All categories

// cloud

Cloud Security Projects

AWS IAM, EC2, KMS, and the shared responsibility model.

AWS EC2 Deployment & IAM Access Control Lab

Completed

IAM policy configuration and secure EC2 deployment with least-privilege access.

AWSIAMEC2

What I did

  • Designed IAM policies, roles, and instance profiles for EC2 workloads.
  • Applied least privilege and validated access boundaries.

AWS KMS & DynamoDB Encryption Lab

Completed

Data encryption and key management for DynamoDB using AWS KMS.

AWSKMSDynamoDBEncryption

What I did

  • Created and scoped Customer Managed Keys for DynamoDB.
  • Validated encryption at rest and key access controls.

AWS Cloud Service Models & Shared Responsibility Lab

Completed

Understanding cloud security responsibilities across IaaS, PaaS, and SaaS.

AWSShared ResponsibilityCloud Fundamentals

What I did

  • Mapped customer vs provider responsibilities across IaaS / PaaS / SaaS.
  • Documented security control ownership for common AWS services.

AWS Security Labs Portfolio

Ongoing

Hands-on AWS security labs across IAM, network security, encryption, and monitoring — aligned with the AWS Well-Architected Framework.

IAMVPCKMSCloudTrailCloudWatch

Lab 3.1 — Resource-Based Policies for S3 (IAM)

  • Configured S3 bucket policies to restrict access to specific IAM principals.
  • Applied Deny statements to block HTTP via aws:SecureTransport.
  • Lesson: explicit Deny always overrides Allow; wildcard Principal is dangerous.

Lab 4.1 — Securing VPC with Security Groups

  • Configured stateful inbound/outbound rules with least privilege.
  • Chained SGs across web → app → DB tiers instead of CIDRs.

Lab 5.1 — Encrypting Data at Rest with KMS

  • Created Customer Managed Key with policy separating admins from users.
  • Applied SSE-KMS to S3; verified objects auto-encrypted.

Lab 6.1 — Monitoring with CloudTrail + CloudWatch

  • CloudTrail trail → S3 + CloudWatch Logs for management events.
  • Metric filters and alarms for root logins, IAM and SG changes.