- OCI network security groups CLI cheat sheet - rules, VNIC membership and quick auditsOCI · 12 Nov 2026
- Putting Open WebUI in front of vLLM or Ollama: an internal chat UI with sign-in, roles and no open signupAI & GenAI · 12 Nov 2026
- Rotating OCI API signing keys for automation users without downtime - a checklistOCI · 12 Nov 2026
- AKS control plane and audit logs KQL cheat sheet: who did it, who is hammering the API server and why webhooks failAzure · 11 Nov 2026
- Azure Firewall Premium TLS inspection rollout checklist: intermediate CA, Key Vault access, client trust and bypass listsAzure · 11 Nov 2026
- Checklist: vetting open-weight models before you serve them - safetensors, pinned revisions, hashes, remote code and a private mirrorAI & GenAI · 11 Nov 2026
- Custom Azure Policy definitions that actually match: aliases, [*] arrays, count expressions and child resourcesAzure · 11 Nov 2026
- Letting external engines read Unity Catalog tables on Azure Databricks: Iceberg REST catalog and credential vending checklistDatabricks on Azure · 11 Nov 2026
- Route 53 Resolver DNS Firewall rollout checklist: alert-first, walled-garden allow lists, fail-open and org-wide deploymentAWS · 11 Nov 2026
- Running LLM-generated code safely on Kubernetes: gVisor sandboxes, no network, resource limits and hard timeoutsAI & GenAI · 11 Nov 2026
- PostgreSQL audit logging with pgAudit: install it, choose what to log and keep the volume under controlDatabases · 10 Nov 2026
- Rotate the Airflow Fernet key without breaking connections and variablesData Platform · 10 Nov 2026
- Set up OCI Vulnerability Scanning for compute instances: policies, recipe, target and reading resultsOCI · 10 Nov 2026
- Snowflake masking and row access policies: protect PII columns and rows by roleData Platform · 10 Nov 2026
- Checklist: giving an AI agent its own identity - scoped, short-lived credentials and an audit trail for every tool callAI & GenAI · 9 Nov 2026
- Rolling out a Conditional Access change without locking anyone out - report-only, What If and sign-in log checklistAzure · 9 Nov 2026
- Offboarding a user from OCI: a checklist for console access, API keys, tokens and owned resourcesOCI · 8 Nov 2026
- Azure RBAC basics: roles, scopes and your first role assignmentAzure · 7 Nov 2026
- SQL Server logins vs users: give someone read-only access the right wayDatabases · 7 Nov 2026
- AWS WAF blocking legitimate requests with 403: find the rule and add a narrow exceptionAWS · 6 Nov 2026
- Azure Storage SAS tokens: create a user delegation SAS and fix common 403 errorsAzure · 6 Nov 2026
- Redis ACL cheat sheet: users, key patterns, command categories and NOPERM errorsDatabases · 6 Nov 2026
- OCI Cloud Guard shows thousands of problems: tune detector recipes without hiding real risksOCI · 3 Nov 2026
- Unity Catalog catalog not visible in one workspace despite grants: workspace bindings and isolation modeDatabricks on Azure · 3 Nov 2026
- Application Gateway WAF blocks legitimate requests with 403: find the rule and add a scoped exclusionAzure · 2 Nov 2026
- Calling Azure services from Databricks without secrets: Unity Catalog service credentials and access connectorsDatabricks on Azure · 2 Nov 2026
- IAM Access Analyzer unused access: find and remove stale roles, access keys and permissionsAWS · 2 Nov 2026
- Introduction to LLM guardrails: input checks, output checks and tool limits for a production chatbotAI & GenAI · 2 Nov 2026
- Snowflake ACCOUNT_USAGE ops cheat sheet: failed queries, long runners, failed logins, locks and grant changesData Platform · 2 Nov 2026
- Snowflake external stage access denied: fixing storage integrations for Amazon S3 and Azure Blob StorageData Platform · 2 Nov 2026
- Kafka SSL handshake failed: expired certificates, hostname verification and truststore problemsData Platform · 30 Oct 2026
- Snowflake key-pair authentication for service users: setup and zero-downtime key rotationData Platform · 30 Oct 2026
- Automated remediation on OCI with Events and Functions: fix public buckets and untagged resources in secondsOCI · 29 Oct 2026
- AWS IAM ABAC in practice: tag-based access control with principal and resource tag conditionsAWS · 29 Oct 2026
