Security on FivexL. Cloud Engineering Specialists

Can You Prove Who Accessed Your Data?

info@fivexl.io (FivexL) — Mon, 04 May 2026 00:00:00 +0000

You have logs. You do not have proof.

That is the gap most startups in regulated industries like healthcare or fintech discover during their first HIPAA or SOC 2 audit. The IAM policies are there. The roles are configured. Permissions are restricted. But when an auditor asks “who had access to this system on March 12th, and what did they do?” the answer involves digging through months of logs trying to reconstruct a timeline that was never recorded in the first place.

A failed audit does not just cost time. It costs the partnership or enterprise contract that required it.

This is the problem just-in-time access solves - and it is simpler than it sounds.

From Leadership Values to Security: Building Audit-Ready Architecture

info@fivexl.io (FivexL) — Tue, 24 Mar 2026 00:00:00 +0000

In a recent webinar, Rusty Atkinson, SVP, Technology at Clearway Health, joined FivexL’s Andrey Devyatkin, Co-Founder and Principal Cloud Engineering Consultant, and Guilherme Ferreira, Senior Cloud Engineering Consultant, to discuss a question that matters to every company operating under regulatory pressure: how do leadership values actually turn into secure, audit-ready architecture when deadlines hit?

FivexL has worked closely with Clearway Health on building their HIPAA-compliant AWS infrastructure - so this was not a theoretical discussion. Rusty brought the leadership and culture perspective; Andrey and Guilherme brought the architecture and engineering depth. The session connected principles like integrity, clarity, and courage to the operational choices that make security real: least-privilege access, clear tenant boundaries, traceable change management, and HIPAA-aligned evidence practices.

When Guilherme asked Rusty directly how he saw the FivexL partnership, Rusty’s answer was blunt: “In my career, I never had a vendor that I trusted more. You presented to me something that resonated immediately as the answer to the question that I didn’t ask - how do you build it when the non-negotiable is security and privacy, when you don’t have an army of engineers, and you’re running fast? You answered that question before I even asked it.”

That trust - between people, between teams, between an organisation and its infrastructure - was the thread running through the entire conversation.

Secure AWS Foundation for Fintech Startup, Neverless

info@fivexl.io (FivexL) — Fri, 13 Feb 2026 00:00:00 +0000

FivexL delivered a secure, production-ready AWS foundation for a London fintech company expanding beyond Google Cloud.

AWS News You Can Actually Use In 2026

info@fivexl.io (FivexL) — Thu, 12 Feb 2026 00:00:00 +0000

AWS ships fast. At AWS re:Invent 2025, AWS made 500+ announcements. Most teams don’t have time to read every release - but we did.

We did it for one reason: to stay on top of the technology (and help you do the same). Below is our shortlist of AWS updates worth adopting in 2026 if you want to stay ahead of the competition.

These updates help you lower the chance of security incidents, make audits less painful, and remove day-to-day operational friction. Here’s what you can do now to tighten security and compliance.

MVP: PostgreSQL on AWS in 10 Minutes

info@fivexl.io (FivexL) — Tue, 16 Dec 2025 00:00:00 +0000

A lot of MVP teams pick PostgreSQL because it’s familiar, powerful, and boring in the best way. Then they open the AWS console, click through defaults, and accidentally create a database that’s hard to secure, annoying to operate, and painful to make audit-friendly later.

In our work with startups, this is one of the most common patterns: the product ships fast, the first customers arrive… and suddenly you need tighter security, better logging, sane network boundaries, and fewer “who created this?” mysteries.

AWS Account Setup for Startups: Security and Cost Control Step by Step

info@fivexl.io (FivexL) — Thu, 13 Nov 2025 00:00:00 +0000

If you’re building an MVP on AWS - especially in healthcare or fintech - the account setup decisions you make in week one will determine how easy or hard your first audit is. This guide covers the minimum viable AWS foundation: the security, cost, and compliance controls that every startup needs before deploying anything. If you’re in a regulated industry, there’s a specific section at the end on what HIPAA readiness adds to this baseline.

Unexpectedly Hard: Overcoming Pitfalls in aws_acm_certificate setup

info@fivexl.io (FivexL) — Wed, 19 Feb 2025 00:00:00 +0000

Encountering the “Invalid for_each argument” and “UnsupportedCertificate” errors when configuring AWS ACM certificates via Terraform is surprisingly common. By removing dynamic for_each logic based on unknown attributes and using the aws_acm_certificate_validation resource to wait for certificate issuance, you can sidestep these pitfalls and ensure successful integration with resources like ELB listeners.

FivexL Container Hardening Guide

info@fivexl.io (FivexL) — Thu, 15 Feb 2024 00:00:00 +0000

Comprehensive and continuously updated list of best practices for securing containerized workloads. From build to execution.

AWS ECS Migration for Norwegian Crypto Exchange, Firi

info@fivexl.io (FivexL) — Thu, 16 Mar 2023 00:00:00 +0000

FivexL rebuilt and migrated infrastructure to AWS Elastic Container Service for the Norwegian cryptocurrency exchange.

LProbe: A Secure, Open-Source Local Health Check Solution

info@fivexl.io (FivexL) — Mon, 16 Jan 2023 00:00:00 +0000

Find out how to securely conduct a local health check without wget, curl, or your proprietary code. LProbe is a reliable open-source solution.

Scalable and Secure AWS SaaS Infrastructure for Allure TestOps

info@fivexl.io (FivexL) — Mon, 14 Nov 2022 00:00:00 +0000

FivexL designed and implemented a cost-efficient, scalable, and secure Cloud-based SaaS.

Infrastructure as Code and AWS Cost Optimization for Ovrture

info@fivexl.io (FivexL) — Wed, 12 Oct 2022 00:00:00 +0000

FivexL implemented infrastructure as code, reduced costs, and provided the ability to scale for a philanthropic communications platform.

FivexL’s Reaction to the AWS Security Baseline for Startups

info@fivexl.io (FivexL) — Thu, 22 Sep 2022 00:00:00 +0000

FivexL shares its outlook on AWS Security Guidelines for startups. Find out how to improve your AWS security efficiently.

Security Basics in AWS

info@fivexl.io (FivexL) — Wed, 24 Aug 2022 00:00:00 +0000

Security Manual for Startups: How To Secure Your AWS Account in Several Steps

How to Reduce Data Leakage Risks with aws-vault

info@fivexl.io (FivexL) — Fri, 22 Jul 2022 00:00:00 +0000

Security basics in AWS or how to get rid of hardcoded credential and reduce data leakage risks with aws-vault.