DEV Community

Tarek CHEIKH profile picture

Tarek CHEIKH

🚀 AWS Community Builder | 20+ years in AWS security & cloud architecture. 🏢 Founder @ TocConsulting Paris. 🎤 AWS Summit Speaker. ☁️ 3x AWS Certified. 💻 github.com/TarekCheikh. github.com/localemu

Location Paris, FRANCE Joined Joined on  Personal website https://tocconsulting.fr/

Education

Ecole Central Paris (FRANCE)

Work

Founder of Toc Consulting (https://tocconsulting.fr/)

Pentesting With Credentials

Pentesting With Credentials

Comments
12 min read
Your First Penetration Test

Your First Penetration Test

Comments
11 min read
Custom Security Requirements

Custom Security Requirements

Comments
12 min read
Code Reviews and GitHub

Code Reviews and GitHub

Comments
16 min read
Design Reviews

Design Reviews

Comments
12 min read
Setting Up From Scratch

Setting Up From Scratch

Comments
13 min read
The Web Application Security Survival Kit

The Web Application Security Survival Kit

Comments
20 min read
What Is AWS Security Agent

What Is AWS Security Agent

Comments
10 min read
Chaos Engineering on AWS: Running a Program with GameDays and Continuous Chaos

Chaos Engineering on AWS: Running a Program with GameDays and Continuous Chaos

Comments
7 min read
Chaos Engineering on AWS: Multi-Region Disaster Recovery and Measuring Real RPO

Chaos Engineering on AWS: Multi-Region Disaster Recovery and Measuring Real RPO

Comments
7 min read
Chaos Engineering on AWS: Containers and Serverless with FIS (ECS Fargate and Lambda)

Chaos Engineering on AWS: Containers and Serverless with FIS (ECS Fargate and Lambda)

Comments
6 min read
Chaos Engineering on AWS: Dependency and API Faults with FIS

Chaos Engineering on AWS: Dependency and API Faults with FIS

Comments
5 min read
Chaos Engineering on AWS: Surviving an Availability Zone Failure with FIS and Static Stability

Chaos Engineering on AWS: Surviving an Availability Zone Failure with FIS and Static Stability

Comments
7 min read
Chaos Engineering on AWS: CPU, Memory, and Network Faults with AWS FIS and SSM

Chaos Engineering on AWS: CPU, Memory, and Network Faults with AWS FIS and SSM

Comments
6 min read
Chaos Engineering on AWS: Graceful Degradation with Circuit Breakers, SQS, and a DynamoDB Cache

Chaos Engineering on AWS: Graceful Degradation with Circuit Breakers, SQS, and a DynamoDB Cache

Comments
11 min read
Chaos Engineering on AWS: Database Resilience with Aurora Failover, RDS Proxy, and Read/Write…

Chaos Engineering on AWS: Database Resilience with Aurora Failover, RDS Proxy, and Read/Write…

Comments
16 min read
Chaos Engineering on AWS: Observability and Stop Conditions with CloudWatch and FIS

Chaos Engineering on AWS: Observability and Stop Conditions with CloudWatch and FIS

Comments
18 min read
Chaos Engineering on AWS: Your First Experiment with AWS FIS

Chaos Engineering on AWS: Your First Experiment with AWS FIS

Comments
21 min read
Run AI Locally for AWS Security Work: The Complete Ollama Guide

Run AI Locally for AWS Security Work: The Complete Ollama Guide

Comments
9 min read
The Code Is Still Yours: Application-Layer Security for AWS Lambda

The Code Is Still Yours: Application-Layer Security for AWS Lambda

Comments
14 min read
From Findings to Fixed: Lambda Compliance Mapping and Remediation

From Findings to Fixed: Lambda Compliance Mapping and Remediation

Comments
8 min read
Inside lambda-security-scanner: 19 Checks Across Every Function in Your Account

Inside lambda-security-scanner: 19 Checks Across Every Function in Your Account

Comments
9 min read
Serverless Doesn’t Mean Secure: The State of AWS Lambda Security in 2026

Serverless Doesn’t Mean Secure: The State of AWS Lambda Security in 2026

Comments
7 min read
Fixing EC2 Security Issues: A Practical Remediation Guide

Fixing EC2 Security Issues: A Practical Remediation Guide

Comments
8 min read
Building an EC2 Security Scanner: 46 Checks, 137 Controls, Zero Excuses

Building an EC2 Security Scanner: 46 Checks, 137 Controls, Zero Excuses

Comments
9 min read
Your EC2 Instances Are Probably Exposed Right Now

Your EC2 Instances Are Probably Exposed Right Now

Comments
5 min read
Build a Free AWS Security Lab on Your Laptop with LocalEmu

Build a Free AWS Security Lab on Your Laptop with LocalEmu

Comments
8 min read
Run real AWS Lambda on your laptop

Run real AWS Lambda on your laptop

Comments
4 min read
Meet LocalEmu, the free successor to LocalStack

Meet LocalEmu, the free successor to LocalStack

Comments
4 min read
We Detonated the Real LiteLLM Malware on EC2: Here’s What Happened

