Tagged with

Security

Serverless self-service IoT certificate management - Part 1.
Serverless self-service IoT certificate management - Part 1.

2024-11-27

aws, iot, security, serverless


Secure communication is a important in IoT systems, where certificates and trust play a vital role. In this post, I explore the foundations of certificate management, including PKI, certificate chains, and trust. Also I introduce a serverless self-service API using Amazon API Gateway and Lambda for an easy way to create certificates. This hands-on approach is great for learning purposes and development environments, production setups however require robust managed solutions.

Serverless AI powered content moderation service
Serverless AI powered content moderation service

2024-10-31

aws, ai, security, serverless


In this post, I extend the File Manager service I built previously by adding content moderation capabilities. The original service stores files in S3 and records them in a DynamoDB table, using a serverless, event-driven approach. Now, with AWS GuardDuty and Rekognition, I’ve enhanced the service with malware scanning and image moderation.

Protect API Gateway with Amazon Verified Permissions
Protect API Gateway with Amazon Verified Permissions

2024-04-10

serverless, aws


In this post we'll look at Amazon Verified Permissions (AVP) a serverless service for easy management and enforcement of application permissions, and how to use it to secure Amazon API gateway API together with Cognito User Pools.

Protecting a Static Website with JWT and Lambda@Edge
Protecting a Static Website with JWT and Lambda@Edge

2023-10-04

serverless, security


Post about how to use Amazon Cognito together with Lambda@Edge to add protection and authorization to static content hosted with Amazon S3 and CloudFront.

AWS IAM Anywhere
AWS IAM Anywhere

2022-07-22

IAM Security


How to setup and use AWS IAM Anywhere, using IAM Roles in on-premises workload authenticating using x.509 certificates.

Secure your API Gateway APIs with Lambda Authorizer
Secure your API Gateway APIs with Lambda Authorizer

2022-02-28

API Gateway


How to secure your Amazon API Gateway REST based api using a custom AWS Lambda authorizer.

Secure your API Gateway APIs mutual TLS
Secure your API Gateway APIs mutual TLS

2022-01-12

API Gateway


How to secure your Amazon API Gateway REST based api using certificates and mutual TLS (MTLS).

Secure your API Gateway APIs with Auth0
Secure your API Gateway APIs with Auth0

2021-07-04

API Gateway


How to secure your Amazon API Gateway REST based api using Auth0 and API Gateway JWT Authorizer.

Temporary credentials, made easy
Temporary credentials, made easy

2020-03-06

IAM Credentials


I started to write this post almost a year ago but for some reason I never finished it. I ...

This is not the bastion host you are looking for
This is not the bastion host you are looking for

2019-04-01

Security


This is not the bastion host you are looking for! A common way to get ssh access to EC2 in...