Ravi Sir's Cyber Security Cards › Revision Cards
Security Checklist: The Target You Will Secure
Security Checklist: The Target You Will Secure A list of the safety controls already in the reels app, before you start testing it. HTTPS, prepared statements, hashed passwords, CSRF tokens, private S3 and RDS, IAM role, IMDSv2. Rate limiting on login (Nginx limit_req or fail2ban), ownership checks
Read card text
What this card says
What it is
A list of the safety controls already in the reels app, before you start testing it.
Already done
HTTPS, prepared statements, hashed passwords, CSRF tokens, private S3 and RDS, IAM role, IMDSv2.
Next to add
Rate limiting on login (Nginx limit_req or fail2ban), ownership checks on delete (to stop IDOR), CloudWatch alarms.
| Area | Control in this project | Status |
|---|---|---|
| Network | web-sg: 22 from your IP only, 80/443 open; RDS private,… | ☐ |
| Identity | IAM role scoped to s3:PutObject/GetObject on videos/*;… | ☐ |
| S3 | Block Public Access ON, DenyInsecureTransport, versioning,… | ☐ |
| RDS | Encryption, TLS (db_ssl_ca), least-privilege reels_app,… | ☐ |
| Transport | HTTPS with Certbot, HTTP→HTTPS redirect, HSTS, Secure… | ☐ |
Learn more in the lesson: 16.13 Security Checklist: The Target You Will Secure