Lab notebook
In-depth analyses of malware samples, technique deep-dives, and lab notes from the field. Long-form, technical, no fluff.
54 articles in "cloud-security" — page 2 of 6
India's two most operationally significant cyber regulations — CERT-In Directions 2022 and the Digital Personal Data Protection Act 2023 — impose specific technical obligations on cloud deployments. This article maps each requirement to concrete cloud configuration controls.
Quantum computers capable of breaking RSA and ECDSA are expected within a decade. NIST finalised three post-quantum cryptographic standards in August 2024. This article explains the threat, the standards, and how cloud environments should begin the migration.
Database passwords, API keys, TLS certificates, and service tokens are secrets that grant access to sensitive systems. This article covers the architecture, rotation lifecycle, and best practices for managing secrets in cloud environments.
Standing privileged access — permanent admin roles — is the single biggest attack surface in cloud environments. Privileged Access Management (PAM) with Just-in-Time (JIT) provisioning reduces that surface to near zero. This article covers PAM architecture, JIT patterns, and implementation on AWS.
Data Loss Prevention (DLP) in cloud environments protects sensitive data from unauthorised exfiltration across storage, SaaS applications, email, and API endpoints. This article covers DLP architecture, cloud-native tools, and Indian regulatory requirements for data protection.
Backup and disaster recovery are security controls — ransomware recovery, business continuity after a region outage, and regulatory compliance all depend on a tested backup strategy. This article covers RTO/RPO, backup strategies, immutable backups, and AWS DR patterns.
Shift-left security embeds security testing at every stage of the software development lifecycle rather than treating it as a final gate. This article maps security controls to each CI/CD stage — from pre-commit hooks to production monitoring.
A cloud security audit systematically compares an organisation's cloud posture against a standard (CIS Benchmark, NIST CSF, ISO 27001) to identify gaps. This article describes the audit process, evidence collection methods, and remediation tracking.
Manual compliance checking does not scale in cloud environments where thousands of resources are created and modified daily. Policy-as-Code replaces manual review with automated enforcement using AWS Config, HashiCorp Sentinel, OPA, and Terraform guardrails.
