https://red-team.sh/posts/implementing-zero-trust-on-aws/
Implementing Zero-Trust Security on AWS: Identity and Network Deep Dive - red-team.sh