Preparing secure SSH access
Use individually assigned access where practical so changes can be attributed and access can be revoked without affecting everyone. SSH keys are useful for authentication, but the private k…
Browse this section
Requesting a firewall rule without losing access
A firewall request should describe a required communication path, not simply ask to open all traffic. Both provider-side and operating-system rules may affect a connection. Plan the change …
TLS certificate issuance and renewal checks
A valid certificate needs the correct names, a trusted chain and a working renewal process. HTTPS protects the connection; it does not prove that the application itself is free of vulnerabi…
What to send us when you suspect a compromise
Treat unexpected administrator accounts, changed files or suspicious processes as evidence to investigate. A successful malware scan does not establish that a system is clean. Use a trusted…
Container ports and management interfaces
A container being reachable from its host does not mean it should be reachable from the Internet. Published container ports and host firewall settings must be reviewed together. Docker can …
