Security and Cloud Cloud Security. The words seem like they were meant for each other. Through my 20+ year career in IT, I've never come across a platform or technology that was so scrutinized for [...]
In discussions of cloud computing and data center migrations, the question of “sticker shock” sometimes comes up. Sticker shock is real, but as we’ll show in this series of blog posts, it’s due to [...]
Cost of Automating vs. Cost of Managing Secrets management is one of those things that becomes more and more important as successful small companies grow into successful bigger companies. At first, with a small group [...]
We have several clients who have struggled in the past with meeting the HITRUST requirements specifically around DLP and domain based whitelisting of egress traffic in AWS. Recently we've implemented a great set of controls [...]
Migrating to the cloud can be tough. Often, and with good reason, organizations opt for incremental changes when adopting new technologies. But at some level, even a lift-and-shift migration will require at least a basic [...]
At Foghorn, we spend lots of time helping design and build secure infrastructure running on AWS. Heck, we've got an entire security practice devoted to it. What we designed in 2012 looked a lot different [...]
Terraform - Declarative but Powerful For years, Foghorn has been helping our clients to automate their infrastructure via code. Doing so enables them to have repeatable and audit-able infrastructure. Historically, the tools available have [...]
Dependencies got you down? Find them! Many of us end up with lots of dependencies in our configuration management code. Whether it's community cookbooks or package management, there are plenty of reasons to leverage outside [...]
Amazon Web Services (AWS) publishes their opinions of best practice architectures, and has historically performed Well Architected Reviews for key customers. Recently, Amazon has enlisted a small group of partners to join them in performing [...]
If you are managing any Protected Health Information (PHI), you need to be HIPAA compliant. HIPAA is a law that contains guidelines and responsibilities but is not audited by an external provider. Many companies are [...]
