Cloud security

Encryption, key management, network segmentation, and defense-in-depth for cloud workloads.

• "Envelope encryption and KMS design for application teams" · Note · Every application team eventually faces the same requirement: encrypt sensitive data, manage the keys properly, rotate them, and prove it to an auditor. The naive approaches — a key in…
• "Network segmentation in cloud: VPC design that holds up" · Note · Cloud networking gives you a green field and a dangerous amount of rope. There is no physical firewall to misconfigure — instead there are security groups, NACLs, route tables, and IAM…