--- title: "security" author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/blog/categories/security --- [Home](/)›[All Posts](/blog)›[All Categories](/blog/categories)›[Security](/blog/categories/security) Category # security 9Articles [![Git SSH Keys for GitHub, GitLab, and Bitbucket on Windows](/_astro/hero.CT0gfesP_1kDHLR.webp)](/blog/post/git-ssh-keys-for-github-gitlab-and-bitbucket-on-windows) ## [Git SSH Keys for GitHub, GitLab, and Bitbucket on Windows](/blog/post/git-ssh-keys-for-github-gitlab-and-bitbucket-on-windows) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [Git](/blog/categories/git) - [SSH](/blog/categories/ssh) - [Windows](/blog/categories/windows) - [Version Control](/blog/categories/version-control) - [Security](/blog/categories/security) - [Developer Tools](/blog/categories/developer-tools) - Published: 22 Oct, 2022 - Updated: 07 Jun, 2026 Introduction By default, Git talks to remotes over HTTPS, so it asks for your username and password on every git pull or git push. SSH fixes that. GitHub, GitLab, and Bitbucket all let Git aut [#SSH Key Generation](/blog/tags/ssh-key-generation)[#Ed25519](/blog/tags/ed25519)[#Git Configuration](/blog/tags/git-configuration)+8 tags [read more](/blog/post/git-ssh-keys-for-github-gitlab-and-bitbucket-on-windows) [![What's the Deal with Shift-Left Security, and Why Should You Care?](/_astro/hero.xI_32nOg_3BHjK.webp)](/blog/post/shift-left-security-sast-dast-sca-cicd) ## [What's the Deal with Shift-Left Security, and Why Should You Care?](/blog/post/shift-left-security-sast-dast-sca-cicd) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [CI/CD](/blog/categories/cicd) - [DevSecOps](/blog/categories/devsecops) - [Security](/blog/categories/security) - [Automation](/blog/categories/automation) - [Application Security](/blog/categories/application-security) - Published: 24 Jan, 2026 Let's be honest: in today's software world, security can't be an afterthought. If you're still waiting until the end of your development cycle to think about vulnerabilities, you're doing it wrong. Th [#Shift Left Security](/blog/tags/shift-left-security)[#SAST](/blog/tags/sast)[#DAST](/blog/tags/dast)+7 tags [read more](/blog/post/shift-left-security-sast-dast-sca-cicd) [![Container Image Signing with Cosign: A Hands-On Guide to Secure Your Supply Chain](/_astro/hero.eolo66hS_Z1Eh5SE.webp)](/blog/post/container-image-signing-cosign-guide) ## [Container Image Signing with Cosign: A Hands-On Guide to Secure Your Supply Chain](/blog/post/container-image-signing-cosign-guide) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [Security](/blog/categories/security) - [Supply Chain Security](/blog/categories/supply-chain-security) - [Containers](/blog/categories/containers) - [DevSecOps](/blog/categories/devsecops) - Published: 18 Jan, 2026 In today's fast-paced software world, we all rely on container images to package and run our apps. They're super consistent and efficient, which is great! But this ease also brings new security headac [#Cosign](/blog/tags/cosign)[#Sigstore](/blog/tags/sigstore)[#Container Signing](/blog/tags/container-signing)+4 tags [read more](/blog/post/container-image-signing-cosign-guide) [![Compliance as Code: Making Security Easier with Terraform and InSpec](/_astro/hero.CuKP9d1A_ZJUUcq.webp)](/blog/post/compliance-as-code-nist-iso-27001-gdpr-terraform-inspec) ## [Compliance as Code: Making Security Easier with Terraform and InSpec](/blog/post/compliance-as-code-nist-iso-27001-gdpr-terraform-inspec) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [Compliance as Code](/blog/categories/compliance-as-code) - [Security](/blog/categories/security) - [DevSecOps](/blog/categories/devsecops) - [Terraform](/blog/categories/terraform) - [InSpec](/blog/categories/inspec) - [Cloud](/blog/categories/cloud) - [Governance](/blog/categories/governance) - Published: 03 Aug, 2025 Hey, so you know how keeping our tech stuff secure and following all the rules can be a real headache these days? With everything moving to the cloud and so many regulations popping up, it's tough to [#Compliance](/blog/tags/compliance)[#NIST](/blog/tags/nist)[#ISO 27001](/blog/tags/iso-27001)+7 tags [read more](/blog/post/compliance-as-code-nist-iso-27001-gdpr-terraform-inspec) [![Unlocking the Secrets: HashiCorp Vault vs. AWS Secrets Manager vs. SOPS - Which Reigns Supreme](/_astro/hero.BxpvzHJN_Z2hLAEl.webp)](/blog/post/secrets-management-vault-secrets-manager-sops) ## [Unlocking