ndomer

4 ms·

1.
by ndomer 6y ago
Hello! I am the author of this post if anyone has any questions :) The library discussed is available on Github here: https://github.com/transcend-io/secret-value and is on npm to download via `yarn add @transcend-io&#
2.
by ndomer 6y ago
One big thing not mentioned here: the massive collection of managed services AWS gives you at no cost. The biggest example is probably IAM, which makes it easy to control which servers can take what actions on which other services. And can
3.
by ndomer 6y ago
Apologies for the confusion! I picked BeyondCorp as there seems to be a number of references to it as a more general-cloud term than anything Google Cloud specific. As some examples, https://www.beyondcorp.com/ is run by th
4.
by ndomer 6y ago
(Author here) At Transcend, we use a bastion host (like others have mentioned). The key difference that we do that I don't think has been covered is that our bastion only makes outgoing connections, and has no open ports to the world.
5.
by ndomer 6y ago
(Author here) I think the second most secure way to handle service authentication is to protect your ports with strong auth, like this article talks about. But the most secure way to handle this is to just eliminate the open port entirely.
6.
by ndomer 6y ago
This is a great question! I hoped this would get brought up, as it is very important. I decided against covering in this blog as I felt it was already fairly long, but the tldr is that I see two incremental ways with this setup to add autho
7.
by ndomer 6y ago
(Author of the blog here) This is a great question! I hoped this would get brought up, as it is very important. I decided against covering in this blog as I felt it was already fairly long, but the tldr is that I see two incremental ways wi
8.
by ndomer 6y ago
For sure, VPNs will always be used. I think it'll take a BeyondCorp SaaS company to really take off (or have it become a more "Managed"auth method from the big cloud providers). At Transcend we are able to do it because we ha
9.
by ndomer 6y ago
Hello everyone! At Transcend, we've used BeyondCorp for all of our internal sites, as well as for our communication between services. Please let us know if you have any questions about getting started :)
10.
Implementing Lambda Edge Functions in Terraform(transcend.io)
1 points by ndomer 6y ago|1 comments
11.
by ndomer 6y ago
This blog post aims to show that not only are making Lambda@Edge functions in Terraform possible, but that it can actually be a pleasant experience.
12.
by ndomer 6y ago
Hello! I authored this post, and would love to get some community feedback. I've really enjoyed using both Terraform and Terragrunt, and think you and your company would as well. Please let me know if there are any questions I can answ