AWS KMS Envelope Encryption Without the Hand-Waving
A practical guide to protecting application data with a customer-managed KMS key, a reusable Terraform module, and Spring Boot using AES-GCM.
Kevin’s field notes
Ideas worth keeping, from work still in progress.
Long-form notes on cloud security, dependable software, and the decisions behind the systems. Written as I learn—specific enough to use, honest enough to revisit.
02 published notes01 running topics
Most recent
Start here
The archive
Every field note
Newest first. No feeds to game, no filler between posts.
TopicsCloud Security Topics
- 01
Cloud Security Topics AWS KMS Envelope Encryption Without the Hand-Waving
A practical guide to protecting application data with a customer-managed KMS key, a reusable Terraform module, and Spring Boot using AES-GCM.
- 02
Cloud Security Topics Cloud Security Best Practices
Nine practical habits I use to make cloud environments harder to misuse, easier to observe, and calmer to recover.
A small promise
Useful beats frequent.
I publish when I have something I would send to a teammate—not because a content calendar says it is Tuesday.