Amazon Web Services (AWS) customers operating in a regulated industry, such as the financial services industry (FSI) or healthcare, are required to meet their regulatory and compliance obligations, such as the Payment Card Industry Data Security Standard (PCI DSS) or Health Insurance Portability and Accountability Act (HIPPA). AWS offers regulated customers tools, guidance and third-party audit reports […]
Read moreAmazon Web Services (AWS) customers operating in a regulated industry, such as the financial services industry (FSI) or healthcare, are required to meet their regulatory and compliance obligations, such as the Payment Card Industry Data Security Standard (PCI DSS) or Health Insurance Portability and Accountability Act (HIPPA). AWS offers regulated customers tools, guidance and third-party audit reports […]
Read moreAmazon Elastic Kubernetes Service (Amazon EKS) offers a powerful, Kubernetes-certified service to build, secure, operate, and maintain Kubernetes clusters on Amazon Web Services (AWS). It integrates seamlessly with key AWS services such as Amazon CloudWatch, Amazon EC2 Auto Scaling, and AWS Identity and Access Management (IAM), enhancing the monitoring, scaling, and load balancing of containerized […]
Read moreUsing Kubernetes policy-as-code (PaC) solutions, administrators and security professionals can enforce organization policies to Kubernetes resources. There are several publicly available PAC solutions that are available for Kubernetes, such as Gatekeeper, Polaris, and Kyverno. <p>PaC solutions usually implement two features:</p> <ul> <li>Use <a href=”https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/” target=”_blank” rel=”noopener”>Kubernetes admission controllers</a> to validate or modify objects before they’re created to […]
Read moreIn this post, we show you how to apply attribute-based access control (ABAC) while you store and manage your Amazon Elastic Kubernetes Services (Amazon EKS) workload secrets in AWS Secrets Manager, and then retrieve them by integrating Secrets Manager with Amazon EKS using External Secrets Operator to define more fine-grained and dynamic AWS Identity and […]
Read moreAWS Signer is a fully managed code-signing service to help ensure the trust and integrity of your code. It helps you verify that the code comes from a trusted source and that an unauthorized party has not accessed it. AWS Signer manages code signing certificates and public and private keys, which can reduce the overhead […]
Read moreIn the event that you work container workloads that use Amazon Elastic Kubernetes Service (Amazon EKS) , Amazon GuardDuty now has added assistance that will assist you better protect these workloads from possible threats. Amazon GuardDuty EKS Defense might help detect threats linked to user and software activity that’s captured in Kubernetes audit logs. Newly-added […]
Read moreIn this blog post, I demonstrate how to implement service-to-service authorization using OAuth 2.0 access tokens for microservice APIs hosted on Amazon Elastic Kubernetes Service (Amazon EKS). A common use case for OAuth 2.0 access tokens is to facilitate user authorization to a public facing application. Access tokens can also be used to identify and […]
Read moreIn this website post, we demonstrate how to setup end-to-end encryption on Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Certificate Manager Private Certificate Authority . Because of this exemplory case of end-to-end encryption, traffic hails from your terminates and client at an Ingress controller server running in the sample app. By following a instructions […]
Read moreAWS Strategies Manager now allows you to safely retrieve techniques from AWS Secrets Supervisor for used in your Amazon Elastic Kubernetes Program (Amazon EKS) Kubernetes pods. With the start of AWS Techniques and Config Supplier (ASCP) , at this point you have an easy-to-make use of plugin for the industry-regular Kubernetes Strategies Shop and Container […]
Read more
You must be logged in to post a comment.