What Is Cloud Security? Cloud security refers to the collection of technologies, policies, controls, and procedures to protect cloud-based systems, data, and infrastructure. As organizations increasingly store critical data and run applications in public, private, or hybrid cloud environments, new security risks emerge. These risks differ from traditional on-premises threats, demanding strategies to control access, […]
Introduction In today’s rapidly evolving digital landscape, robust security measures are essential, particularly in the financial sector where SMC operates. As a diversified financial services company, SMC spans multiple segments including Broking, Insurance, Wealth Management, and Distribution. We are committed to delivering innovative solutions that support these diverse business verticals. Our applications are continuously developed […]
Containers as a Service (CaaS) like AWS Fargate have proven to be a valuable mechanism for DevOps teams to build and deploy complex applications at scale. By removing the need for infrastructure management and security, customers can also reduce development costs using AWS Fargate. However, based on the shared responsibility model, customers are still responsible […]
Introduction In a previous post, I shared how to run OWASP ZAP as a DAST tool using GitHub Actions. However, some challenges emerged in actual operation. DAST scans are typically run against non-production environments such as staging, but these environments often have IP restrictions enforced by security groups or AWS WAFs. Since GitHub Actions uses […]
