Tibor Hercz - Writing about Cloud, architecture, AWS, GCP and software engineering.

Still using sensitive service account keys in your GitLab repository?

When I first started using AWS ECS, I was a bit confused about how to scale the service.

When using AWS API Gateway you can use the AWS Lambda authorizer for HTTP APIs to authorize the requests.

In the past it was very common to use AWS credentials (access token and secret) in your GitHub actions pipeline.

I have seen a lot AWS environments and noticed that it is very common that companies use AWS IAM users to log in and access the API.

So you leaked your AWS credentials onto the world wide web, and you are wondering what to do to minimize the damage.

I heard multiple times that AWS scans public GitHub repositories for AWS credentials and informs its users of the leaked credentials.

Creating a large network, connecting multiple VPC and an on-premises data center together can be done in multiple ways.

The AWS IAM Identity Center (Successor to AWS Single Sign-On) web console can be hard to navigate when trying to view the AWS accounts attached to an AWS IAM Identity Center (Successor to AWS Single Sign-On) group.

A Transit Gateway Peering Attachment must be accepted by the owner of the attachment.

About WebAssembly WebAssembly (WASM) is a portable binary instruction format which runs in the browser or on a server.

There are a lot of very good resources explaining how to set up a S3 website.

When setting up S3 website hosting you can use a Route53 alias for connecting the domain to the website bucket.

Scheduled scaling for EC2 Auto Scaling can help out with predicable load by specifying capacity changes on a schedule.

You can sign your Git commits cryptographically by using a GPG key.

If you want to create an infrastructure CI/CD pipeline for AWS using Terraform, you want to keep the state in a remote backend.

By using the Kubernetes Secrets Store CSI Driver you can provide pods with secrets from the AWS Secret Manager.