#aws

1. 
   aws

   How a CloudFront Custom Error Page Leaked JWTs to S3: A Case Study

   A pen-test curl found CloudFront forwarding `Authorization` headers to the S3 error-page bucket, where S3 reflected every JWT back in its XML error response. Two lines of Terraform closed it across sixteen distributions.

   NH Nedim Hadzimahmutovic Aug 13, 2026 · 12 min
2. 
   devsecops

   From DevOps to DevSecOps: How I Became Clearview's In-House Pen-Tester

   How we built an in-sprint pen-tester role into every engagement — the DevSecOps handoff, the two decades of DevOps that led to it, and the OWASP Top 10 categories that show up first in real client APIs.

   NH Nedim Hadzimahmutovic Jul 11, 2026 · 11 min
3. 
   technology

   The most Flexible AWS Savings Plan

   How AWS Compute Savings Plans can cut up to 66% off the cloud bill — without locking you into an instance family.

   cv Clearview Mar 11, 2024 · 4 min
4. 
   aws cost optimization

   Migrating EC2 to AWS Graviton (ARM): A Cost-Reduction Case Study

   How we cut Clearview client EC2 bills by up to 20% by migrating x86 workloads to AWS Graviton (ARM64) — the instance-family swap (M6g, C7gd, R7g), the AMI-selection step in Terraform, and the compatibility checks we ran first.

   NH Nedim Hadzimahmutovic Feb 11, 2024 · 7 min

No essays match that search.