sjramblings.io — Stephen Jones on AWS, AI Agents & Cloud Architecture on sjramblings.io

👋 Hey there!

So, you’ve got Vault up and running, and you’re feeling pretty good about storing and managing secrets.

What is HashiCorp Vault?

👋 Hey there!

👋 Hey there!

Table of contents Workflow Before Workflow After The Workflow Creating a shared (reusable) workflow Workflow Repository Adapt the workflow for reuse Calling the shared workflow Summary 👋 Hey there!

👋 Hey there!

👋 Hey there!

👋 Hey there!

In this post, I’ll show you how easy it is to publish custom metrics into AWS CloudWatch using AWS Lambda Powertools and the Cloudwatch EMU Specification

Back in June last year I wrote about syncing containers from DockerHub to AWS ECS.

This month AWS released support for github-actions in CodeBuild. https://aws.amazon.com/about-aws/whats-new/2023/07/aws-codebuild-github-actions

It’s been a while since I gave Steampipe a run, and wow, has it had some excellent updates!

This post covers some core concepts of Route 53 Resolvers and how they can help establish inbound and outbound name resoltion with your on-premise and AWS resources.

As rightly stated here by Aidan Steele (AWS Hero), VPC Sharing appears to be the forgotten superpower.

I’m curious if this is an everyday use case, but I need to sync a public repo to our internal github Enterprise instance.

So we’ve all seen the marketing slides….

The third post in my series as I share my learnings with AWS Network Firewall.

The second post in my series as I share my learnings with AWS Network Firewall.

This post is the first in a series to share my learnings as I get to grips with AWS Network Firewall.

I’ve posted here how to configure the OIDC AWS Provider & github Enterprise integration; however, nothing is better than an example of it working, and this post covers just that!

Semgrep is a fantastic tool, as the website rightly states!

AWS recently announced an integration that I’m a little excited about!

Prowler is an awesome open source tool for auditing AWS settings within an account or many accounts across an organisation.

I’m not sure when but AWS Config now supports using Guard rules to determine the compliance of resources.

Back in November 2021 AWS announced that you can cache containers from DockerHub through to ECS.

Definition Make is a build automation tool that automatically builds executable programs and libraries from source code by reading files called Makefiles which specify how to derive the target program.

While setting up packer for the first time in ages I found a little cracklib quirk when using amazon linux while following the instructions from the website.

There are many blog posts about how to use github-actions OIDC with AWS; however, they all refer to using Github.com and don’t provide some easy steps if you are running your own github Enterprise instance.

This post is about a mistake I made that wasted a fair bit of time on my side until the folks over in Support set me straight :)

Using this fantastic open-source project, we have enabled github-actions using ephemeral self-managed runners on AWS SPOT.

Update Link to official AWS blog post here A fair few policy-as-code tools are popping up these days.

If you’re working with github-actions and encountering the “Resource not accessible by integration” error, you’re dealing with one of the most common github-actions permission issues.

AWS Config At our organisation we use custom config rules to help us achieve near real-time compliance and remediation.

While I have a fond love for Cloudformation, sometimes I find myself banging my head against a wall when trying to get past an error.

Infrastructure As Code Infrastructure as Code (IAC) is great, people can knock up some Terraform and smash out some stacks in next to no time, delivering value to the business, however there is a side effect to this.

The Challenge Terraform is a great product for managing infrastructure on AWS however many people start by creating an iam user and sharing access keys into configuration files.

AWS Managed Prefix Lists Some time ago AWS released a new feature called Customer Managed Prefix Lists.

AWS GP3 Volumes AWS made the following announcement at Reinvent2020

They said it was coming, and here it is!

AWS Transit Gateway Flow Logs provide valuable insights into the traffic flowing through your network.

github-actions is a CI/CD (Continuous Integration/Continuous Deployment) platform integrated into github, allowing users to automate software development workflows, such as building, testing, and deploying code.

AWS CloudTrail has a wealth of information that often gets forgotten and unchecked.

Ever since I saw this announcement, I’ve been dying to get a chance to set it up and play with it.

In our github Enterprise Instance, we use the super-linter to keep all our users honest and lint everything.

This is the next part of integrating github Enterprise Managed User events into the AWS Serverless ecosystem.

AWS Managed Prefix lists are a really powerful way of abstracting the details of CIDR Blocks into something meaningful for the humble cloud engineer.