https://riowiraldhani.my.id/blog Senior DevOps engineer working across cloud infrastructure, Kubernetes, automation, security operations, and compliance-ready systems. en https://riowiraldhani.my.id/blog/syft-grype-github-actions-cve-scanning https://riowiraldhani.my.id/blog/syft-grype-github-actions-cve-scanning Use SBOM-based scanning to identify vulnerable dependencies before running code locally or building images in CI. Sat, 18 Jul 2026 04:28:13 GMT https://riowiraldhani.my.id/blog/ansible-series https://riowiraldhani.my.id/blog/ansible-series A Wazuh-by-Ansible series covering deployment, SAML, configuration, rule tuning, malware detection, backups, and Zeek telemetry. Fri, 03 Jul 2026 12:00:00 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-11-zeek-network-telemetry-into-wazuh https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-11-zeek-network-telemetry-into-wazuh How to install Zeek on selected hosts, collect JSON logs with the Wazuh agent, and promote them into custom network-security rules. Thu, 02 Jul 2026 01:30:53 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-10-automating-wazuh-indexer-backups-to-google-cloud-storage https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-10-automating-wazuh-indexer-backups-to-google-cloud-storage How I backed up Wazuh index data to Google Cloud Storage, kept snapshots for 9 days, and trimmed live index data to 7 days with three small moves. Wed, 24 Jun 2026 22:56:41 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-9-custom-malware-detection-with-yara-scheduled-scanning https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-9-custom-malware-detection-with-yara-scheduled-scanning Build scheduled YARA malware scanning with Wazuh and Ansible to detect custom file signatures beyond traditional antivirus coverage. Tue, 23 Jun 2026 16:00:19 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-8-scheduled-malware-scanning-with-clamav-wazuh https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-8-scheduled-malware-scanning-with-clamav-wazuh How I added recurring ClamAV scans as a reporting layer on top of on-access protection, with clean Wazuh alerts and per-directory audit visibility. Sun, 21 Jun 2026 11:53:53 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-7-real-time-malware-blocking-with-clamav-on-access https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-7-real-time-malware-blocking-with-clamav-on-access How I set up ClamAV on-access scanning with clamonacc, clamd, AppArmor, and Wazuh, then narrowed the protection scope so it stays stable on real hosts. Sat, 20 Jun 2026 12:12:03 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-6-building-centralized-clamav-database-mirror-with-ansible https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-6-building-centralized-clamav-database-mirror-with-ansible How I built an internal ClamAV mirror using Nginx to serve virus definitions, cutting 7.2GB/day of redundant egress traffic. Fri, 19 Jun 2026 05:54:23 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-5-custom-rules-for-alert-suppression-that-actually-work https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-5-custom-rules-for-alert-suppression-that-actually-work How I wrote Wazuh suppression rules that silenced 300+ noise alerts per hour after four failed approaches. Wed, 17 Jun 2026 14:56:25 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-4-managing-wazuh-agent-configuration-profiles-with-ansible https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-4-managing-wazuh-agent-configuration-profiles-with-ansible How I managed different Wazuh agent ossec.conf profiles using inventory-owned files, host variables, and Ansible deployment roles. Tue, 16 Jun 2026 13:37:34 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-3-managing-wazuh-manager-configuration-with-ansible https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-3-managing-wazuh-manager-configuration-with-ansible How I managed Wazuh manager ossec.conf using inventory-owned files, local wrapper roles, and a controlled restart flow. Mon, 15 Jun 2026 17:03:09 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-2-integrating-wazuh-saml-authentication-with-keycloak https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-2-integrating-wazuh-saml-authentication-with-keycloak How I integrated Wazuh with Keycloak using SAML, group-based access, and Wazuh RBAC mapping. Sun, 14 Jun 2026 17:27:50 GMT https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-1-how-to-deploy-wazuh-with-ansible https://riowiraldhani.my.id/blog/wazuh-ansible-series-part-1-how-to-deploy-wazuh-with-ansible A practical guide to building a maintainable Wazuh deployment repository using upstream roles, wrapper roles, and inventory-driven files. Sun, 14 Jun 2026 16:49:39 GMT https://riowiraldhani.my.id/blog/monitoring-aws-egress-traffic-with-ec2-nat-suricata https://riowiraldhani.my.id/blog/monitoring-aws-egress-traffic-with-ec2-nat-suricata Monitor AWS egress traffic by combining an EC2 NAT instance with Suricata for open-source network visibility and security