#029 Running containers on spot infrastructure

This is a preview. Subscribe to cloudonaut plus to watch the full video.

Running workloads on spot infrastructure is significantly cheaper. You can reduce your bill by 50% or more. Keep in mind that spot workloads can be terminated at any time. If you are lucky, you will be noticed 2 minutes upfront to shut down gracefully. ...

#027 Defining IAM Policies with Terraform

This is a preview. Subscribe to cloudonaut plus to watch the full video.

Are you still defining IAM policies using heredoc syntax (EOF ... EOF) or jsonencode()? You can do better! As a result, terraform validate can tell you about typos before you apply them, and you get better auto-complete support from your IDE. In this vi...

#026​ Cognito Under the Hood

This is a preview. Subscribe to cloudonaut plus to watch the full video.

Have you ever implemented a user database and authentication layer yourself? There are a lot of things to get right: Hashing and salting passwords, multi factor authentication, brute force attacks, and many more. That's why I recommend to use a producti...

#025​ A Deep Dive into AWS CloudTrail

This is a preview. Subscribe to cloudonaut plus to watch the full video.

Who made changes to sensitive parts of your cloud infrastructure? Capture audit logs with AWS CloudTrail. Learn how to analyze the audit logs with the help of CloudWatch Logs Insights or Athena. On top of that, we discuss how to rollout CloudTrail to al...

Review: AWS Fault Injection Simulator (FIS) – Chaos as a Service?

AWS allows us to run applications distributed across EC2 instances and availability zones. By adding load balancers or message queues to the architecture, we can achieve fault tolerance or high availability. But how can we test that our system can survi...

Programming your CDN: CloudFront and Lambda@Edge

Minimizing the load time of your websites and applications is essential for two reasons. First, search engines rank websites based on page load times. Second, users are impatient and might cancel loading your application to jump to a competitor instead....

Defining IAM Policies with Terraform safely

Are you still defining IAM policies using heredoc syntax (<<EOF ... EOF) or jsonencode()? You can do better! As a result, terraform validate can tell you about typos before you apply them, and you get better auto-complete support from your IDE. Re...

Managing application secrets: SSM Parameter Store vs. Secrets Manager

Many applications interact with external or internal systems like databases or REST APIs. When your application talks to another system, it usually authenticates with a secret, e.g., an API key, username + password, or a certificate. This leads to the q...

What Architects Need to Know About Networking on AWS

As an architect, you may not have thought too much about the network management before. At least that’s how it used to be for me. But since I’ve been designing architectures for AWS, network structure has become much more important to me. With Amazon V...

Cognito Under the Hood

Have you ever implemented a user database and authentication layer yourself? There are many things to get right: Hashing and salting passwords, multi-factor authentication, brute force attacks, and many more. That’s why I recommend using a production-re...

#40 Review: AWS Fault Injection Simulator (FIS)

AWS allows us to run applications distributed across EC2 instances and availability zones. By adding load balancers or message queues to the architecture, we can achieve fault tolerance or high availability. But how can we test that our system can survi...

#39 Serverless in the Enterprise

We coached developers building their first Serverless applications for a large company recently and want to share our learnings and observations with you.

#38 5 good reasons not to get AWS certified

I completed my first AWS certification in 2014: AWS Solutions Architect Associate. During the following years, I accomplished all five associate and professional certificates. However, Michael and I decided not to renew our AWS certifications about a ye...

#37 How to choose an EBS volume type?

Elastic Block Storage (EBS) provides solid state drives (SSD) and hard disk drives (HDD) for EC2 instances. The virtual machine accesses the persistent storage via the network. In December 2020, AWS announced another volume type called General Purpose S...