dhruv's interop dispatch

Latest — 17 Jul 2025

IAM Roles Anywhere – now for everyone with Let's Encrypt

This post is an accompaniment to my talk at fwd:cloudsec Denver. It contains the SystemD files, Trust Policy for the IAM Role that was referred to, and other miscellaneous scripts. Towards the end, under FAQ, it has answers to questions that were either raised in the talk's

More issues

Obfuscating outbound traffic via a Suricata "firewall"

For a few years now, some cloud service providers have resorted to using open-source Suricata network analysis software inline to detect and block malicious outbound traffic. This, of course, works on known indicators. It is worth quoting from this article that, "By the time an IOC has been published

Living-off-the-land Dynamic DNS for Route 53

I was visiting the matter of dynamic DNS after more than a decade. Had memories of complex configuration files, having to supply login credentials to ddns scripts, finding out in the field that the home router had been failing to update the DNS record for a while, and domain registrars