Field notes on AWS security.

What actually goes wrong in AWS accounts, why it matters, and how Plexavo catches it. Written for people who would rather read the check than trust the vendor.

Does your AWS setup need S3 server access logging?

S3 server access logging is useful for most setups, but not all. How to check whether it is enabled, decide if you actually need it, turn it on if you do, and the CloudTrail data events angle most guides leave out.

Read

More posts on the way.