- AWS IAM basics: users, groups, roles and policies explained with examples you can runAWS · 29 Oct 2026
- MySQL 'Access denied for user' (error 1045): find which account the server matched and fix itDatabases · 29 Oct 2026
- OCI IAM policy conditions in depth: tag-based access, request variables and target variablesOCI · 29 Oct 2026
- OCI Network Firewall in a hub VCN: DRG and route table design for north-south and east-west inspectionOCI · 29 Oct 2026
- Permission-aware RAG: document-level security trimming with ACL metadata and identity filtersAI & GenAI · 29 Oct 2026
- Securing MCP servers: authentication, scoped tool permissions, input validation and audit for ops toolingAI & GenAI · 29 Oct 2026
- Sev1: a Snowflake network policy locked out every user and integrationData Platform · 29 Oct 2026
- Sev1: an IP access list change locked everyone out of the Databricks workspaceDatabricks on Azure · 29 Oct 2026
- ADLS firewall blocking Azure Databricks: 403 AuthorizationFailure from classic clusters, Unity Catalog and serverless - resource instance rules, subnets and NCCsDatabricks on Azure · 28 Oct 2026
- Decoding AWS AccessDenied: SCPs, RCPs, permission boundaries, session policies and resource policiesAWS · 28 Oct 2026
- Moving Chroma from an embedded notebook database to a server: Docker deployment, persistence, access control and health checksAI & GenAI · 28 Oct 2026
- Multi-tenant RAG on Pinecone: one namespace per tenant vs metadata filters vs index per tenantAI & GenAI · 28 Oct 2026
- Traffic to private endpoints bypassing Azure Firewall: /32 routes, private endpoint network policies and SNATAzure · 28 Oct 2026
- Airflow 3.3.1 and 3.3.2 behaviour changes - pandas 3 XComs, masked team config, backfill 404s and bearer tokens beating cookiesData Platform · 27 Oct 2026
- Azure Databricks IP access lists: restricting workspace access by network without locking yourself outDatabricks on Azure · 27 Oct 2026
- Disabling legacy IMDSv1 on OCI instances - find v1 callers, switch to v2 only and keep it that wayOCI · 27 Oct 2026
- DStream jobs fail to recover from checkpoint after the July 2026 Databricks update - setting spark.streaming.checkpoint.allowedClassesDatabricks on Azure · 27 Oct 2026
- Kafka ACL errors: fixing TopicAuthorizationException, GroupAuthorizationException and other authorization failuresData Platform · 27 Oct 2026
- MCP server not connecting or tools missing: fixing stdio, Streamable HTTP and auth failuresAI & GenAI · 27 Oct 2026
- October 2026 Patch Tuesday for Azure-hosted Windows Servers - which fixes to rush, how to find exposed VMs and how to roll outAzure · 27 Oct 2026
- PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on Azure - finding exposed PHP, patching App Service and VMs, and WAF stopgapsAzure · 27 Oct 2026
- PHP2Shell on AWS - finding every PHP install with SSM Inventory, patching EC2 and containers, and using AWS WAF as a stopgapAWS · 27 Oct 2026
- PostgreSQL 'no pg_hba.conf entry for host' and password authentication failures: a fix-it guideDatabases · 27 Oct 2026
- SQL Server October 2026 security updates (CVE-2026-96956 and 21 more) - which build to install, known issues to read first, and a safe rolloutDatabases · 27 Oct 2026
- Unity Catalog row filters and column masks: restricting rows and hiding sensitive columns in Azure DatabricksDatabricks on Azure · 27 Oct 2026
- PostgreSQL roles and privileges cheat sheet - read-only users, app owners, default privileges and \"permission denied\"Databases · 26 Oct 2026
- Prompt Shields and content safety for Azure OpenAI apps - setting up jailbreak and document attack detectionAI & GenAI · 26 Oct 2026
- Secrets Manager rotation failed: Lambda, network, permissions and stuck AWSPENDINGAWS · 26 Oct 2026
- SQL Server orphaned users after a restore or migration - finding and re-linking them to loginsDatabases · 26 Oct 2026
- Unity Catalog grants cheat sheet - USE CATALOG, USE SCHEMA, SELECT, ownership and fixing \"permission denied\"Databricks on Azure · 26 Oct 2026
- VPC Flow Logs in Athena - cheat sheet of queries for rejected traffic, top talkers and who reached whatAWS · 26 Oct 2026
