Published inCloud Security·PinnedAutomating Cybersecurity Metrics (ACM)A series of blog posts on cybersecurity metrics and security automation — One of my series on Cybersecurity. Also AWS Security. Free Content on Jobs in Cybersecurity | Sign up for the Email List GitHub Repo (In Progress): SecurityMetricsAutomation/README.md at main · tradichel/SecurityMetricsAutomation Contribute to tradichel/SecurityMetricsAutomation development by creating an account on GitHub.github.comCybersecurity Metrics27 min readCybersecurity Metrics27 min read
Published inCloud Security·PinnedCybersecurity Author, Teri RadichelPublications and Presentations by Teri Radichel — Free Content on Jobs in Cybersecurity | Sign up for the Email List Teri Radichel is a professional cybersecurity speaker, trainer, and author. The following are links to some of her past presentations, articles, blog posts, books, and security classes. …Cloud Security5 min readCloud Security5 min read
Published inCloud Security·2 hours agoMember-onlyHow I Just Significantly Improved Network Performance on AWSDo this for the better good of the Internet and a speedier network for yourself — One of my posts on Network Security. Free Content on Jobs in Cybersecurity | Sign up for the Email List I have been having some issues with VPC endpoints and ensuring that private traffic goes to private IP addresses as it should. Anyway, I just enabled VPC endpoints and BLOCKED…Network6 min readNetwork6 min read
Published inCloud Security·1 day agoMember-onlyUsing a Secrets Manager in an AWS Lambda Function in a Private NetworkACM.317 Lack of sufficient logging and generic error messages makes troubleshooting Lambda timeouts complicated — Part of my series on Automating Cybersecurity Metrics. Lambda. Network Security. GitHub Security. Container Security. Deploying a Static Website. The Code. Free Content on Jobs in Cybersecurity | Sign up for the Email List In the last post I added a personal access token in GitHub and granted access from…Lambda17 min readLambda17 min read
Published inBugs That Bite·1 day agoMember-onlyNice Summary of Yum CommandsThis page has a good cheatsheet for Yum commands. Tagging it here so I can find it later :) Will come in handing when troubleshooting yum error messages or trying to figure out what happened via history command, etc. Follow for updates. Teri Radichel | © 2nd Sight Lab…Yum2 min readYum2 min read
Published inCloud Security·2 days agoMember-onlyConfiguring GitHub With a Personal Access Token and Network Access for a Lambda functionACM.316 Configuring a fine-grained personal access token and network access to a GitHub organization for an AWS NAT — Part of my series on Automating Cybersecurity Metrics. Lambda. Network Security. GitHub Security. Deploying a Static Website. The Code. Free Content on Jobs in Cybersecurity | Sign up for the Email List In the last post I created an AWS Secrets Manager Secret that has a policy that grants a…Github7 min readGithub7 min read
Published inBugs That Bite·2 days agoMember-onlyResource handler returned message: “Partition “” is not valid for resource “arn::ImportValue Fn::Sub ${x}x:*”.What in the world does that mean? — One of my posts on CloudFormation errors and how to fix them. This is another case of a CloudFormation bug that seems like would be easy enough to detect and report back correctly, even before sending a template to the CloudFormation service. …Error Message2 min readError Message2 min read
Published inCloud Security·2 days agoMember-onlyAdding a Secret to A Lambda DeploymentACM.315 Creating a Lambda-Specific Secret Resource Policy — Part of my series on Automating Cybersecurity Metrics. Lambda. Network Security. AppSec. Deploying a Static Website. The Code. Free Content on Jobs in Cybersecurity | Sign up for the Email List Now that I’ve locked down my Lambda function execution to a private network I feel a bit better about…AWS4 min readAWS4 min read
Published inCloud Security·3 days agoMember-onlyRestricting Access to Call Lambda Functions to a VPC Endpoint in a Service Control PolicyACM.314 An SCP policy with multiple conditions evaluated as NOT OR or NOR — Part of my series on Automating Cybersecurity Metrics. Lambda. Network Security. Deploying a Static Website. The Code. Free Content on Jobs in Cybersecurity | Sign up for the Email List In the last post, I was attempting to use IP addresses to restrict access to using the AWS IP restrictions…Vpc Endpoint5 min readVpc Endpoint5 min read
Published inCloud Security·3 days agoMember-onlyCannot Restrict Lambda Actions Based on Private IP Addresses in a Service Control PolicyACM.313 IPAddress and NotIPAddress conditions don’t work for Lambda on Private IP addresses in an AWS SCP — Part of my series on Automating Cybersecurity Metrics. Lambda. Network Security. Deploying a Static Website. The Code. Free Content on Jobs in Cybersecurity | Sign up for the Email List In the last post I explained how to add network restrictions to Lambda functions within an AWS Organizational Unit (OU)…Scp9 min readScp9 min read