Tags
IAM
May 3, 2026
Alibaba Cloud Full Stack
58 min readAlibaba Cloud Full Stack (6): RAM, KMS, and Cloud Security
Lock down your cloud: RAM users, groups, roles, and policies. STS for temporary credentials. KMS for encryption. ActionTrail for audit logging. Build a secure multi-team access model with least privilege.
May 7, 2023
Cloud Computing
34 min readCloud Computing (6): Cloud Security and Privacy Protection
A working engineer's guide to cloud security: shared responsibility, IAM that actually scales, encryption at rest / in transit / in use, zero trust, compliance frameworks, and incident response that you can rehearse.