Having an access key for the Root user poses the risk of being misused or stolen, since this user has unrestricted access in the account. If your Root user also has access keys that you would like to remove, here is a step-by-step guide to do so.
Unencrypted database connections allow attackers on the network to perform man-in-the-middle attacks that can be used to steal information and even modify data. In this article we will take a quick look at how to enable encryption for incoming connections on CloudSQL databases.
Prevent password reuse policy can be easily enabled in AWS. This helps in preventing users from reusing their old passwords after expiry or when password change operations are performed. This article provides a step by step walkthrough of how you can enable Prevent Password Reuse policy on AWS, both in video and text for your preferred medium of learning.
EBS volumes are not encrypted by default. Encrypting these adds a layer of security to the data stored on it.
For any managed service on AWS, the more you rely on IAM for authentication and authorization, the more you reduce your attack surface. In this article, we will see how we can create users of various permission levels in an AWS EKS cluster and map the user to an AWS IAM user.
This article gives introduction on Service Control Policies (SCPs) in AWS .
