Ravi Sir's Cyber Security Cards › Interview Cards
What belongs on a live-project security checklist?
What belongs on a live-project security checklist? HTTPS on, tight security groups, RDS private, S3 Block Public Access on, IAM role (not root keys), prepared statements, cookie flags, patches, tested backups, CloudTrail on, no secrets in git. Walk down the list before launch and tick each item on y
Read card text
What this card says
Short answer
HTTPS on, tight security groups, RDS private, S3 Block Public Access on, IAM role (not root keys), prepared statements, cookie flags, patches, tested backups, CloudTrail on, no secrets in git.
Example
Walk down the list before launch and tick each item on your own project.
Say it in the interview
“I have a launch checklist and I can walk through each item and why it’s there.”
Why it matters
Most breaches come from one missed box on a list like this.
Learn more in the lesson: 46.5 Domains, S3, RDS and Live-Project Security Questions