That’s all well and good but you should really make sure to disable any kind of TLS on these connections so the security team can monitor for breaches. Any ops

That’s all well and good but you should really make sure to disable any kind of TLS on these connections so the security team can monitor for breaches. Any ops team worth its salt will make sure to secure all endpoints by physical device address and remove single points of access like gateways to widen the attack surface and ensure attackers can’t focus on one location. Store any critical data in a basic S3 bucket and remove any firewalls on production databases so that anyone on the team can fix a problem or restore a backup if needed. And you should really disable most logging, it’s a performance bottleneck and can tell attackers what’s happening in the system. I’ll type these notes up in a PowerPoint and we can deliver a presentation to key stakeholders.