#aws

10 posts RSS

Securing LLM API Keys with AWS KMS

A prompt-injection researcher points your app's own debug endpoint at itself, triggers an unhandled exception, and your error hand…

Jul 8, 2026 7 min read

Someone hits an error, copies the whole stack trace into a chat window, and asks the model to "just figure this out fast." Buried…

Jun 23, 2026 7 min read

Part 3 of 3 on @faizahmed/secret-keystore . Part 1 was the threat model; Part 2 was the CLI. This part is how your app reads secre…

Jun 12, 2026 6 min read

Part 2 of 3 on @faizahmed/secret-keystore . Part 1 covered the threat model; this part is pure hands-on. By the end you'll have an…

Jun 12, 2026 5 min read

Part 1 of 3 in a deep-dive on @faizahmed/secret-keystore . New here? Start with the Complete Guide. For the original incident writ…

Jun 12, 2026 6 min read

A year ago I would have told you a .env file was fine. Then we patched a CVSS 10.0 RCE in Next.js (CVE-2025-66478) and spent the n…

Jun 12, 2026 3 min read

This post starts with the production problem we hit in late 2025, the critical security vulnerability in React Server Components a…

Feb 21, 2026 10 min read

Everything was fine until it wasn’t. Our Node.js app, powered by AWS SDK v3, started freezing during peak traffic. Requests to S3…

Nov 7, 2025 5 min read

This guide walks you through everything from routing and stage management to Lambda proxies, VPC links, and CORS. What Is AWS API…

Jul 2, 2025 4 min read

Firecracker is an open-source virtualization technology developed by Amazon Web Services (AWS). It is designed to enable customers…

Sep 26, 2023 4 min read