AEM as a Cloud Service (AEMaaCS) Security Hardening : Two Simple Fixes That Close Big Security Gaps

Hey everyone!

Sharing a couple of quick security hardening tips for AEM as a Cloud Service that I recently worked on:

• Blocking the form selector at dispatcher level
• Restricting anonymous access to sensitive JCR metadata

Both are small changes, but they significantly reduce attack surface and prevent unintended exposure.

I’ve written a short Medium article with the details + configs here:
👉 Hardening AEM as a Cloud Service: Two Simple Fixes That Close Big Security Gaps

Would love to hear if others are doing something similar or have additional hardening tips!