- Advisory: a SQL Server security baseline - authentication, roles, encryption and auditing by designDatabases · 25 Oct 2026
- Advisory: an operating model for Cloud Guard and Security Zones - targets, recipes, triage and responseOCI · 25 Oct 2026
- Advisory: container image supply chain on AWS - ECR, Inspector scanning, signing and admission controlAWS · 25 Oct 2026
- Advisory: container image supply chain on Azure - ACR design, base images, scanning and signingAzure · 25 Oct 2026
- Advisory: container image supply chain on OCI - OCIR, vulnerability scanning, image signing and OKE verificationOCI · 25 Oct 2026
- Advisory: designing AWS guardrails - SCPs, RCPs, declarative policies, proactive and detective controlsAWS · 25 Oct 2026
- Advisory: identity design for Azure Databricks - Entra ID sync, account groups, service principals and admin rolesDatabricks on Azure · 25 Oct 2026
- Advisory: Key Vault design - vault per app, access model, Managed HSM and customer-managed keysAzure · 25 Oct 2026
- Advisory: networking for Databricks serverless on Azure - network connectivity configs, private endpoints and egress controlDatabricks on Azure · 25 Oct 2026
- Advisory: OCI Vault and key management design - vault types, HSM vs software keys, external keys and rotationOCI · 25 Oct 2026
- Advisory: Power BI on Azure Databricks - import, DirectQuery, composite models and how to connect securelyDatabricks on Azure · 25 Oct 2026
- Advisory: Private Link, service endpoints or public endpoints with firewall rules - a PaaS network access guideAzure · 25 Oct 2026
- Advisory: reviewing a live OCI workload against the Well-Architected FrameworkOCI · 25 Oct 2026
- Advisory: secrets and encryption key strategy on AWS - Secrets Manager, Parameter Store and KMSAWS · 25 Oct 2026
- Advisory: security monitoring for Azure Databricks - audit logs, system tables and Microsoft SentinelDatabricks on Azure · 25 Oct 2026
- Advisory: threat modelling a GenAI application with the OWASP Top 10 for LLM applicationsAI & GenAI · 25 Oct 2026
- Advisory: which data may go to which model - a data classification policy for GenAIAI & GenAI · 25 Oct 2026
- Advisory: workload identity on AWS - instance profiles, task roles, EKS Pod Identity, IRSA and IAM Roles AnywhereAWS · 25 Oct 2026
- Advisory: workload identity on OCI - instance principals, resource principals and OKE workload identityOCI · 25 Oct 2026
- Emergency cut-off for a model endpoint: blocking all access to Azure OpenAI or Bedrock in minutesAI & GenAI · 25 Oct 2026
- Optimization: Azure Firewall policy clean-up, SKU choice and cost controlAzure · 25 Oct 2026
- Running an SSIS package from a SQL Agent job as a specific Windows account: credential, proxy and stepDatabases · 25 Oct 2026
- Sev1: a prompt injection worked in production. The incident response runbookAI & GenAI · 25 Oct 2026
- Sev1: Databricks personal access token leaked — revoke, audit access, lock down tokensDatabricks on Azure · 25 Oct 2026
- Sev1: nobody has sysadmin on SQL Server. Regaining access with single-user modeDatabases · 25 Oct 2026
- Sev1: passwords, keys or personal data found in LLM prompts, logs and tracesAI & GenAI · 25 Oct 2026
- Transformation: from a public, default-network Databricks workspace to VNet injection and Private LinkDatabricks on Azure · 25 Oct 2026
- Transformation: moving apps from the public OpenAI API to Azure OpenAI with enterprise controlsAI & GenAI · 25 Oct 2026
- Transformation: replace Databricks personal access tokens with OAuth and managed identitiesDatabricks on Azure · 25 Oct 2026
- Who changed that job? Auditing SQL Agent job changes with SQL Server AuditDatabases · 25 Oct 2026
- Azure Databricks secret scopes cheat sheet: Key Vault-backed scopes, ACLs and dbutils.secretsDatabricks on Azure · 24 Oct 2026
- Expiring Entra ID app registration secrets and certificates, finding and rotating them without an outageAzure · 24 Oct 2026
- Redact PII from LLM prompts and logs with PresidioAI & GenAI · 24 Oct 2026
- Sev1: storage account key or SAS token leaked — rotate, revoke and lock downAzure · 24 Oct 2026
- SQL Server 'Login failed for user' (error 18456): read the state and fix the causeDatabases · 24 Oct 2026
