Guides

How-tos & walkthroughs

Practical, technical writeups — tools, configurations, and workflows, with the GRC and compliance angle made explicit.

SSH Certificate Authority with Vault

Static SSH keys are a recurring audit finding. They live in authorized_keys files scattered across servers, get copied between teammates,…

Jul 9, 2026 AWS

Policy as Code – Enforcing Controls with OPA

A team spins up infrastructure, an auditor reviews it weeks later, a finding lands in a spreadsheet, someone opens a…

Jun 9, 2026 vault

Kubernetes Secrets Management with Vault

LiteLLM requires multiple sensitive credentials — OpenAI and Anthropic API keys, a database password, and a master key for its…

Mar 9, 2025 IAM

Kubernetes Authentication with Okta OIDC

Certificate-based Kubernetes authentication has three audit problems: no central revocation mechanism, no MFA enforcement, and no connection to your identity…

Mar 9, 2025 IAM

Vault OIDC Auth with Okta

Vault’s default authentication model is root tokens and static admin tokens. Neither expires automatically, neither requires MFA, and neither connects…

Mar 9, 2025