Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
••••••••
Sichere ProgrammierungI built a tool that makes images bigger, not smaller – here's why(25.09.2026 um 05:56 Uhr)
••••••••••
Sichere ProgrammierungI built a tool that makes images bigger, not smaller – here's why(25.09.2026 um 05:56 Uhr)
••
Intelligence View
⚡ tsecurity.de Intelligence

From .NET to Cloud – AWS Engineer Journey (Day 2: Deep Dive into EC2)

As part of my structured transition from .NET development to Cloud Engineering, I recently explored Amazon EC2 (Elastic Compute Cloud) — one of the core compute services in Amazon Web Services. Understanding EC2 is a major step toward d…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

As part of my structured transition from .NET development to Cloud Engineering, I recently explored Amazon EC2 (Elastic Compute Cloud) — one of the core compute services in Amazon Web Services.



Understanding EC2 is a major step toward designing scalable and production-ready cloud systems.



🚀 What is Amazon EC2?



Amazon EC2 provides resizable virtual servers in the cloud.

It allows engineers to provision compute capacity on-demand without managing physical hardware.



This is where applications actually run in AWS infrastructure.



🔹 Key Learnings from My Hands-on Practice

1️⃣ Launching Virtual Servers




  • Created EC2 instances using different AMIs:


  • Amazon Linux


  • Ubuntu


  • Understood the full launch workflow: AMI → Instance Type → Key Pair → Security Group → Storage → Launch.




2️⃣ Instance Types & Sizing Strategy



Explored instance families:




  • General Purpose

  • Compute Optimized

  • Memory Optimized



Learned how selecting the right instance type impacts performance and cost optimization.



3️⃣ Secure Access & Networking




  • Configured Key Pairs for SSH authentication

  • Set up Security Groups (firewall rules)

  • Practiced SSH connectivity via terminal

  • Understood inbound vs outbound traffic rules



Security and networking fundamentals became much clearer during this process.



4️⃣ Storage with EBS




  • Studied EBS volume types

  • Attached & detached volumes

  • Understood root volume vs additional storage

  • Learned persistence behavior after instance stop/terminate



Storage design directly affects durability and performance.



5️⃣ Elastic IP & Monitoring




  • Explored Elastic IP for static public addressing

  • Understood basic monitoring concepts

  • Learned about auto-recovery mechanisms



These concepts connect directly to high availability and reliability engineering.



🧠 Technical Insight Gained



Coming from an application development background, EC2 helped me see infrastructure from a system-level perspective:




  • Applications run on compute (EC2)

  • Storage persists in EBS

  • Access is controlled via IAM

  • Traffic flows through VPC and Security Groups

  • Availability requires monitoring and recovery planning



Cloud engineering is not just deployment — it’s architecture thinking.



💡 Reflection



The more I learn AWS, the more I realize:



Strong cloud engineers don’t just write code.

They design systems that are scalable, secure, and resilient by default.



Step by step, building foundations.



Consistency is the real superpower 💪🐧

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
Syntax validiert (0 Fehler)
title: Detect Exploitation - From .NET to Cloud – AWS Engineer Journey (Day 2: Deep Dive into EC2)
id: 6d4a6ebe-2cde-4ebf-8b0a-7f76ae972c71
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "From .NET to Cloud – AWS Engin" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("From NET to Cloud  AWS Engineer Journey ")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*From NET to Cloud  AWS Engineer Journey *"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "From NET to Cloud  AWS Engineer Journey "
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich From .NET to Cloud – AWS Engineer Journe.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten From .NET to Cloud – AWS Engineer Journey (Day 2: Deep Dive into EC2)

Thematisch verwandte Begriffe: From, Cloud, Engineer, Journey · 6 Treffer

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-87722 | Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search q…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag