Cloud security architect, identity specialist, and builder.https://www.uziashkenazi.com/en-ushttps://www.uziashkenazi.com/blog/aws-practitioners-guide-to-ping-identity/https://www.uziashkenazi.com/blog/aws-practitioners-guide-to-ping-identity/PingOne, PingFederate, PingAccess, PingDirectory, PingAuthorize: five products doing jobs an AWS security practitioner already has names for.Sun, 09 Aug 2026 07:00:00 GMTping-identitypingfederatepingonepingauthorizeaws-iamUzi Ashkenazihttps://www.uziashkenazi.com/blog/claude-code-on-the-go/https://www.uziashkenazi.com/blog/claude-code-on-the-go/Claude Code is a long-running interactive process. Mobile networks are not. The fix is a persistent shell on a VPS, tmux, and Blink Shell on iOS.Sun, 17 May 2026 07:00:00 GMTclaude-codetmuxblink-shellmobile-devvpsworkflowUzi Ashkenazihttps://www.uziashkenazi.com/blog/federation-since-day-one/https://www.uziashkenazi.com/blog/federation-since-day-one/If you've ever assumed an IAM role, you've done federation. The protocol primitives you already use in AWS are the same ones that broker identity across vendors.Sun, 19 Jul 2026 07:00:00 GMTfederationmachine-identityoidcaws-iamaws-ststoken-exchangeping-identitynhiUzi Ashkenazihttps://www.uziashkenazi.com/blog/identity-is-the-perimeter/https://www.uziashkenazi.com/blog/identity-is-the-perimeter/Zero Trust is sold as a network strategy. That framing buries the lede. The control point moved to the identity layer, and most of those identities aren't human.Sun, 19 Jul 2026 07:00:00 GMTzero-trustidentity-architecturenhimachine-identityfido2itdrUzi Ashkenazihttps://www.uziashkenazi.com/blog/securing-the-enterprise-on-aws/https://www.uziashkenazi.com/blog/securing-the-enterprise-on-aws/AWS draws a clean line between what it secures and what you secure. Everything on your side of that line turns out to be the same control, wearing four different names.Sun, 09 Aug 2026 07:00:00 GMTaws-iamrbacssosecrets-managementitdrnhimachine-identityUzi Ashkenazi