We have several clients who have struggled in the past with meeting the HITRUST requirements specifically around DLP and domain based whitelisting of egress traffic in AWS. Recently we've implemented a great set of controls [...]
Migrating to the cloud can be tough. Often, and with good reason, organizations opt for incremental changes when adopting new technologies. But at some level, even a lift-and-shift migration will require at least a basic [...]
At Foghorn, we spend lots of time helping design and build secure infrastructure running on AWS. Heck, we've got an entire security practice devoted to it. What we designed in 2012 looked a lot different [...]
Terraform - Declarative but Powerful For years, Foghorn has been helping our clients to automate their infrastructure via code. Doing so enables them to have repeatable and audit-able infrastructure. Historically, the tools available have [...]
Dependencies got you down? Find them! Many of us end up with lots of dependencies in our configuration management code. Whether it's community cookbooks or package management, there are plenty of reasons to leverage outside [...]
Amazon Web Services (AWS) publishes their opinions of best practice architectures, and has historically performed Well Architected Reviews for key customers. Recently, Amazon has enlisted a small group of partners to join them in performing [...]
If you are managing any Protected Health Information (PHI), you need to be HIPAA compliant. HIPAA is a law that contains guidelines and responsibilities but is not audited by an external provider. Many companies are [...]
Terraform as a Foundation Terraform is really great. As someone who has spent the better part of the past decade codifying cloud infrastructure, there is an inexorable groan from my vicinity when someone insists we [...]
According to Ponemon Institute the average cost of a data breach in 2017 for an organization was $141 per stolen record, and $3.62M per occurrence. The financial costs are just a portion of the actual [...]
I went to Las Vegas last month, and didn't gamble once! Weird, right? But AWS re:Invent 2017 was so full of material that it doesn't leave much free time for the usual Vegas experience, after [...]
