AWS
Filed under
Agent Auth on AWS: OIDC In, Access Keys Out
Agents on AWS should never hold long-lived keys. How OIDC federation, IRSA, Roles Anywhere, and AgentCore Identity turn signed proof into temporary credentials.
Agent Toolkit for AWS: The Docs Have a New Reader
AWS shipped the Agent Toolkit: an MCP server, curated skills, and IAM guardrails for coding agents. The primary reader of AWS docs is not human anymore.
FinOps: Budget Alerts with Terraform Before Your Next $2.5B AWS Bill
The July 17 Cost Explorer bug filled every feed with billion-dollar AWS bills. Ten lines of Terraform give you the budget alerts that caught it first.
AWS Lambda MicroVMs: Serverless Gets a Stateful, Isolated Sandbox
AWS Lambda MicroVMs bring VM-level isolation, snapshot-fast launch, and suspend-resume state to serverless. What changes, and where the Firecracker primitive fits.
AWS Multi-party Approval for Organizations
Multi-party approval in AWS Organizations gates high-risk operations behind a quorum of human approvers. Here is how it works and the security it buys.
Local DynamoDB Grew Up: A Hands-On Look at ExtendDB
ExtendDB v0.1.0 reimplements the DynamoDB wire protocol in Rust on PostgreSQL. A side-by-side lab against DynamoDB Local on SigV4, IAM policy and Streams.
Why Your SSH Is Yelling About Quantum Computers (And How to Fix It)
OpenSSH now warns when key exchange is not post-quantum. What store now, decrypt later actually threatens, and the Kex configuration that clears the warning.
IaC-First: Why I am Never Touch the AWS Console in Production
Console clicks change reality without changing Terraform state, so plan lies. The drift failure modes, the import workflow, and how to enforce IaC-first.
AWS S3 New Feature: Re-encryption without Movement
S3's UpdateObjectEncryption rewraps the data key instead of copying bytes, so ETag and creation date survive and a 5 TB object re-encrypts in milliseconds.
AWS Monthly (Nov '25) The Stateful Serverless Revolution
November and re:Invent 2025 brought us the "holy grail" of serverless: AWS Lambda Durable Functions. This feature introduces...
When the Cloud Sneezes, the World Catches a Cold - Lessons from the us-east-1 Meltdown
The us-east-1 outage took down Perplexity, Signal and even the status pages meant to report it. What a single-region dependency costs, and what to change now.
AWS Monthly (Sep '25): Vega OS & eBPF Observability
In a surprise move, AWS released Vega OS in September. Vega is a specialized, Linux-based OS optimized for the edge and high-performance UI...
AWS Monthly (Aug '25): Big Data, Zero Effort
August was all about "Data Gravity." Amazon Aurora storage limits jumped to 256 TiB, which effectively ends the "sharding" conversation for...
AWS Monthly (July '25): Kubernetes at the Edge of Sanity
July was a landmark month for the EKS (Elastic Kubernetes Service) crowd. AWS announced that EKS now supports 100,000-node clusters.
AWS Monthly (May '25): The Death of the War Room
May brought CloudWatch Investigations, which have fundamentally changed someone's on-call rotation. Instead of manual log correlation, ...
Automating AWS CloudWatch Log Group Tagging with Python and Boto3
A Boto3 script that finds untagged CloudWatch log groups and applies your tag set. The IAM permissions it needs, and why untagged groups distort cost reports.
Automating AWS ECR Tagging with Python and Boto3
A Boto3 script that paginates every ECR repository and tags only the ones with no tags. The three IAM permissions it needs, and why untagged repos break costs.
Automating ECR Image Cleanup with Bash
A bash script using the AWS CLI and jq to delete ECR images matching a 9.x.x tag pattern, with dry-run and apply modes so you read the list before it removes.
Update ECR Repositories with Bash Script
A short bash loop that sets image tag mutability to MUTABLE on every ECR repository in the account, and the trade-off you accept when tags become overwritable.
