Teemu Niiranen

Docker Sandbox Kits package network restrictions, tool configuration, and pre-installed MCP servers into a shareable, versioned configuration. This post demonstrates how to standardize sandbox setup across a team so security decisions stick without manual steps.

Docker AI Sandboxes provide structural defense against credential theft by malicious MCP servers. This post demonstrates how the multi-stage attack from Part 1 fails inside a sandboxed environment, and explores network policies as defense in depth.

VPC Flow Logs can't see DNS exfiltration. Here's what can — and what can't — with a working demo, real log output, and honest notes on AWS-native tooling.

In this article, I demonstrate the threats posed by malicious MCP servers from a developer's perspective and ways to mitigate them. A hands-on example is provided by building a simple, prompt-injecting MCP server.

Learn, how hackers exploit AI chatbots with simple prompts, and what kind of protection strategies Amazon Bedrock offers for Generative AI solution developers.

Discover how to exploit vulnerable AI chatbots in practice with prompt injections, and how to defend your Generative AI solutions using Amazon Bedrock Guardrails.

What's happening in the AWS-scene just now? Check out the hottest and boldest AWS announcements from this summer, gathered by NordHero's cloud architects.

Discover how a simple Amazon S3 file upload feature can expose AWS Lambda credentials, risking your cloud infrastructure's security.

Learn the importance of proper token validation in serverless architectures using services like Amazon Cognito.

Learn how hackers exploit vulnerable cloud applications in practice, and how AWS' security services detect the vulnarabilities and malicious activities.

AWS Lambda vulnerabilities stem from configuration mistakes, bad programming, and vulnerabilities in dependencies. To manage vulnerabilities, start scanning and patching more.

Learn how to separate your authorization logic from the application logic and how to integrate AVP with other AWS services.

Learn the strategies for integrating Amazon Verified Permissions into your application with Amazon API Gateway or Amazon AppSync.

Learn how to utilize Amazon Verified Permissions with Amazon Cognito to authorize calls with JWT tokens.

Dive into a complete working architecture utilizing multiple AWS services: Amazon Verified Permissions, Amazon Cognito, Amazon AppSync and Amazon DynamoDB.

Get familiar with Amazon Verified Permissions' auditing capabilities and integrate AVP with AWS CloudTrail.

In this article, we will dive into data encryption practices, and demonstrate how modern cloud-era encryption with AWS Key Management Service works.

The number of IaC tools has grown significantly over the years. What new tools do better than the old ones? What are they suitable for, what not?