#security
3 posts tagged security.
- Your container image is a product you ship to yourselfEvery image carries an operating system, a runtime and hundreds of packages you did not choose. In 2026 regulators and customers are starting to ask what is inside. Be able to answer.
- The best OS hardening is having less OSCIS checklists harden a general-purpose server one setting at a time. Minimal operating systems remove most of what those checklists were protecting. With Amazon Linux 2 now past end of support, it is a good moment to choose.
- AWS got safer by default. Your old accounts did not.New S3 buckets block public access, encrypt objects and disable ACLs out of the box. Accounts created years ago kept their old settings. A short list of what to check.