Deprecated Lambda runtimes present significant security risks, and managing them manually is cumbersome. AWS should provide tools to enforce a grace period for deprecated runtimes, after which they are either automatically updated or disabled. This approach would benefit both customers and AWS, improving security and efficiency.
The AWS Backup Vault Lock provides robust protection against ransom attacks, but without setting a proper retention time, businesses risk escalating storage costs or complex, costly account migrations.
Enforcing read-only access to the cloud console can help mitigate configuration drift, improve resilience, and protect against an account takeover. Learn why and how.
A pipeline triggered by Git responsible for deploying your infrastructure can do quite some harm. In this post we examine this problem and the necessary security measurements.
This article explains the security enhancements IMDSv2 bring and how this is technically achieved.
Learn how to utilize Lambda Extensions to cache your secrets and parameters for better perfomance and reduced costs.
How to use Session Manager to establish a secure connection to an RDS running in a private subnet
A CloudWatch Metric Filter Debugger exists in the AWS Web Console. It’s a very handy tool, you just need to find it.
Capabilities to debug and test AWS CodeBuild exist but seem unknown to most people, let’s change that!
Because image caching is not easy to fix on AWS Fargate, AWS is working on two alternative approaches to reduce container launch times
When thinking about sustainability, properly prioritize your efforts toward limiting your carbon footprint.
Set up Artifcatory on AWS with cost-efficiency and resiliency in mind
Understand why you should and why it is important to secure serverless infrastructure.
Get an insight on how to prepare for AWS Solution Architect Professional certification
Learn to use RDS parameter groups to define authentication protocols and solve connection issues
Become aware of CloudWatch costs and learn how to bring them down
Learn how to enable encryption at rest and how to use resource policies on AWS SQS
Scale faster and avoid unpredictable in your systems using Immutable Infrastructure
An easy way to set up an Athena integration to query AWS ALB and VPC Flow logs
A deep dive into static stability and how to apply it to a system design
Recovery Point in time offers the best RPO but it comes with a price.
My personal list of the most exciting announcements at re:Invent 2021
How to protect your backups using AWS Backup against post-encryption or deletion.
AWS API Gateway Best Practices about throttling and security in general
Some interesting concepts and laws regarding software effort estimation.
Use Maximum Instance Lifetime property to ensure that instances are recycled before reaching the specified lifetime.
While deploying Lambdas a time window exists where different Lambda versions can run side by side (both old and new). If you’re unaware of this, a deployment could end up pretty messy.
The benefits of using AWS PrivateLink and a how-to guide.
Use AWS Chatbot to forward all you security alerts to your chat client.
Technical writeup on how we have launched invoice.gent
How-to use a multi-account setup and loose coupling to avoid vendor lock-in
A solution to monitor and prevent SNS topics to become floating
Installation, usage and advantages of AWS SSM Session Manager
Why you should implement a Fail Fast mechanism in your backend
A Python CDK code example for creating an ECS Fargate service
Cold starts are just part of Lambda
A strategy to organize your CloudFormation stacks based on stack velocity
Managing Multiple AWS Accounts using the CLI.