Ryan Canty·Feb 22, 2021Cloud KMS Fundamentals for Enterprise: Part 2What we really want to control about our keys is generally, who can use them, for what purposes, and with what configuration.A response icon2A response icon2
Ryan Canty·Feb 10, 2021KMS Fundamentals for Enterprises moving to the Cloud: Part 1As a Cloud Security Engineer at Google Cloud, I get asked questions about Key Management Service (KMS) all the time as clients are…A response icon1A response icon1
Ryan Canty·Sep 30, 2020Use Google’s Tink for Asymmetric EncryptionIn this tutorial, we’ll implement a common solution to a problem that GPG typically solves, but do it all with Tink.
Ryan Canty·Jul 27, 2020Stop downloading Google Cloud service account keys!TL;DR: Downloading service account keys poses a serious security risk to your organization because they are long lived and not…A response icon11A response icon11
Ryan Canty·Jul 16, 2020Okta Authentication in Vault using OpenID Connect (OIDC)A long time ago in an internet far far away, the Okta plugin for Vault was the only way to use your Okta credentials to get into Vault. It…A response icon1A response icon1
Ryan Canty·Apr 22, 2020Understanding Cryptography with RSARSA is an asymmetric cryptographic algorithm that you are probably using right now to view this article over HTTPS. It was designed by Ron…
Ryan Canty·Apr 7, 2020Protection from Container Malware with AnthosTL;DR there is a fairly new attack campaign using the Kinsing malware targeted at container platforms like Docker and GKE. This post will…
Ryan Canty·Oct 22, 2019HashiCorp Vault and Terraform on Google Cloud — Security Best PracticesDeploy HashiCorp Vault with Terraform on Google Cloud adhering to security best practices and least privilegeA response icon1A response icon1
InScaleSecbyRyan Canty·Jul 31, 2019Practical, Proactive Amazon S3 SecurityBefore you go shopping, let’s take a look at what you already have at your disposal to protect your data in the cloud.
InScaleSecbyRyan Canty·Apr 11, 2019Protecting GCP Services with VPC Service Controls and TerraformAutomate Google Cloud VPC Service Controls to protect your cloud workloads
