5 posts
sslmode='require' encrypts the connection but does not verify the server certificate. Here's why that matters, and the exact configuration that actually closes the gap.
How to centralise WAF rules across 20 accounts using shared rule groups and PutPermissionPolicy when Firewall Manager is not an option.
Cost Anomaly Detection tells you something spiked. It doesn't tell you what changed, who changed it, or who to contact. AWS FinOps Agent automates that investigation loop.
Deleting a CloudFormation stack isn't the same as terminating its EC2 instances. Here's the failure chain that orphans instances after tenant offboarding, and the three fixes.
Configuring expiration on a versioned S3 bucket isn't the same as deleting objects. Here's what a complete lifecycle configuration actually looks like.