Cloud security - BuyCloudExpress

Abstract illustration accompanying this guide on european data sovereignty

Data sovereignty in Europe: what it means for your architecture

Sovereignty is not the same as residency, and confusing the two produces architectures that satisfy neither. Here is the distinction and what it changes.

OVHcloud 4 min read

Abstract illustration accompanying this guide on root access

What full root access actually gets you

Root access is the headline feature of every VPS listing. Here is what it genuinely enables, what it does not, and the responsibilities that arrive with…

Linode 4 min read

Abstract illustration accompanying this guide on hardening a cloud server

Hardening a fresh cloud server in thirty minutes

A new public IP address starts receiving automated attacks within minutes. These steps, in this order, remove almost all of that risk before anything is exposed.

DigitalOcean 4 min read

Abstract illustration accompanying this guide on ssh keys

SSH keys, properly

Most people generate one key, copy it everywhere, and never think about it again. A slightly better practice costs ten minutes and removes several genuinely bad…

Linode 4 min read

Abstract illustration accompanying this guide on security groups and network acls

Firewalls, security groups and network ACLs

Cloud platforms offer several overlapping ways to filter traffic. They behave differently in ways that matter, and using the wrong one produces rules that do not…

Hetzner 4 min read

Abstract illustration accompanying this guide on least privilege for cloud iam

Least privilege for cloud IAM, without grinding to a halt

Everyone agrees with least privilege and almost nobody implements it, because the strict version blocks work. Here is a version that survives contact with a real…

AWS 4 min read

Multi-factor authentication on cloud accounts

Not all second factors are equal, and the differences matter. Here is what each one actually resists, and how to avoid locking yourself out of your…

Azure 4 min read

Abstract illustration accompanying this guide on leaked cloud credentials

What to do when cloud credentials leak

Exposed keys are found by automated scanners within minutes. The order of the first hour's actions determines whether this is an incident or a disaster.

AWS 4 min read

Abstract illustration accompanying this guide on backups versus snapshots

Backups and snapshots are not the same thing

Snapshots protect against infrastructure failure. Backups protect against everything else, including you. Confusing them is how organisations discover they had neither.

UpCloud 4 min read

Private networking between cloud servers

Servers talking to each other over public addresses is slower, less safe and often billed. Private networking fixes all three, and is far easier to set…

Hetzner 4 min read