A horrible hack that allows you to create a VPN tunnel from your workstation to any of your EC2 instances -- even one you don't have direct network access to, such as an instance in a private subnet.
This blog entry is the story of my experience in implemeting a CMS as a consultant. It details some mundane problems I faced in day-to-day work and the solutions that my team and I implemented, probably in more detail than necessary. I make no attempt to avoid the boring and tedious parts of the project. Maybe you can learn something from it, or maybe you can relate to it.
Pod Security Policies (PSPs) are an important component of security in Kubernetes. Lets explore what happens without them.
Google's gVisor exists to provide a true sandbox for your Docker containers. It replaces runc, the default Docker runtime which recently had a serious vulnerability 1.
In theory gVisor is a drop-in replacement for runc, but does it actually work with Amazon ECS?
