A hallmark of DevOps is the constant search for more secure methods to protect infrastructure, a process known as hardening. Part two of “Securing Our AWS Infrastructure” details how we integrated CloudWatch with CloudTrail and set up alarms for crucial activities.
A hallmark of DevOps is the constant search for more secure methods to protect infrastructure, a process known as hardening. One change we recently implemented was to move away from managing SSH keys and whitelisting IP’s to leveraging AWS Systems Manager Session Manager to securely connect to our EC2 instances.
It’s very useful to have all our monitoring in a central environment. We use Graphite and Grafana to collect metrics from our linux servers, and here’s how we added our QNAP file server using SNMP and collectd.