Introduces cdk-nag, an open-source tool for automated security and compliance checks in AWS CDK infrastructure-as-code projects.
A developer's script to replace Google Fonts for GDPR compliance, addressing a German court ruling on data privacy.
A German court ruled that using Google Fonts violates GDPR by sharing user IP addresses, leading to fines and requiring user consent.
A technical guide on troubleshooting and resolving Azure Policy non-compliance issues, specifically for diagnostic settings on AKS clusters.
A guide to building a comprehensive cloud security program, covering strategy, maturity levels, and controls based on the NIST framework.
A comprehensive guide to configuring security, compliance, and collaboration settings in Microsoft Teams.
Guide to creating custom Azure Security Center recommendations using Azure Policy to tailor security checks.
A guide to using Cloud Custodian, an open-source tool, for AWS compliance tasks like resource tagging and identifying unused resources.
Guide to using Azure Policy to audit and automatically apply CanNotDelete resource locks on Azure Resource Groups based on specific tags for governance.
Learn how AWS services like CloudWatch, CloudFormation, Config, and CloudTrail help implement governance, compliance, and audit lifecycles.
Part 2 of a series on championing third-party observability tools to your security team, focusing on building empathy and alignment.
A guide on championing third-party observability services to security teams, featuring expert advice in a three-part series.
Legal notice, terms of service, and privacy policy for a website, outlining liability, copyright, and data protection.
A detailed review of Microsoft Azure's major updates, feature releases, and milestones throughout the year 2014.
Critique of FedRAMP's cloud security framework, arguing it creates bureaucratic barriers that hinder government adoption of innovative, cost-effective cloud solutions.
