From Static Passwords to Dynamic Access: Vault + HCP Boundary on Kubernetes
Part 2 of my Boundary Kubernetes lab: replace static passwords with Vault-issued dynamic MySQL users and short-lived SSH certificates per session.
Articles
6
Topics
16
Last post
Jun 15
Avg read
~10 min
Latest writing
Zero-Trust Database and SSH Access with HCP Boundary on Kubernetes — A Hands-On POC
I deployed HCP Boundary Essentials on a local Minikube cluster to broker zero-trust access to a MySQL database and an SSH target — no direct exposure, credential injection, and full session control via the Boundary CLI or Boundary Desktop. Here is the full architecture, configuration, and what I learned.
AWS Guardrails: SCPs, RCPs, Permission Boundaries and Session Policies — What Actually Limits What
AWS has four distinct mechanisms to restrict permissions — and most engineers confuse them. This article breaks down SCPs, RCPs, Permission Boundaries and Session Policies: what each one limits, where it sits in the evaluation engine, and when to use which.
From Transit Gateway to VPC Lattice: A Practical Migration
Transit gateways get the job done, but they come with real operational weight. I rebuilt the same infrastructure using Amazon VPC Lattice — here is what changed, what got simpler, and why it matters.
IAM Cleanup: How I Built an Automated IAM Governance Tool on AWS
Dormant IAM credentials are not harmless — they are a ticking time bomb. I built IAM Cleanup, a serverless tool that automatically detects, tags, and removes unused IAM roles and policies before they become a liability.
3 AWS Security Misconceptions That Create Blind Spots
Three fundamental misconceptions about AWS security that create dangerous blind spots in your security posture.