(CATEGORY)

Security

This category shows how an application and its infrastructure are protected on AWS. Its main article explains why lists of known bad actors are always behind: someone looking for weak points changes details easily, but the moves stay the same. So the system I built recognises a visitor by what they do and not by who they are. It uses four AWS services, AWS WAF, Lambda, EventBridge and DynamoDB, and it blocks by itself, without a person in the loop. The system ran in the real infrastructure of a healthcare platform in America. The article explains what the ready-made AWS guard does not notice, how the flow works step by step and how it avoids cutting off a normal customer, with simple examples and without technical terms that are left unexplained. It also says what to watch for if you build something similar. Anyone who reads it understands what to ask of the team that builds or hosts their site. This page lists the 1 article in the «Security» category, written from real work and sorted from the most recent. Each article starts with the answer and continues with the facts behind it.

Articles: Security

Illustration: a scanner trying many doors is recognised by its behaviour and blocked

SecurityMay 2026 · 7 min read

Block scanners by behaviour, not by list

Lists of known-bad addresses are always a day behind. How I built, on top of AWS WAF, a serverless system with Lambda, EventBridge and DynamoDB that recognises the pattern of a scanner and shuts it out by itself.