Attacks and data violations involving poorly secured APIs are occurring regularly. Protecting web APIs with general-purpose application security solutions alone continues to be ineffective. Each new API represents an additional and potentially unique attack vector into your systems. Modern application architecture trends — including mobile access, microservice design patterns, and hybrid on-premises/cloud usage has driven security to have largely a single “gateway” point at which protection can be enforced (Frankly, if you can’t govern that then you are at the helm of bigger problem).

Intelligence around logged information from your application could be critical to the success of the product but also for business ROI. It’s also part of the operational excellence pillar in well-architected-framework-lens. It assists with factors like business KPIs or customer insights which are important to know how to keep your applications secure, healthy and reliable. Logs analytics include application logs, audit logs, platform logs, and user logs etc. But challenges arise for log management at scale with

If you are on-prem data centers and are looking to build a digital transformation solution in the cloud. OR If you have AWS or GCP already running in some capacity and you have thoughts of swapping one with the other then this post might be of consequence to you. I have been working with the cloud for almost 6 years now. And all through my journey, we have different providers come and go.