Application, cloud and infrastructure security, written from real work.https://munishkharb.com/https://munishkharb.com/blog/rolling-out-an-aws-data-perimeter/https://munishkharb.com/blog/rolling-out-an-aws-data-perimeter/How to attach SCPs and RCPs without breaking production: an audit mode from CloudTrail, the order to roll out, break-glass access, the failures that recur, and how to prove the perimeter holds.Sat, 03 Oct 2026 00:00:00 GMTawscloud-securityhttps://munishkharb.com/blog/websocket-security/https://munishkharb.com/blog/websocket-security/A long-lived, two-way connection changes the whole security question. Why HTTP instincts and tooling break on WebSockets, the bug classes that matter, and how I test them.Tue, 15 Sep 2026 00:00:00 GMTwebsocketsappsecpentestinghttps://munishkharb.com/blog/building-an-aws-data-perimeter/https://munishkharb.com/blog/building-an-aws-data-perimeter/Least-privilege IAM says what a principal can do, not who can reach your data or from where. What a data perimeter is and the four controls that build one.Sat, 12 Sep 2026 00:00:00 GMTawscloud-security