52 posts · Page 3 of 3
Replacing VPN for internal apps with Cloudflare Access: anatomy, login flow, 5-step setup (application, IdP, policy, Tunnel, test), policy evaluation order, and troubleshooting....
KhaVan A framework for reasoning about every Cloudflare One feature: every request traverses four layers producing signals, and policy yields one of five outcomes. Rollout and debugging....
KhaVan Four terms routinely conflated in RFPs, design docs, and vendor marketing. Their scope, when Gartner/Forrester defined them, how to use each correctly, and a decision tree....
KhaVan A practical overview of Cloudflare One: SASE, SSE, Zero Trust, the six main product groups, how it compares to Zscaler and Netskope, and the mental model to have before deployment....
KhaVan An AWS-native solution for rotating, disabling, and deleting IAM access keys on policy — the multi-account architecture, trade-offs, and what operating it actually takes....
KhaVan Useful ideas, lessons, and discoveries worth sharing — the English edition....
KhaVan Workload Identity Federation deep dive: why Service Account Keys are anti-pattern, AWS STS → Google STS exchange, attribute mapping, impersonation, threat model, Terraform....
KhaVan Two themes, one build, no flash — the one config snippet you need for Shiki with a light/dark Astro blog....
KhaVan How I built an in-house CSPM engine scanning many AWS Landing Zones in parallel with Prowler, storing findings in D1 and artifacts in R2, into one Security Operations dashboard....
KhaVan Why the switch made sense, the practical trade-offs, and a handful of small configuration details that would have saved debugging time up front....
KhaVan What actually worked, what didn't live up to expectation, and the operational lessons from rolling out Cloudflare Zero Trust across an organisation of thousands....
KhaVan Composite primary keys, when FTS is still worth it, why intuition is a bad guide for indexing, and why row counts at the edge matter more than they look....
KhaVan AI answers grounded in ~75 published posts with citations. Ask about Cloudflare, AWS, Zero Trust, cloud security.