the Secrets: HashiCorp Vault vs. AWS Secrets Manager vs. SOPS - Which Reigns Supreme](/blog/post/secrets-management-vault-secrets-manager-sops) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [DevOps](/blog/categories/devops) - [Security](/blog/categories/security) - [Cloud Computing](/blog/categories/cloud-computing) - Published: 25 May, 2025 Let's face it, in today's tech world, keeping sensitive info safe – we're talking about those digital keys like API keys and passwords – is a big deal. They're what let you into important systems and [#Secrets Management](/blog/tags/secrets-management)[#HashiCorp Vault](/blog/tags/hashicorp-vault)[#AWS Secrets Manager](/blog/tags/aws-secrets-manager)+4 tags [read more](/blog/post/secrets-management-vault-secrets-manager-sops) [![Policy as Code with Open Policy Agent: A Technical and Governance Perspective](/_astro/hero.FMyPom55_ZBRCR.webp)](/blog/post/policy-as-code-opa-guide) ## [Policy as Code with Open Policy Agent: A Technical and Governance Perspective](/blog/post/policy-as-code-opa-guide) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [DevOps](/blog/categories/devops) - [Security](/blog/categories/security) - [Cloud Governance](/blog/categories/cloud-governance) - [Policy as Code](/blog/categories/policy-as-code) - Published: 08 Apr, 2025 Think about how much stuff modern organizations have running in the cloud these days. It's a lot, right? All those servers, applications, and connections can get pretty complicated to manage. Just cli [#Open Policy Agent](/blog/tags/open-policy-agent)[#OPA](/blog/tags/opa)[#Policy as Code](/blog/tags/policy-as-code)+9 tags [read more](/blog/post/policy-as-code-opa-guide) [![How To Setup Bastion Host on AWS using CloudFormation Template](/_astro/hero.DX_FnUff_Z21DeWl.webp)](/blog/post/how-to-setup-bastion-host-on-aws-using-cloudformation-template) ## [How To Setup Bastion Host on AWS using CloudFormation Template](/blog/post/how-to-setup-bastion-host-on-aws-using-cloudformation-template) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [CloudFormation](/blog/categories/cloudformation) - [Security](/blog/categories/security) - [Networking](/blog/categories/networking) - [DevOps](/blog/categories/devops) - Published: 10 Jan, 2023 Introduction In previous post How To Setup Bastion Host on AWS using CloudFormation Template, we will learn how to setup a Bastion host [#AWS Bastion Host](/blog/tags/aws-bastion-host)[#CloudFormation Template](/blog/tags/cloudformation-template)[#VPC Setup](/blog/tags/vpc-setup)+7 tags [read more](/blog/post/how-to-setup-bastion-host-on-aws-using-cloudformation-template) [![How To Setup Bastion Host on AWS using AWS CLI](/_astro/hero.DGhoBA0r_KL9IM.webp)](/blog/post/how-to-setup-bastion-host-on-aws-using-aws-cli) ## [How To Setup Bastion Host on AWS using AWS CLI](/blog/post/how-to-setup-bastion-host-on-aws-using-aws-cli) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [AWS CLI](/blog/categories/aws-cli) - [Security](/blog/categories/security) - [Networking](/blog/categories/networking) - [DevOps](/blog/categories/devops) - Published: 09 Jan, 2023 Introduction In today's world, security is the top priority for any infrastructure and applications, that's why a Bastion host is a must-have in your infrastructure if you want to secure your remo [#AWS Bastion Host](/blog/tags/aws-bastion-host)[#AWS CLI](/blog/tags/aws-cli)[#VPC Setup](/blog/tags/vpc-setup)+7 tags [read more](/blog/post/how-to-setup-bastion-host-on-aws-using-aws-cli) [![How to Install and Setup FireWall on Amazon Linux 2](/_astro/hero.b8oDtFR4_ZdWcUP.webp)](/blog/post/how-to-install-and-setup-firewall-on-amazon-linux-2) ## [How to Install and Setup FireWall on Amazon Linux 2](/blog/post/how-to-install-and-setup-firewall-on-amazon-linux-2) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [EC2](/blog/categories/ec2) - [Linux](/blog/categories/linux) - [Firewall](/blog/categories/firewall) - [Security](/blog/categories/security) - Published: 24 Oct, 2022 Introduction We will learn how to install and setup FireWall on Amazon Linux 2 in this tutorial. We will also discover how to set up FireWall so that it functions with the Amazon Linux 2. Prer [#Firewalld](/blog/tags/firewalld)[#Amazon Linux 2](/blog/tags/amazon-linux-2)[#EC2 Security](/blog/tags/ec2-security)+5 tags [read more](/blog/post/how-to-install-and-setup-firewall-on-amazon-linux-2)