analysis. Wed, 10 Jun 2026 13:57:41 GMT https://riowiraldhani.my.id/blog/aws-ec2-nat-instance-cut-nat-gateway-costs-for-small-environments https://riowiraldhani.my.id/blog/aws-ec2-nat-instance-cut-nat-gateway-costs-for-small-environments A practical guide to building a self-managed NAT instance with Amazon Linux 2023, iptables, and AWS Graviton for private subnet internet access. Tue, 09 Jun 2026 17:58:56 GMT https://riowiraldhani.my.id/blog/bamf-open-source-teleport-alternative-ssh-databases https://riowiraldhani.my.id/blog/bamf-open-source-teleport-alternative-ssh-databases Centralized access. Sat, 21 Feb 2026 13:08:25 GMT https://riowiraldhani.my.id/blog/centralized-dast-pipeline-zap-nuclei-github-actions https://riowiraldhani.my.id/blog/centralized-dast-pipeline-zap-nuclei-github-actions Build a reusable DAST pipeline with OWASP ZAP, Nuclei, OPA policy decisions, GitHub Actions, pull-request feedback, and audit-ready reports. Mon, 02 Feb 2026 02:20:56 GMT https://riowiraldhani.my.id/blog/keycloak-audit-logging-user-events-admin-actions https://riowiraldhani.my.id/blog/keycloak-audit-logging-user-events-admin-actions Build auditable Keycloak event logging so authentication and administrative identity actions remain searchable, attributable, and reviewable. Sun, 11 Jan 2026 17:51:44 GMT https://riowiraldhani.my.id/blog/kviklet-database-access-control-audited-sql https://riowiraldhani.my.id/blog/kviklet-database-access-control-audited-sql Evaluate Kviklet as an open-source platform for controlled production database access, approval workflows, audit logs, and temporary privileges. Fri, 12 Dec 2025 18:20:33 GMT https://riowiraldhani.my.id/blog/optimizing-kubernetes-autoscaling-with-keda-hpa-karpenter https://riowiraldhani.my.id/blog/optimizing-kubernetes-autoscaling-with-keda-hpa-karpenter A practical guide to scaling Kubernetes workloads efficiently using KEDA, HPA, and Karpenter for high-demand environments. Mon, 19 May 2025 04:54:30 GMT https://riowiraldhani.my.id/blog/installing-keda-on-kubernetes-with-helm-production-ready-setup https://riowiraldhani.my.id/blog/installing-keda-on-kubernetes-with-helm-production-ready-setup Learn how to install and configure KEDA on Kubernetes with Helm for scalable, secure, and production-ready environments. Mon, 19 May 2025 04:52:38 GMT https://riowiraldhani.my.id/blog/aws-rds-s3-etl-pipeline-jenkins https://riowiraldhani.my.id/blog/aws-rds-s3-etl-pipeline-jenkins Automate RDS exports to S3 with Jenkins, Glue Crawlers, and Athena for fast ETL, schema detection, and cost-efficient analytics. Fri, 16 May 2025 12:16:18 GMT https://riowiraldhani.my.id/blog/protect-amazon-eks-applications-alb-aws-waf https://riowiraldhani.my.id/blog/protect-amazon-eks-applications-alb-aws-waf Protect applications on Amazon EKS by associating AWS WAF controls with an Application Load Balancer provisioned for Kubernetes ingress. Thu, 15 May 2025 10:07:03 GMT https://riowiraldhani.my.id/blog/deploy-loki-amazon-eks-s3-storage https://riowiraldhani.my.id/blog/deploy-loki-amazon-eks-s3-storage Deploy Loki on Amazon EKS with Amazon S3 object storage and configure a scalable foundation for centralized Kubernetes log collection. Wed, 14 May 2025 03:16:23 GMT https://riowiraldhani.my.id/blog/apache-airflow-sso-keycloak https://riowiraldhani.my.id/blog/apache-airflow-sso-keycloak Configure Apache Airflow single sign-on with Keycloak to centralize user authentication and control access through an identity provider. Sun, 11 May 2025 04:52:41 GMT https://riowiraldhani.my.id/blog/deploy-keycloak-kubernetes-sso https://riowiraldhani.my.id/blog/deploy-keycloak-kubernetes-sso Deploy Keycloak on Kubernetes as a centralized identity provider for single sign-on, authentication, and application access management. Sun, 11 May 2025 04:51:07 GMT https://riowiraldhani.my.id/blog/aws-managed-prefix-lists-ip-allowlists-security-groups https://riowiraldhani.my.id/blog/aws-managed-prefix-lists-ip-allowlists-security-groups Create reusable IP allowlists with AWS customer-managed prefix lists and apply them consistently across security groups and access controls. Sun, 11 May 2025 04:21:48 GMT https://riowiraldhani.my.id/blog/amazon-eks-cluster-setup-managed-node-groups https://riowiraldhani.my.id/blog/amazon-eks-cluster-setup-managed-node-groups Create an Amazon EKS cluster, add managed worker nodes, configure kubectl access, and review the deployment workflow in this historical guide. Sat, 11 Sep 2021 09:32:21 GMT https://riowiraldhani.my.id/blog/portainer-docker-container-management https://riowiraldhani.my.id/blog/portainer-docker-container-management Install Portainer and use its web interface to manage Docker containers, images, networks, and volumes in this historical walkthrough. Mon, 04 Jan 2021 14:12:15 GMT https://riowiraldhani.my.id/blog/import-existing-kubernetes-cluster-rancher https://riowiraldhani.my.id/blog/import-existing-kubernetes-cluster-rancher Import an existing Kubernetes cluster into Rancher and review its monitoring and cluster-management workflow in this historical guide. Thu, 10 Dec 2020 06:47:05 GMT