security
7 min readJun 22, 2026
How to Actually Pass a SOC 2 Audit on AWS Without Losing Your Mind
I've been through SOC 2 audits on both sides of the table — as the person preparing the evidence and as the one reviewing it.
Security Research
Guides, compliance walkthroughs, and security research for modern cloud teams.
security
7 min readJun 22, 2026
A Practical Guide to VPC Security That Goes Beyond the Basics
If you've been working with AWS for more than a few months, you already know the fundamentals of VPC security.
security
6 min readJun 22, 2026
The Real Cost of Abandoned AWS Resources (And How to Find Them)
Last month, I helped a mid-size SaaS company audit their AWS spend.
security
7 min readJun 22, 2026
Why Your IAM Policies Are Probably More Dangerous Than You Think
I spent a good chunk of last Tuesday afternoon staring at an IAM policy that a client swore was "locked down.
security
6 min readJun 22, 2026
Five S3 Bucket Security Mistakes That Still Catch Experienced Teams Off Guard
Look, I get it.
All articles loaded