Security
Everything filed under security.
- Your container image is a product you ship to yourselfEvery image carries an operating system, a runtime and hundreds of packages you did not choose. In 2026 regulators and customers are starting to ask what is inside. Be able to answer.
- The best OS hardening is having less OSCIS checklists harden a general-purpose server one setting at a time. Minimal operating systems remove most of what those checklists were protecting. With Amazon Linux 2 now past end of support, it is a good moment to choose.
- AWS got safer by default. Your old accounts did not.New S3 buckets block public access, encrypt objects and disable ACLs out of the box. Accounts created years ago kept their old settings. A short list of what to check.
- Certificates now last 200 days. Then 47.Public TLS certificates are on a schedule to shrink to 47 days by 2029. If renewal still involves a person, the schedule is the incident.
- Your certificate will expire on a SaturdayIt's a law of nature. Certificates expire on weekends, around 2 a.m., while the person who renewed it last year is on a beach with no signal.