Show Me Your Architecture Vol. 1: Scanning S3 buckets for malware

Through the AWS documentation, books like AWS in Action or AWS trainings you can gain theoretical knowledge. But beyond that, it is very valuable to learn directly from practice. In this series, we inspect real-life AWS architectures. We start with Andr...

Enhance EFS file system protection with TLS and IAM

Two significant aspects of data security are access restriction as well as confidentiality. In the following, you will learn two techniques to increase the security of data stored on an EFS file system (Amazon Elastic File System): enabling encryption o...

Step Functions pitfall: The execution reached the maximum number of history events (25000)

AWS Step Functions is an execution environment for finite state machines. Lately, I was running into the error “The execution reached the maximum number of history events (25000).” when listing all objects in an S3 bucket page by page. This blog post wi...

Monitor VPC NAT gateways with CloudWatch metrics and alarms

Many VPC designs make use of public and private subnets. A NAT gateway is needed to communicate from a private subnet with the Internet. A VPC NAT gateway is a finite resource that can be exhausted. That’s why you need to add monitoring to be alerted i...

CloudFormation cfn-init pitfall: Auto scaling and throttling error rate exceeded

cfn-init is a little helper to install and configure EC2 instances managed with CloudFormation. Lately, I was running into issues when starting a more significant amount of EC2 (let’s say 50) during an auto scaling event. This blog post will teach you w...

Selling an AMI and a CloudFormation template as an alternative to SaaS

We have been selling software through AWS Marketplace since 2019. Selling SaaS is very popular nowadays, and most software vendors are moving to this model. However, we learned that there is a promising alternative to SaaS: Selling software bundled into...

Updated CloudFormation vs Terraform in 2022

The most reliable way to automate creating, updating, and deleting your cloud resources is to describe the target state of your infrastructure and use a tool to apply it to the current state of your infrastructure (see Understanding Infrastructure as Co...

Updated Amazon ECR vs. Docker Hub vs. GitHub Container Registry

Have you worked with a Linux package manager like apt or yum before? A container registry is similar, but instead of packages, it distributes container images. A container registry is a crucial aspect of a containerized workflow and infrastructure. This...

Updated Managing application secrets: SSM Parameter Store vs. Secrets Manager

Many applications interact with external or internal systems like databases or REST APIs. When your application talks to another system, it usually authenticates with a secret, e.g., an API key, username + password, or a certificate. This leads to the q...

[Hot off the Cloud] Vol. 002 - All things AWS

[Hot off the Cloud] Vol. 001 - All things AWS

The command-line, SDKs, and CloudFormation | AWS-to-go Vol. 4:

Using Virtual Machines: EC2 | AWS-to-go Vol. 3

#50 AWS-to-go Vol. 3: Using Virtual Machines EC2

Get started with AWS or broaden your knowledge while walking, biking, running, driving, or whenever you enjoy listening to podcasts.

#49 AWS-to-go Vol. 2: WordPress in Fifteen Minutes - an Example

Get started with AWS or broaden your knowledge while walking, biking, running, driving, or whenever you enjoy listening to podcasts.

#48 AWS-to-go Vol. 1: What's Amazon Web Services?

Get started with AWS or broaden your knowledge while walking, biking, running, driving, or whenever you enjoy listening to podcasts.

#47 Builder's Diary Vol. 1: Successful Cloud Migrations

Get insights into the day-to-day challenges of builders. In this issue, Monika Oblonczek from our partner tecRacer talks about how cloud migrations succeed.