In discussions of cloud computing and data center migrations, the question of “sticker shock” sometimes comes up. Sticker shock is real, but as we’ll show in this series of blog posts, it’s due to [...]
Cost of Automating vs. Cost of Managing Secrets management is one of those things that becomes more and more important as successful small companies grow into successful bigger companies. At first, with a small group [...]
We have several clients who have struggled in the past with meeting the HITRUST requirements specifically around DLP and domain based whitelisting of egress traffic in AWS. Recently we've implemented a great set of controls [...]
Migrating to the cloud can be tough. Often, and with good reason, organizations opt for incremental changes when adopting new technologies. But at some level, even a life-and-shift migration will require at least a [...]
At Foghorn, we spend lots of time helping design and build secure infrastructure running on AWS. Heck, we've got an entire security practice devoted to it. What we designed in 2012 looked a lot different [...]
Amazon Web Services (AWS) publishes their opinions of best practice architectures, and has historically performed Well Architected Reviews for key customers. Recently, Amazon has enlisted a small group of partners to join them in performing [...]
If you are managing any Protected Health Information (PHI), you need to be HIPAA compliant. HIPAA is a law that contains guidelines and responsibilities but is not audited by an external provider. Many companies are [...]
Terraform as a Foundation Terraform is really great. As someone who has spent the better part of the past decade codifying cloud infrastructure, there is an inexorable groan from my vicinity when someone insists we [...]
In the wake of Google's Next '17 event and the AWS San Francisco Summit 2017, I wanted to continue the AWS vs GCP comparison series. In this part though, I wanted to focus on each public cloud [...]
One of the most interesting differences between GCP and AWS is how each vendor recommends you isolate the blast radius of functional teams. AWS will tell you that in all likelihood, you will need at [...]
