8 min
AWS Resource Hardening Quick Wins: DMS, OpenSearch, SageMaker, and Lambda Runtimes
Hardening quick wins: private DMS, OpenSearch encryption, SageMaker VPC-only, Lambda runtime EOL. July 2026 checklist.
Agentic AI & Cloud Security
Nash Ogden
- Published articles
- 53
Articles (53) — Page 3
7 min
AWS Verified Access in Production: A Zero-Trust Network Access (ZTNA) Replacement for Legacy VPN
Verified Access ZTNA: Cedar policies, Identity Center, TCP endpoints (GA). July 2026 Client VPN migration checklist.
8 min
DORA Compliance on AWS: A Practical Guide for EU Financial Entities and ICT Third-Party Providers
DORA on AWS since Jan 2025: RoI, TLPT/TIBER-EU, incident clocks, Artifact addendum. July 2026 readiness checklist.
8 min
EU AI Act on AWS: A Practical Compliance Guide for High-Risk AI on Bedrock and SageMaker
EU AI Act compliance on AWS: risk classification, prohibited practices, GPAI obligations, the high-risk Annex III framework (now due 2 December 2027 after the Digital Omnibus delay), and the AWS-native control mapping using Bedrock Guardrails, SageMaker Model Cards, and Audit Manager governance.
7 min
Building a Vulnerability Management Program on AWS: CVSS, KEV, and Reachability
How to build a vulnerability management program that scales beyond CVE-counting. Inspector v2 deployment, CVSS + CISA KEV + reachability for risk-based prioritization, container and IaC scanning in CI/CD, and remediation SLAs that survive audits.
8 min
GDPR Compliance on AWS: A Practical Guide for SaaS Companies
GDPR compliance on AWS for SaaS companies handling EU resident data. Region selection, the AWS DPA, data subject rights automation, RoPA documentation, breach notification, and the technical controls regulators expect.
7 min
ISO 27001 Certification on AWS: ISMS Implementation Guide for 2026
ISO 27001:2022 on AWS: ISMS scope, 93 Annex A mapping, Stage 1/2 evidence. July 2026 stage checklist.
10 min
NIS2 Directive on AWS: A Practical Compliance Guide for EU Critical Infrastructure
NIS2 on AWS: Essential/Important scope, Art. 21 measures, 24h/72h clocks, supply chain. July 2026 checklist.
7 min
NIST Cybersecurity Framework 2.0 on AWS: Implementation & Maturity Guide
NIST CSF 2.0 on AWS: Govern + six functions, tiers, 800-53/171/CMMC. July 2026 Tier-3 checklist.
10 min
10 AWS Cloud Security Best Practices: An Implementation Guide for 2026
Most AWS security breaches come from misconfiguration, not AWS failures. Here are 10 concrete best practices to harden your AWS environment in 2026.
13 min
HIPAA-Compliant AI on AWS Bedrock: A Production Guide for Healthcare Workloads
Production guide for HIPAA-compliant generative AI on AWS Bedrock: BAA scope, eligible models, Guardrails for PHI redaction, Knowledge Bases for RAG over clinical data, VPC isolation, and the audit evidence package OCR investigators expect.
8 min
How to Achieve SOC 2 Type II Compliance on AWS (2026 Checklist)
SOC 2 Type II certification proves your controls are effective over 6-12 months. This guide covers the compliance roadmap, AWS security controls, documentation requirements, and audit preparation for 2026 certification.
Work With Us
Our articles share what we know. Our consulting engagements apply that knowledge to your specific AWS environment.