Vpc

Improve the security of your AWS account

As more organizations migrate their infrastructure to the cloud, security in the cloud has become a top priority. One of the most common security issues in AWS is misconfiguration, which can leave organizations vulnerable to attacks and data breaches.

In this article, we will discuss the most common security misconfigurations we find in AWS accounts. Understanding and addressing these misconfigurations can help ensure that your AWS environment is secure and protected from potential threats.

Using CloudWatch to Monitor VPN Connections

VPNs are essential for modern internet security, and most organizations use them as part of their IT infrastructure. Cloud IT systems are no different, however in a cloud environment there are some interesting opportunities for automating the monitoring and maintenance of IT resources. A great example in AWS is that you can set up CloudWatch alarms to track the status of your resources and take automatic action in case of a failure event. Once you have a functional alarm, you can do things like send notification emails, repair resources, and run serverless code using AWS Lambda. By leveraging the power of serverless functions, the alarm responses you can design are only limited by your creativity.

VPC Flow Logs - an Introduction

If you’re running solutions on the AWS platform, you most likely have a Virtual Private Cloud (VPC). The majority of deployed VPCs don’t have an essential feature enabled - VPC Flow Logs.

VPC Flow logs provide insight into the traffic flowing in (and out) of your VPC. You can enable logging for an entire VPC, subnets or network interfaces within a VPC. During the setup process, you can decide what you want to record - Rejected, Accepted, or All traffic.