource Control Policies (RCPs) and how they give you centralized control over resource permissions across your AWS Organization.https://saugaattiwari.com.np/blog/aws-infrastructure-security/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/aws-infrastructure-security/A simple, practical walkthrough of securing AWS infrastructure, covering the core services and best practices for protecting your data and applications in the cloud.https://saugaattiwari.com.np/blog/career-plan-devops-to-devsecops/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/career-plan-devops-to-devsecops/Why I am transitioning from DevOps to DevSecOps, and why integrating security into every stage of the software delivery lifecycle matters more than ever.https://saugaattiwari.com.np/blog/aws-github-oidc/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/aws-github-oidc/Why you should stop storing long-lived AWS keys in GitHub secrets and use GitHub OIDC federation instead for secure, keyless deployments from GitHub Actions.https://saugaattiwari.com.np/blog/aws-landing-zone/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/aws-landing-zone/How to set up a well-architected, automated AWS Landing Zone using AWS Control Tower to build a secure, compliant multi-account environment from the ground up.https://saugaattiwari.com.np/blog/nagios/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/nagios/A hands-on guide to setting up and configuring Nagios XI to monitor your servers, services, and network devices.https://saugaattiwari.com.np/blog/securing-lambda-functions/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/securing-lambda-functions/Best practices for securing AWS Lambda functions and preventing unauthorized access, from least-privilege IAM to protecting sensitive data in serverless apps.https://saugaattiwari.com.np/blog/monitor-vpc-interface-endpoints/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/monitor-vpc-interface-endpoints/How to monitor AWS PrivateLink VPC interface endpoints with CloudWatch to keep these private-connectivity components performant and available.https://saugaattiwari.com.np/blog/protecting-aws-organization-scps/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/protecting-aws-organization-scps/How to protect your AWS Organization with Service Control Policies (SCPs) for centralized, account-wide permission guardrails that strengthen security and compliance.https://saugaattiwari.com.np/blog/medium-packer-ansible-terraform/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/medium-packer-ansible-terraform/Lessons learned combining Packer, Ansible, and Terraform into one workflow to build, configure, and manage infrastructure the DevOps way.https://saugaattiwari.com.np/blog/medium-ansible-galaxy/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/medium-ansible-galaxy/How Ansible Galaxy helps automate cloud infrastructure configuration on AWS with reusable, standardized, community-driven content for consistency and scale.https://saugaattiwari.com.np/blog/medium-aws-site-to-site-vpn/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/blog/medium-aws-site-to-site-vpn/A step-by-step guide to configuring an AWS Site-to-Site VPN to securely connect your on-premises network to your AWS VPC.https://saugaattiwari.com.np/labs/github-oidc/Mon, 01 Jan 0001 00:00:00 +0000https://saugaattiwari.com.np/labs/github-oidc/Deploy private artifacts using short-lived AWS credentials.