Tagged with

Security

Protect API Gateway with Amazon Verified Permissions

2024-04-10

serverless, aws


In this post we'll look at Amazon Verified Permissions (AVP) a serverless service for easy management and enforcement of application permissions, and how to use it to secure Amazon API gateway API together with Cognito User Pools.

Protecting a Static Website with JWT and Lambda@Edge

2023-10-04

serverless, security


Post about how to use Amazon Cognito together with Lambda@Edge to add protection and authorization to static content hosted with Amazon S3 and CloudFront.

AWS IAM Anywhere

2022-07-22

IAM Security


How to setup and use AWS IAM Anywhere, using IAM Roles in on-premises workload authenticating using x.509 certificates.

Secure your API Gateway APIs with Lambda Authorizer

2022-02-28

API Gateway


How to secure your Amazon API Gateway REST based api using a custom AWS Lambda authorizer.

Secure your API Gateway APIs mutual TLS

2022-01-12

API Gateway


How to secure your Amazon API Gateway REST based api using certificates and mutual TLS (MTLS).

Secure your API Gateway APIs with Auth0

2021-07-04

API Gateway


How to secure your Amazon API Gateway REST based api using Auth0 and API Gateway JWT Authorizer.

Temporary credentials, made easy

2020-03-06

IAM Credentials


I started to write this post almost a year ago but for some reason I never finished it. I ...

This is not the bastion host you are looking for

2019-04-01

Security


This is not the bastion host you are looking for! A common way to get ssh access to EC2 in...