security - Carlo.Cloud

Jul 1, 2025 aws security

S3 Pre-signed URLs and Web Archiving

Pre-signed S3 URLs offer secure, temporary access, but what if they get archived and exposed? Learn how these URLs work, the risks of web archiving, and steps you can take to prevent accidental data leaks.

Jan 30, 2024 aws ci/cd security

Integrating Inspector with GitLab CI/CD

Gitlab ships with Trivy support, but you are an AWS org using ECR. How do you reconcile the differences between the CI/CD and Inspector scans of your containers?

Can Infrastructure Written As Code Go Stale?

Dec 11, 2023 security

Can Infrastructure Written As Code Go Stale?

What is stale code? Can my infrastructure as code go stale? What do I do about it?

Apr 19, 2023 aws security

AWS Amplify Through An Infrastructure Lens

Everyone talks about having an app and the bar is lower than ever. How does the creation, maintenance, and security look like from the lens of an infrastructure engineer?

Mar 29, 2023 aws security

CloudFront & ALB Origin Security

If you are hosting a web app and serving directly from the ALB, you'll have a bad time. Learn how to protect yourself with a Cloudfront distribution