SUJAL Dyavanapelli

Imagine you maintain a dedicated Security VPC hosting monitoring tools (e.g., Wazuh, Suricata, ELK) and a separate Application VPC hosting production workloads. If you only needed to expose a single service, such as a dashboard or API, then AWS PrivateLink (VPC Endpoint Service) would be the ideal solution, as it allows fine-grained access to that specific service without requiring full VPC-level access. However, when you require complete network-level connectivity between two private VPCs, such as packe...

Hey everyone! In this blog, I’ll walk you through how I built an automated incident response system in an AWS environment using native AWS services. This project demonstrates how to detect threats using Amazon GuardDuty and automatically respond to them using EventBridge, Lambda, and SNS. If you’re curious about how automated incident response can work in AWS using AWS native services or want to implement a similar setup yourself, follow along with this blog for a full breakdown. Understanding Amazon Gua...

Private resources in an AWS VPC can access other AWS services without sending traffic to the Internet by using VPC endpoints. This is important for security reasons, as it prevents exposure of traffic to the public Internet. Additionally, using VPC endpoints helps reduce costs because AWS charges for traffic that leaves its network. For example, if your application needs to access data stored in Amazon S3, sending requests over the Internet would incur additional charges. Instead, a gateway endpoint can ...