Blogs & Articles

I write about cloud security, detection engineering, SOC automation, and AWS security architecture.

Hashnode

🔐 Project 5: Zero-Trust EC2 Access in AWS Using IAM, SSM, CloudTrail, and GuardDuty Sun Feb 01 2026
🔐 Project 4: Eliminating SSH with AWS Systems Manager — IAM-Controlled, Auditable EC2 Access Sat Jan 24 2026
🔐 Project 3: Implementing and Testing Security Controls in a Real Cloud Environment Sun Jan 18 2026
🔐 Project 2: Security Design Trade-offs in AWS (Where Convenience Starts to Win) Wed Jan 14 2026
🔐 Project 1: Building a Secure Cloud Baseline in AWS (Before Things Break) Sat Jan 10 2026

Medium

Why SSH No Longer Fits Zero-Trust EC2 Access in AWS Sun Feb 01 2026
Eliminating SSH in AWS: Why Identity-Based Access Beats Network Trust Sun Jan 25 2026
Designing IAM Least Privilege for EC2: From Zero Access to Auditable Enforcement Fri Jan 16 2026
Securing SSH Access to AWS EC2: From Perimeter Controls to Detection Sat Jan 10 2026
Years in Security Engineering — and I’m Still Learning Every Day Mon Jan 05 2026
Baseline Linux Server Hardening & Exposure Validation Mon Jan 05 2026
Filename Leads to Path Traversal Wed May 26 2021