Stanley

Data Enthusiast | Database Administrator | Cloud Security | Influencer

[Stanley @Obijexx]

The Cloud isn't someone else secure computer, its a shared liability machine.
As Organisations scale across the CSP's and hybrid infra. The gap btw rapid deployment and security is widening fast.
I am dedicated to breaking down the following:

Cloud Security Posture Management (CSPM)
Zero Trust Identity Framework
DevSecOps & Shift-left workflows

If you are building or defending in the Cloud, follow along. Let's secure the stack together

#CloudSecurity #cybersecurity #infosec

[Stanley @Obijexx]

Public internet access vs VPC Endpoints:

Public = exposed, slower, costs more
VPC Endpoint = private, faster, cheaper, secure

This single change fixes a huge number of misconfigurations.
If you manage cloud environments, kindly save this.

#cloudsecurity #cybersecurity

[Stanley @Obijexx]

@ArtemPolynko Cloud Security

[Stanley @Obijexx]

Stop routing S3 traffic through the internet.

Create a Gateway VPC Endpoint and update your route table.
Your security team (and bill) will thank you.

#cloudsecurity #cybersecurity

[Stanley @Obijexx]

VPC Endpoints in AWS is one of the smartest security moves you can make.
They let your VPC talk to S3, DynamoDB, etc. privately; no public internet, no public IPs.
Result: Smaller attack surface + lower costs.
Enable them for S3 by default in production accounts.
#CloudSecurity #AWS

[Stanley @Obijexx]

Before you log off, run one quick check; enable or review your cloud provider’s security posture score.

AWS: Security Hub
Azure: Microsoft Defender for Cloud
GCP: Security Command Center

Fix the top 3 findings tonight and you’ll sleep better. Small consistent actions beat heroic weekend fixes.

#infosec
#cybersecurity #cloudsecurity

[Stanley @Obijexx]

One of the easiest mistake to overlook in Dev environment is not encrypting data at rest or in transit.

Fix:
• Default encryption on all storage
• Enforce TLS 1.2+ everywhere
• Use KMS / Key Vault for key management

#Infosec #Cybersecurity #Cloudsecurity #Cybergate

[Stanley @Obijexx]

Mistake of turning off Logging or ignored
No visibility = slow (or missed) incidents.

Fix:
• Enable CloudTrail / Activity Log / Audit Logs
• Send to central SIEM or Security Hub
• Set up alerts for suspicious actions

#Infosec #cybersecurity #cloudsecurity

[Stanley @Obijexx]

Mistake of 0.0.0.0/0 Anywhere (Security Groups or NSGs) is still way too common.

Quick fix:
• Default deny
• Allow only specific IPs/ports needed
• Use VPC endpoints instead of public internet where possible"

#Infosec #cloudsecurity #cybersecurity #Cybergate

[Stanley @Obijexx]

Fixing over-privileged IAM Roles & Users
“Admin for convenience” = breach waiting to happen.
Fix:
• Least privilege by default
• Use IAM Access Analyzer
• Rotate credentials + enable just-in-time access

#infosec #cybersecurity #Cybergate #cloudsecurity

[Stanley @Obijexx]

Most cloud breaches is still caused by basic misconfigurations.

Public S3 Buckets (or Azure Blobs) is still responsible for massive data leaks in 2026.

How to Fix it in <5 mins:
• Block public access (account + bucket level)
• Use IAM roles instead of keys
• Enable versioning + encryption

#infosec #cloudsecurity #Cybergate #cybersecurity

[Stanley @Obijexx]

Most cloud breaches is still caused by basic misconfigurations.

Public S3 Buckets (or Azure Blobs) is still responsible for massive data leaks in 2026.
How to Fix it in <5 mins:
• Block public access (account + bucket level)
• Use IAM roles instead of keys
• Enable versioning + encryption

#infosec #cloudsecurity #Cybergate #cybersecurity

[Stanley @Obijexx]

@StupidManBozo Ready

[Stanley @Obijexx]

@RomeoRichman Active

[Stanley @Obijexx]

Zero Trust biggest misconceptions:

"We have a VPN, so we're secure."

A VPN authenticates users onto a network, it shouldn't automatically grant unrestricted access to every application or resource.

Every access request should be continuously verified, authorized, and limited to the minimum permissions required.

That's why micro-segmentation and continuous verification are core to a Zero Trust architecture.

#ZeroTrust #CloudSecurity #CyberSecurity #NetworkSecurity #InfoSec

[Stanley @Obijexx]

@CyberRacheal I am @Obijexx a cloud security professional, let's connect and happy cyber social

[Stanley @Obijexx]

Elena, head of cloud security at Nexus Dynamics, woke to alarms at 2:17 a.m. An S3 bucket holding customer PII and AI model weights was exfiltrating data at high speed.The access came from a temporary service account she’d created—now compromised.

CloudTrail showed the breach started with a spear-phished DevOps engineer whose credentials poisoned their Terraform pipeline. The attacker, pivoting from a nearby country, had used stolen CTO approvals and overly permissive IAM roles.

Elena triggered her emergency script: revoking all temporary credentials, activating least-privilege guardrails via AWS Organizations SCPs, and flooding the attacker with beaconed fake data. Outbound traffic died. By sunrise, the exfiltration was stopped. The post-mortem was clear:

zero-trust isn’t a slogan, it’s survival. In the cloud, there is no perimeter. Only speed, vigilance, and policies that actually work.

[Stanley @Obijexx]

@webenstein_ Hi

[Stanley @Obijexx]

@MartinOtie819 Reach

[Stanley @Obijexx]

"Zero Trust in AWS/Azure/GCP:
1). Use IAM roles with least privilege
2). Implement service mesh (Istio, Linkerd) to secure service-to-service communication.
3). Enforce mTLS between services (so services authenticate each other and encrypt traffic in transit)

#ZeroTrust #CloudSecurity #AWS #Azure #GoogleCloud #CyberSecurity #InfoSec

[Stanley @Obijexx]

Senior Cloud Security Paths:
• Cloud Security Architect
• Principal Security Engineer
• Cloud-first CISO / Head of Cloud Security
You own strategy, Zero Trust architecture, and risk.

CCSP + strong multi-cloud experience is gold here.

Salary jump is real in 2026."