We Detonated the Real LiteLLM Malware on EC2: Here’s What Happened

Comments
10 min read
Anatomy of a Supply Chain Attack: How LiteLLM Was Weaponized in 6 Hours

Anatomy of a Supply Chain Attack: How LiteLLM Was Weaponized in 6 Hours

Comments
8 min read
AWS Security Cards: Free Offensive Security Reference for 60 AWS Services

AWS Security Cards: Free Offensive Security Reference for 60 AWS Services

Comments
2 min read
AWS Security Cards: 54 Services, One Card Each

AWS Security Cards: 54 Services, One Card Each

Comments
2 min read
The State of AWS Security 2026: Free Whitepaper, No Gate

The State of AWS Security 2026: Free Whitepaper, No Gate

1
Comments
2 min read
I Just Became an AWS Community Builder … And I Owe It to You

I Just Became an AWS Community Builder … And I Owe It to You

3
Comments
4 min read
awsmap v1.5.0: Your AWS Inventory Now Has a Brain

awsmap v1.5.0: Your AWS Inventory Now Has a Brain

Comments
6 min read
awsmap — Find Everything Running in Your AWS Account

awsmap — Find Everything Running in Your AWS Account

Comments
5 min read
Episode 5: Load Balancer Security Auditor — SSL, Protocols, and Public Exposure

Episode 5: Load Balancer Security Auditor — SSL, Protocols, and Public Exposure

Comments
7 min read
Cryptex — Because openssl rand -base64 32 Gets Old Fast

Cryptex — Because openssl rand -base64 32 Gets Old Fast

Comments
4 min read
The Hidden Backbone of the Internet: Why S3 Security Should Keep You Up at Night

The Hidden Backbone of the Internet: Why S3 Security Should Keep You Up at Night

Comments
13 min read
The Anatomy of S3 Security: 22 Checks That Stand Between You and a Data Breach

The Anatomy of S3 Security: 22 Checks That Stand Between You and a Data Breach

Comments
10 min read
Building an S3 Security Scanner: From Frustration to Open Source

Building an S3 Security Scanner: From Frustration to Open Source

Comments
8 min read
Fixing S3 Security Issues: A Practical Remediation Guide

Fixing S3 Security Issues: A Practical Remediation Guide

Comments
9 min read
I Built a Free AWS IAM Activity Tracker Because CloudTrail Alone Isn’t Enough

I Built a Free AWS IAM Activity Tracker Because CloudTrail Alone Isn’t Enough

Comments
6 min read
Episode 2: The MFA Enforcement Scanner — Automating Your Security Blind Spot

Episode 2: The MFA Enforcement Scanner — Automating Your Security Blind Spot

Comments
8 min read
Episode 3: Public RDS Detective — Finding Your Exposed Databases Before Attackers Do

Episode 3: Public RDS Detective — Finding Your Exposed Databases Before Attackers Do

Comments
9 min read
Episode 4: S3 Exposure Hunter — Preventing the Data Breaches That Make Headlines

Episode 4: S3 Exposure Hunter — Preventing the Data Breaches That Make Headlines

Comments
8 min read
Episode 1: Hunting Deprecated Lambda Runtimes — Before They Become Problems

Episode 1: Hunting Deprecated Lambda Runtimes — Before They Become Problems

Comments
6 min read
AWS Security & Cost Optimization Arsenal: From CLI to Lambda Automation

AWS Security & Cost Optimization Arsenal: From CLI to Lambda Automation

1
Comments
3 min read
How Netflix Serves 300+ Million Users Without Owning a Single Server

How Netflix Serves 300+ Million Users Without Owning a Single Server

Comments
14 min read
Mastering AWS SAM for Python Lambda: The Ultimate Hands-On Guide

Mastering AWS SAM for Python Lambda: The Ultimate Hands-On Guide

1
Comments
19 min read
Building a Production-Ready Serverless File Sharing Platform on AWS

Building a Production-Ready Serverless File Sharing Platform on AWS

Comments
4 min read
The $10 Billion Mistake That Revolutionized Computing Forever (And Why Your USB Drive Is Now a Museum Piece)

The $10 Billion Mistake That Revolutionized Computing Forever (And Why Your USB Drive Is Now a Museum Piece)

Comments
4 min read
Stop Reinventing Authentication: How I Built a Production-Ready Auth API That Scales to 50K Users for Free

Stop Reinventing Authentication: How I Built a Production-Ready Auth API That Scales to 50K Users for Free

Comments
7 min read
loading...