Aws on pyToshka's DevSecOps Blog

Wazuh MCP Server: Claude Desktop + OpenSearch (Part 2)

ping@pytoshka.me (pyToshka) — Mon, 23 Mar 2026 00:00:00 +0000

Introduction

In Part 1 we connected AWS Bedrock Claude to the Wazuh Dashboard chat via ML Commons. That approach works well for analysts working inside the Wazuh UI. In this part we open a second channel: Model Context Protocol (MCP), which allows any compatible client - Claude Desktop, custom applications, CI pipelines - to query Wazuh Indexer data through a standardized tool interface.

Wazuh + AWS Bedrock: AI Security in Docker (Part 1)

ping@pytoshka.me (pyToshka) — Mon, 16 Mar 2026 00:00:00 +0000

Introduction

In the previous article we embedded a local Ollama model directly into the Wazuh Dashboard chat via ML Commons. That approach provides full control over data with no cloud dependencies. In this series we take a parallel path: using AWS Bedrock - specifically Claude Sonnet 4.5 - as the inference backend, while all security data stays strictly within the local Docker network.

From Wazuh Ambassador to AWS Community Builder

ping@pytoshka.me (pyToshka) — Wed, 04 Mar 2026 00:00:00 +0000

Introduction

I’m excited to share that I’ve been accepted into the AWS Community Builders program for the 2026 cohort in the Security category. For me, this is a natural next step after becoming a Wazuh Ambassador - another milestone in a journey that has always been centered around open-source security and cloud infrastructure.

Two LLM Security Assistants for Wazuh and AWS Analysis

ping@pytoshka.me (pyToshka) — Tue, 07 Oct 2025 00:00:00 +0000

When Your SOC Analyst Can’t Keep Up (Or Just Needs a Break)

Let’s be honest: analyzing thousands of security events every day isn’t the most exciting job.

Amazon EKS SOC 2 Type II Compliance Checklist part 1

ping@pytoshka.me (pyToshka) — Tue, 29 Jul 2025 00:00:00 +0000

Introduction

Navigating the world of compliance can feel like trying to read a map in a language you don’t speak. When you throw Kubernetes into the mix, it gets even trickier. That’s why we’ve put together this straightforward, human-friendly checklist to help you get your Amazon EKS clusters ready for a SOC 2 Type II audit.

Amazon EKS SOC 2 Type II Compliance Checklist part 2

ping@pytoshka.me (pyToshka) — Tue, 29 Jul 2025 00:00:00 +0000

Moving on, let’s look at the other controls for EKS SOC Type 2.

For container security best practices, see our guide on Container Image Security with Wazuh and Trivy.

CC3: Risk Assessment

EKS-Specific Risk Assessment

Identify, evaluate, and document security, operational, and compliance risks specific to Amazon EKS clusters and workloads to ensure that appropriate controls are implemented, monitored, and improved in alignment with SOC 2 Trust Services Criteria.

Meet me

ping@pytoshka.me (pyToshka) — Mon, 01 Jan 0001 00:00:00 +0000

Professional Summary

Senior Site Reliability Engineer with 14+ years building, scaling, and maintaining critical infrastructure across diverse technology environments.