Security for SREs, Drawn

The security mechanisms an SRE touches every week, drawn out: how AWS decides allow or deny, what happens in a TLS handshake, where secrets should live, and how to keep blast radius small. Step through each diagram with the buttons or your arrow keys, then use the 30-second answer, the gotchas and the quiz to make it stick.

Based on AWS, IETF, OWASP and vendor documentation; each chapter links to its sources. Real breaches come from The Incident Files.