AWS has four distinct mechanisms to restrict permissions — and most engineers confuse them. This article breaks down SCPs, RCPs, Permission Boundaries and Session Policies: what each one limits, where it sits in the evaluation engine, and when to use which.
Read article→Aws 📚
Exploring cloud security, technology insights, and developer experiences
Published Articles
4
Topics Covered
10
Latest Article
May 5, 2026
Years Covered
1
Transit gateways get the job done, but they come with real operational weight. I rebuilt the same infrastructure using Amazon VPC Lattice — here is what changed, what got simpler, and why it matters.
Read article→Dormant IAM credentials are not harmless — they are a ticking time bomb. I built IAM Cleanup, a serverless tool that automatically detects, tags, and removes unused IAM roles and policies before they become a liability.
Read article→Three fundamental misconceptions about AWS security that create dangerous blind spots in your security posture.
Read article→