DevOps
When managing fleet security—whether it’s production servers or a batch of developer laptops—we often rely on automated tools. But automated scanners can miss context, and sometimes you just need to drop into the terminal and see exactly what is running on a machine. This guide provides a practical, command-first Linux security checklist. These are the exact commands used to audit company...
Hi! Today an interesting practical “journey” related to network performance and AWS limitations is shared. It all started with a growing Symfony application running on a Docker Swarm cluster. The setup used powerful EC2 instances for the application layer and a Managed Valkey (Redis) cluster for caching and sessions. Everything seemed fine until traffic began to scale. Suddenly, strange...
The contemporary digital landscape is defined by an escalating arms race between application developers and automated threat actors. As business-critical applications become increasingly open to the global internet, the risk of Distributed Denial of Service (DDoS) attacks, particularly at the HTTP application layer, has shifted from a rare possibility to an inevitability. While infrastructure...
If you have ever tried to stop a sophisticated scraper or a DDoS attack using standard AWS WAF rate limits, you likely ran into the wall with bigboard: IP rotation. Traditionally, rate-based rules are simple. The WAF counts requests from a specific key (usually an IP address) in a rolling 5-minute window. If that IP crosses a threshold, the WAF blocks it. This works great for sloppy scripts. But...
Udemy Coupon: DEVSECOPSAPRIL – active 01.04.2026-01.05.2026; in case coupons are already expired, please check that page regularly – new one will appear soon ENROLL AT LLM Bot Protection course Hi, I am glad to represent my new course: “DevSecOps on AWS: Defend Against LLM Scrapers & Bot Traffic”. Below is the course promo description. Something very unusual happened in July 2025...
Working with AWS logs often feels like drinking from a firehose.WAF, ALB, CloudFront – they all happily generate hundreds of gigabytes of logs. The bigger your workloads grow, the more painful it becomes: queries run for ages, Athena bills keep climbing, and dashboards lag. But here’s the thing: in 90% of cases, you don’t actually need all of the logs. You want a specific day, maybe a week...
Hi, DevOps fans Here’s a short but practical article on how to set up a maintenance page in AWS using CloudFront, ALB, and Terraform. I’ll assume you already know your way around Terraform, and understand the basics of Application Load Balancer and CloudFront. So let’s skip the “what is ALB” and dive into the real stuff! Also known as a “Service Works Page” or “Downtime Page”, a maintenance page...
Hi, and welcome to detailed tutorial at how to deploy web application at AWS Fargate using terraform. Current tutorial assume that you already know and have several basic things/conceptions: You have active AWS account You have basic knowledge about next AWS components: VPC, network, route table, security group, Route 53, Target Group (TG), Application Load Balancer (ALB) You have installed...
Hi cyber security fans. Welcome to the article “Application and AWS CloudWatch as security monitoring tools”, where we will speak about some DevSecOps best practices and not only. The article is built within 2 connected parts: How to use CloudWatch logs, understanding Application logs with CloudWatch insights and dashboards. Custom CloudWatch metrics and alerts as sensitive detector...
Udemy Coupon: FARGATESALES04 – active 01.04.2026-01.05.2026; in case coupons are already expired, please check that page regularly – new one will appear soon ENROLL AT AWS Fargate course Web application traffic is mostly not stable. Promotions, advertising campaigns, night/day hours – all that cause fluctuations at loading. Managing these unpredictable fluctuations can be a challenge. The...