Skip to content
~/sph.sh

Authentication & Security · Cloud Computing

AWS, serverless, and cloud infrastructure

Managing IAM Policies and Roles at Scale Without Hitting AWS Limits

The exact IAM size, attach, and quota limits you will hit at scale, and the scoped-policy, permission-boundary, and SCP structure that keeps you far from every one.

aws · iam · security +2

AWS Cognito + Verified Permissions for SaaS Authorization1/1

Build SaaS authorization with AWS Cognito and Verified Permissions, covering Cedar policies, multi-tenant patterns, JWT flow, and cost in TypeScript.

authorization · aws · authentication +4

MCP Server RBAC, Tool Composition, and Multi-Agent Workflow Patterns

Enterprise patterns for Model Context Protocol: tool composition, multi-agent orchestration, role-based access control, and production observability.

mcp · ai-adoption-strategy · authorization +4

Amazon Cognito Deep Dive: Beyond Basic Authentication

A technical guide to advanced Amazon Cognito: custom auth flows, federation, multi-tenancy, migration strategies, and production-grade security with CDK.

aws · authentication · serverless +6

AWS Secrets Manager & Parameter Store: Security Best Practices

A technical guide comparing AWS Secrets Manager and Parameter Store, showing when to use each service with real-world implementation patterns and CDK examples.

aws · secrets-management · security +7

Mozilla SOPS: Encrypting Secrets in Git for GitOps

A practical guide to Mozilla SOPS for encrypting secrets in Git: age encryption, AWS CDK and Lambda patterns, and production-ready serverless security.

secrets-management · ci-cd · terraform +7

Build a URL Shortener with AWS CDK Part 3: Security & Custom Domains1/1

Implementing custom domains, bulk operations, URL expiration, and defense-in-depth security measures for production link shortener services.

aws-cdk · lambda · security +5

Migrating from Serverless Framework to AWS CDK: Part 5 - Authentication, Authorization, and IAM1/1

Implement robust authentication with Cognito, API Gateway authorizers, and fine-grained IAM policies when migrating from Serverless Framework to AWS CDK.

authorization · aws-cdk · authentication +2