Eliminating resource wastage is a low-hanging fruit that contributes the most to your sustainability goals. A subsequent step is to maximize the utilization of provisioned resources by optimizing software design….
In order to trigger alerts when credentials of break-glass users are used, organizations can implement a solution that is detailed in Figure 12.2: Figure 12.2: Monitoring usage of security break-glass….
A lot of integrations that previously had to be built out manually are now natively supported by many AWS services. While this greatly improves the development velocity, it also leads….
It’s worth repeating – no AWS solution, service, or framework is going to fulfill all your Landing Zone needs as-is. Every customer is different, and every use case requires in-depth….
The Landing Zone’s design needs to consider who would access the AWS accounts, and what kind of permissions they will have. The principle of least privilege helps as a guide….
Large enterprises typically have dedicated teams handling security, network operations, audit, software development, and so on. These teams are often grouped by cost centers, require customized access controls, and are….
The ever-increasing pressure to deliver more features sometimes derails the value streams from focusing on their core differentiated offering. They might get pulled into tasks that are temporary but require….
AWS services such as AWS Security Hub, AWS CloudFormation, and AWS Config, among many others, can leverage an AWS Organizations feature known as Trusted Access to piggyback on organization service….
A Landing Zone is the concept of a pre-defined multi-account environment that allows you to securely onboard application workloads onto the cloud in an automated way. A good multi-account foundation….
Well-Architected is an AWS offering that grants customers access to the wealth of knowledge acquired through numerous architectural reviews with other customers, over the years. This ensures that customers are….
