Accounts

Securing Privileged Accounts (Tiered Admin Model)

How Microsoft's tiered administration model, Privileged Access Workstations, and LAPS together prevent a single compromised low-trust machine from escalating i…

GCP Billing and Free Tier

How GCP billing accounts, budgets, and the Free Tier work, and practical ways to avoid unexpected charges while learning.

Service Accounts Explained

How GCP service accounts give identity to workloads instead of humans, and best practices for keys, impersonation, and workload identity.

Least Privilege for CI/CD Service Accounts

CI/CD service accounts should hold only the exact permissions their pipeline needs, scoped narrowly and time-limited, so a compromised job can't cascade into a…