Networking
4 articles on Networking — AWS security, compliance, and account management from the Vigilare team.
AWS Network ACLs: Subnet-Level Access Control for Defense in Depth
Network ACLs operate at the subnet level and provide a stateless firewall that complements security groups. Understanding when to use NACLs versus security groups, and how they interact, is essential for VPC security architecture.
Vigilare Engineering · December 22, 2025 · 7 min read
AWS Security Groups Best Practices: Writing Rules That Actually Work
Security groups are the primary network access control for EC2 and other services, but many environments accumulate rules that are overly broad, redundant, or provide weaker protection than intended. This guide covers the principles and practices that make security groups maintainable and secure.
Vigilare Engineering · December 21, 2025 · 8 min read
AWS VPC Flow Logs: Configuration, Storage, and Analysis
VPC Flow Logs are the primary data source for network security analysis in AWS. Getting the configuration right — format, destination, aggregation interval — determines both what you can detect and what you pay for storage.
Vigilare Engineering · December 20, 2025 · 8 min read
VPC Security Monitoring: Detecting Network Threats in AWS
VPC security monitoring combines flow logs, GuardDuty network findings, and DNS query logging to detect threats that bypass application-layer security. This guide covers the full network monitoring stack and what each layer catches.
Vigilare Engineering · December 19, 2025 · 9 min read