Identity Is the Perimeter You Forgot to Guard
Part 2 of the Cloud Security series
Wolkwacht topic
Cloud Security
Security guidance built around ownership, identity, architecture and operational visibility.
14 articles
Latest September 2026
Cloud security succeeds or fails through connected decisions: who owns risk, how identities are controlled, where boundaries exist and whether operational signals lead to action. These articles examine that system as a whole.
Recommended entry point
Start here
Cloud Security Is a System, Not a Stack
The clearest introduction to treating security as an operating system rather than a collection of products.
Selected reading
Practical guides
Architecture Decides the Blast Radius
Part 4 of the Cloud Security series
The First Security Conversation You Have Too Late: Hardening an Existing Azure Environment
Most cloud security stories begin in the wrong place.
Secure Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS) removes most of the undifferentiated heavy lifting of running Kubernetes, but it does not remove your responsibility for securing what runs on top of it.
Follow the thread
Series
Cloud Security as a System
A practical sequence about architecture, identity, telemetry and ownership.
Automatically updated
Latest articles
Secrets Management Showdown: Azure Key Vault CSI Driver vs. External Secrets Operator
The real question is not whether to use the Azure Key Vault provider for the Secrets Store CSI Driver or the External Secrets Operator (ESO). Instead, it’s whether your …
KubeBuddy: An Agentless Second Opinion for Kubernetes
Kubernetes is very good at reporting desired state. A Deployment can be available while its pods restart every few hours. A cluster can show green nodes while workloads have no …
Secure Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS) removes most of the undifferentiated heavy lifting of running Kubernetes, but it does not remove your responsibility for securing what runs on top of it.
Azure Kubernetes Application Network, Part 2: Zero-Trust and Multi-Cluster Patterns
In Part 1, we discussed the AppNet architecture, setup process, and waypoint model. This second part shifts focus from mechanics to…
When Kubernetes Lies:
Truth inside AKS with Inspektor Gadget
Cloud Security Is a System, Not a Stack
Part 6 of the Cloud Security series