Blog & Resources

CloudFence Blog & Resources

Insights, Strategies, and Stories from the Frontlines of Cloud Security

How to Detect C2 Traffic in AWS: A Practical Guide Using VPC Flow Logs and DNS

C2 traffic in AWS often hides inside ordinary outbound connections, making static rules...

Architecture vs. Reality: Why Your Cloud Doesn't Look the Way You Designed It

Architecture drift is a hidden cloud security risk where environments diverge from their original ..

The CISO Imperative: Why Egress Traffic Control is a Strategic Security Investment

Discover why cloud egress traffic monitoring is crucial for your security strategy

September 26, 2025

Own Your Cloud Egress Before Attackers Do

Egress traffic is one of the most least controlled paths in the cloud. Shift from Static Rules to ..

AWS Security Groups: From Liability to Defense

Enforce least privilege in AWS Security Groups through visibility, lockdown, and automation to......

Using VPC Flow logs to tighten Security Group Rules

Unlike traditional firewalls, security group rules do not come with a 'last used' timestamps or ....

Understanding TCP Flags in AWS VPC Flow Logs

In VPC Flow Logs, TCP flags are bit masks, meaning they can be combined to create unique numbers....