AWS Monthly (April '25): Cooling the AI Heat
In April, AWS gave us a peek behind the curtain of their data center engineering. To handle the thermal output of the latest AI clusters, ...
AWS Monthly (Mar '25): The Proximity Power Play
Technically, this brings "Single-Digit Millisecond Latency" to almost every major tech hub. If you are building AR/VR backends, indust...
Streamline Your AWS ECR Management with This Powerful Bash Script
A bash script that applies a keep-the-last-three-images lifecycle policy to every ECR repository in a region, with a dry-run mode before it deletes anything.
AWS Monthly (Jan '25): Shattering the 6MB Ceiling
AWS raised Lambda response streaming to 200 MB in January, retiring the 6MB payload workaround. What it does for TTFB, plus S3 Express One Zone latency gains.
Setting up DKIM for Google Workspace (Gmail) using Terraform and AWS Route 53
DKIM (DomainKeys Identified Mail) is a critical email authentication technique that helps prevent email spoofing. By using DKIM, you ...
Automate AWS Site-to-Site VPN Monitoring
That’s exactly why I created the AWS Site-to-Site VPN Monitoring Script, a tool designed to automate the monitoring of VPN connections ...
Monitoring EC2 Disk Space with a Simple Bash Script and Slack Alerts
In the cloud infrastructure landscape, monitoring the health and resources of EC2 instances is essential. One common challenge for system...
Accessing AWS Services in Private Subnets Without 0.0.0.0/0
When working with AWS (Amazon Web Services), securing your infrastructure is paramount. One of the most common security practices is to ...
Understanding AWS Regions, Availability Zones, and VPCs: A Comprehensive Guide
In today's cloud computing landscape, Amazon Web Services (AWS) has established itself as a leader, offering a wide range of services to ...
AWS Network Load Balancers with Header Modification Techniques
AWS Network Load Balancers (NLBs) are a powerful tool for distributing incoming application traffic across multiple targets...
AWS VPC IP Versions: IPv4 vs. IPv6
So, buckle up as we unravel the mysteries of IPv4 and IPv6 within AWS VPC, serving you a platter of insights, examples, and detailed ...
AWS S3 CORS Settings: A Deep Dive
Whether you're a seasoned AWS veteran or just starting, mastering CORS settings in S3 can greatly enhance your web applications' functiona...
Importance of Regions and Availability Zones on AWS
We're diving into a pivotal aspect of architecting robust, resilient, and efficient applications on Amazon Web Services (AWS): understand...
AWS VPC Design: Integrating Subnets, AZs, and Dual-Stack IP
Virtual Private Cloud (VPC) in AWS, meticulously weaving together subnets, availability zones (AZs), and the dual-stack configuration for...
Understanding CAA DNS Records: What, Why, and How?
CAA, or Certificate Authority Authorization, is a type of DNS record that allows domain owners to specify which Certificate ...
Mastering AWS VPC: An Introduction to Virtual Private Cloud Routing
The world of cloud computing has never been more accessible or diverse. As organizations migrate to the cloud, AWS ...
Understanding the New AWS Public IPv4 Address Charge and Public IP Insights
AWS bills $0.005 per hour for every public IPv4 address from February 2024, attached or not. What it adds up to, the free tier carve-out, and how to audit it.
The AWS Well-Architected Framework: A Key to Cloud Success
The cloud has revolutionized the way businesses operate, and Amazon Web Services (AWS) has consistently led the charge in cloud ...
Secure Your Media Files by Removing Metadata with AWS Lambda
Enhance privacy and security across various industries by stripping EXIF and other metadata from uploaded images and videos
List your S3 bucket objects easily with S3 Directory Listing
Introducing S3-Directory-Listing, a simple and easy-to-use JS script and HTML combo that will turn your S3 bucket directory listing into ...
What is Carrier Gateway on AWS?
Amazon Web Services (AWS) offers many services to provide a seamless and secure cloud computing experience to its users. One of these ...