- Transformation: from IAM users in every account to IAM Identity Center and rolesAWS · 24 Oct 2026
- Transformation: replace client secrets with managed identities and workload identity federationAzure · 24 Oct 2026
- Transformation: retire bastion hosts and open SSH/RDP ports with SSM Session ManagerAWS · 24 Oct 2026
- Advanced Azure Databricks: encryption keys, hardening, reading query plans and change data captureDatabricks on Azure · 23 Oct 2026
- Azure SQL Database best practices: a production checklist for design, security, performance, resilience and costDatabases · 23 Oct 2026
- Databricks service deployment checklist: best practices for a secure, governed platformData Platform · 23 Oct 2026
- Least privilege for job steps: SQL Server Agent proxies and credentials explainedDatabases · 23 Oct 2026
- Reaching private OCI instances with the Bastion service: managed SSH and port forwardingOCI · 23 Oct 2026
- Runbook: rotate Azure OpenAI API keys without downtime, then switch apps to Entra IDAI & GenAI · 23 Oct 2026
- Sev1: traffic spike or DDoS-style attack on a public web app, response with Front Door and WAFAzure · 23 Oct 2026
- Stop handing out sysadmin for job access: SQLAgentUserRole, ReaderRole and OperatorRole comparedDatabases · 23 Oct 2026
- The job broke when Dave left: getting SQL Agent job ownership and security rightDatabases · 23 Oct 2026
- Who changed this? Finding AWS changes with CloudTrail, Athena and ConfigAWS · 23 Oct 2026
- AKS baseline cluster: a secure single-cluster setup for productionAzure · 22 Oct 2026
- Autonomous Database (serverless) secure baseline: private endpoint, mTLS, users and backupsOCI · 22 Oct 2026
- AWS identity foundation: IAM Identity Center, permission sets and break-glass accessAWS · 22 Oct 2026
- Azure AI Foundry landing zone: private networking, identity and guardrailsAI & GenAI · 22 Oct 2026
- Azure identity foundation: Entra ID roles, PIM and break-glass accountsAzure · 22 Oct 2026
- Azure Key Vault 403 Forbidden: access policies vs RBAC, firewalls and soft deleteAzure · 22 Oct 2026
- Build a read-only MCP server so AI assistants can query your ops tools safelyAI & GenAI · 22 Oct 2026
- Database security baseline: identity, network, encryption, auditing and secretsDatabases · 22 Oct 2026
- EKS baseline cluster: private endpoint, managed node groups, Pod Identity and add-onsAWS · 22 Oct 2026
- KMS AccessDeniedException and disabled keys: fixing encrypted resource failuresAWS · 22 Oct 2026
- Moving application passwords into OCI Vault secretsOCI · 22 Oct 2026
- OCI IAM foundation: identity domains, groups, policies and break-glassOCI · 22 Oct 2026
- OCI IAM policy cheat sheetOCI · 22 Oct 2026
- OCI Object Storage bucket baseline: private access, encryption, versioning and retentionOCI · 22 Oct 2026
- OCI observability and security foundation: Logging, Monitoring, Events and Cloud GuardOCI · 22 Oct 2026
- OCI WAF is blocking legitimate users: find the rule and tune it safelyOCI · 22 Oct 2026
- OKE baseline cluster: enhanced cluster, private endpoint, node pools and workload identityOCI · 22 Oct 2026
- ORA-28000 account locked and ORA-28001 password expired: fix and preventDatabases · 22 Oct 2026
- Prompt injection defense checklist for production LLM appsAI & GenAI · 22 Oct 2026
- S3 403 Access Denied: a layer-by-layer checklistAWS · 22 Oct 2026
- S3 bucket security baseline: Block Public Access, encryption, versioning and Object LockAWS · 22 Oct 2026
- Secure baseline for a production Azure Storage accountAzure · 22 Oct 2026
- Snowflake 'Object does not exist or not authorized': fixing role and grant issuesData Platform · 22 Oct 2026
- Snowflake account baseline: roles, warehouses, network policies and resource monitorsData Platform · 22 Oct 2026
- Standalone Azure VM production build checklist: single-instance done rightAzure · 22 Oct 2026
- Standalone EC2 instance production build: IMDSv2, gp3, SSM, backup and recoveryAWS · 22 Oct 2026
- Standalone OCI compute instance production build checklistOCI · 22 Oct 2026
- Unity Catalog PERMISSION_DENIED: granting the right privilegesData Platform · 22 Oct 2026
- Debugging AWS IAM "AccessDenied" errors step by stepAWS · 2 Oct 2026