sjramblings.io

Understanding LLM Prompt Injection: The Security Risk You Can't Ignore

If you’ve been building with LLMs lately, you’re probably as excited as I am about the possibilities! But let me tell you about something that’s been keeping security folks up at night… prompt injection vulnerabilities.

Mastering AWS Security: Why You Should Avoid Using the Root User for Everyday Tasks

Hey there, tech enthusiasts! Ever felt that little thrill of power when you get root access on a system? It’s like holding the keys to the kingdom, right?

A Reminder of the Power of AWS Config

Today, I was reminded of the rich content stored in AWS Config and how easily it can reveal so much about an AWS Organisation across one or many accounts.

Secure Your Secrets: Best Practices for Hardening HashiCorp Vault in Production

So, you’ve got Vault up and running, and you’re feeling pretty good about storing and managing secrets. But here’s the thing—running Vault in production is a whole different game. It’s not just about turning it on; it’s about hardening it to ensure that your Vault instance is secure, reliable, and resilient against attacks.

HashiCorp Vault: The Key to Secrets Management 🔐

I’ve embarked on my latest deep-dive into the HashiCorp ecosystem, and let me tell you there’s a lot to unpack! My focus right now? Vault. It’s one of those tools that, once you understand its capabilities, you can’t help but wonder how you ever managed without it.

Security Hub now supports Custom AWS Config Rules

AWS recently announced an integration that I’m a little excited about!