Creating SSH Keys for Secure Access to AWS EC2 Instances with Terraform
When working with cloud infrastructure, security is of utmost importance. One critical aspect of security is controlling access to cloud ...
What is an Egress only internet gateways in AWS?
Within a VPC, an Egress-Only Internet Gateway is an essential component that enables outbound traffic from the VPC to the Internet.
What is an Internet Gateway in AWS?
An internet gateway is horizontally scaled and redundant, but attaching one is not enough: the route table entry is what actually moves traffic out of your VPC.
What are Route Tables on AWS VPC?
How VPC route tables decide where subnet traffic goes: local versus internet gateway routes, the one-table-per-subnet rule, and when a custom table pays off.
What is Subnet on AWS VPC?
Subnets in AWS VPC are used to divide a VPC into multiple logical networks. This allows users to isolate resources and control access to ...
What is AWS VPC?
Learn about Amazon Web Services (AWS) Virtual Private Cloud (VPC), a service that allows users to create and manage their own virtual pri...
Scaling PHP Applications on AWS
You can understand the running highly available, performant, and secure PHP applications on AWS with easy 14 steps...
Create an S3 Bucket and Set a Policy via CLI
I really like to use CLI commands and it's my daily routine. Today, I'll tell to you "How do you create an S3 Bucket on AWS" and "Put an ...
Issue a Let's Encrypt SSL with the AWS Route53
In this article, I want to tell you how you can issue a Let's Encrypt SSL with the AWS Route53 service. Let's start to learn.
Automate Let's Encrypt SSL on AWS Application Load Balancer
In this article, you can automate all of Let's Encrypt issuing operations for AWS Application Load Balancer and learn how you can manage the..
Deploy a website to S3 and CloudFront with Bitbucket Pipelines
In this article, you will learn how you can deploy your static website to the S3 Bucket and Cache Invalidation automatically...
Protect your AWS Account with specified IPs
You will learn, how you can protect your AWS account and the resources in the cloud with IAM Policy. Security is the first th...
Differences between AWS CLI v1 and v2
What v2 gives you that v1 does not: no Python interpreter to install, auto-prompt, config import, YAML output and ddb commands. Plus when upgrading is worth it.
I'm officially AWS Community Builder!
This morning, I've got an e-mail from @JasonDunn about the AWS Community Builder program. I don't remember when I applied to this program but
Deploy HA nginx to AWS ECS with Geolocation Routing via Terraform
You can deploy the nginx docker image in two different regions in AWS. If you need, you can add more region support by yout self...
Deploy nginx docker to AWS ECS with Terraform Automation
You can understand how you can deploy nginx docker to AWS ECS with terraform easily. The terraform will handle everything what you need.
Connect your AWS to GCP with Terraform via IPSec Site-to-Site VPN
You can deploy the VPN infrastructure easily with this article. Terraform is a automation tool you can do everyting in the cloud era.
How to secure your Amazon Web Services account
Learn how to secure your Amazon Web Services account. Root level account has got full access to all resources running in the cloud enviro...
Set two different Target Groups on AWS Load Balancer with Terraform
You will learn how you can use more than one target group behind Elastic Load Balancer in aws services with Terraform.
Extend your ec2 Linux disk without reboot on Amazon Web Services
Just follow the steps and learn how to extend without reboot. Normally, It's realy hard to extend the Linux servers root disk.
Create a New Grant User on AWS RDS (MariaDB)
You will learn, how to create a grant user for your RDS. It's little bit complicated process but just follow the article and know.
Amazon S3 CORS Settings with CloudFront on Amazon Web Services
Learn how to set for your aws S3 Bucket CORS settings on CloudFront in Amazon Web Services. CORS settings is taking security for your bucket.
Fix "Error: rpmdb open failed" on CentOS or Amazon Linux 2
If you having rpmdb issues with your yum, you can easily follow the same steps and fix your package manager in a minute.
Error: No space left on the device when starting/stopping services only
Learn how to fix "No space left on the device" error when starting and/or stopping services only on Amazon Linux 2