Expedited Security

Hmmm. There are a few different levels of "proficiency" for a product as sprawling as AWS, and I think there are different ways of approaching each level. You didn't tell us what you are looking for :) . * Broad knowledge of services. This is important because you can often short circuit or accelerate entire projects just by being aware of AWS services. Ways to learn this: certs (esp the Architecture cert), subscribe to rss feeds, sign up for https://www.lastweekinaws.com/newsletter/ , read: https://expeditedsecurity.com/aws-in-plain-english/ * How to use a service at a basic level. This means that you know what a service is/does and can do basic tasks with it (start up an EC2 instance or know which EC2 type makes sense for a certain use case, for example). Here the AWS tutorials and other docs are good (reference architectures, well architected framework), as are the certs. * Understanding the ins and outs of a service. This is where you start to dive in deeper. You might learn what the limits of EBS are for certain EC2 instance types, how to use local volumes, how to maximize network throughput, when you might use dedicated hardware, etc. Here good sources are books, re:invent videos, the builders library: https://aws.amazon.com/builders-library/ , hard knocks/testing ( when in doubt, test it out: http://www.mooreds.com/wordpress/archives/3335 ). You can also short circuit some of the learning by hiring consultants. * Being an expert at a service. I'm not there, but…

Maybe their customer obsession culture did not extend to their AWS department? AWS services names are notoriously bad at communicating what they actually do: https://expeditedsecurity.com/aws-in-plain-english/

>TLS verifies that the URL matches cert through the chain of trust, I think you need to point out that TLS utilizes the browsers cert store for that chain of trust. If a bad actor acquires an entity that has a trusted cert, or your cert store is compromised, that embedded cert store is almost entirely useless which has happened on more than one occassion (Chinese government and Symantec most recently). https://expeditedsecurity.com/blog/control-the-ssl-cas-your-browser-tr… This is typically caught pretty quickly but there's almost nothing a user can do to defend against a chain of trust attack. With SSH, while nobody does it, at least you have the ability to protect yourself.

Oddly, https://expeditedsecurity.com/aws-in-plain-english/ continues that AWS/Amazon schizophrenia.

This reminded me of AWS in plain English https://expeditedsecurity.com/aws-in-plain-english/

For Heroku - Expedited WAF does filter (inbound) for log4j - but I'm not sure there's a good way to outbound, even with Private Spaces. You can start a dyno that only has access to the other apps in the space, but if log4j was on one of the connected web app servers you'd still be in trouble. https://expeditedsecurity.com/heroku/how-to-block-log4j-vulnerability-…

(2015) rip of other article (https://expeditedsecurity.com/aws-in-plain-english/) and ancient Plenty of discussion over the years: Original 2015 https://news.ycombinator.com/item?id=10202286 2017 where the author repeats that this is old https://news.ycombinator.com/item?id=13442022 2018 https://news.ycombinator.com/item?id=18475518

https://expeditedsecurity.com/aws-in-plain-english/ might be a start

In case you wanted a quick-and-dirty explanation of everything AWS has to offer https://expeditedsecurity.com/aws-in-plain-english/

For AWS, there's a website called "AWS in Plain English" that explain what each service does. For instance, it's pretty hard to guess what AWS Route53 does unless you've come across it elsewhere. https://expeditedsecurity.com/aws-in-plain-english/ Azure naming is comparatively more pedestrian.

This can be a good cheat-sheet and no wonder there have been so many attempts at this(1). Maybe we're better off making this as github page where users can send pull requests and add/rewrite to these. (1) https://netrixllc.com/blog/aws-services-in-simple-terms/ (2) https://expeditedsecurity.com/aws-in-plain-english/

Similar to https://expeditedsecurity.com/aws-in-plain-english/ Why does AWS use such convoluted language? Is it because they're dominant and it adds friction to moving to another provider?

Similar to "Amazon Web Services In Plain English": https://expeditedsecurity.com/aws-in-plain-english Seen on HN (2015): https://news.ycombinator.com/item?id=10202286

> There is the issue of figuring out what the marketing team named the damned thing you are looking for, but I had the same problem with AWS. Does Azure have an equivalent for this invaluable resource? https://expeditedsecurity.com/aws-in-plain-english/

Yup, absorbed into https://expeditedsecurity.com/certsimple/

Reminded me of these similar threads I read a while earlier: Azure: https://web.archive.org/web/20190321175020/https://www.expeditedssl.co… https://news.ycombinator.com/item?id=13442597 AWS: https://expeditedsecurity.com/aws-in-plain-english/ https://news.ycombinator.com/item?id=10202286