Bash Security
Command injection risks, safe handling of secrets, quoting pitfalls that become vulnerabilities, and hardening scripts that run with …
Jan 20, 2026
Read more
Security
14 articles
Linux Permissions
The read/write/execute permission model, chmod numeric vs symbolic notation, ownership, setuid/setgid/sticky bit, umask, and ACLs.
Jan 20, 2026
Read more
Users & Groups
How Linux models identity — UID/GID, /etc/passwd, /etc/shadow, primary vs supplementary groups, sudo, and user management commands.
Jan 20, 2026
Read more
Kubernetes Secrets
A complete guide to Kubernetes Secrets — what they are, why they exist, how they work internally, where they are used, and how to …
Jan 20, 2026
Read more
Multi-Account Security Report — Assume Roles Across All Org Accounts
Python script that uses AWS Organizations to list all accounts, assumes a cross-account role in each, audits security controls, and …
Jan 20, 2025
Read more
CloudTrail Root Account Monitor — Alert on Root API Usage via Lambda
Lambda function triggered by EventBridge to detect any AWS root account API activity in CloudTrail and immediately send a critical security …
Jan 20, 2025
Read more
EC2 Instance Communicating with Malicious IP — Incident Response
Your VPC flow logs show an EC2 instance sending traffic to a known malicious IP address. Walk through containment, forensic investigation, …
Jan 20, 2025
Read more
Security Group Audit — Find Unrestricted Inbound Rules (0.0.0.0/0)
Python script to audit all VPC Security Groups, identify rules that expose sensitive ports to the internet, and optionally auto-remediate …
Jan 20, 2025
Read more
Generate Least-Privilege IAM Policy from CloudTrail Logs
Python script that analyses CloudTrail logs for a given IAM role and generates a minimal IAM policy containing only the actions the role …
Jan 20, 2025
Read more
Developer Pushed AWS Credentials to Public GitHub — Incident Response
A developer accidentally committed live AWS access keys to a public GitHub repository. Walk through the immediate containment, …
Jan 20, 2025
Read more
IAM Access Key Rotation — Auto-Rotate Keys Older than 90 Days
Python script to find all IAM users with access keys older than 90 days, create new keys, deactivate old ones, and notify users via AWS SES.
Jan 20, 2025
Read more
S3 Bucket Security Audit — Public Access, Versioning & Encryption
Python script to audit all S3 buckets for public access exposure, disabled versioning, missing encryption, and access logging gaps — with a …
Jan 20, 2025
Read more
Linux Engineer Learning Path
A complete roadmap to mastering Linux — from basic commands to system administration, shell scripting, networking, security hardening, and …
Jan 18, 2025
Read more
Kubernetes Interview Questions & Answers — Networking & Security
Kubernetes interview questions covering Services, Ingress, DNS, CNI, NetworkPolicies, RBAC, ServiceAccounts, Secrets, Pod Security, TLS, and …
Jan 1, 0001
Read more