cloudonaut

Recent posts

A neglected serverless data store: Cloud Directory

Lately, I’ve been having much fun with Amazon Cloud Directory. Three months before, Cloud Directory was all new to me. Today, I am convinced that Cloud Directory is a neglected Serverless data store that deserves much more attention. Let me explain what...

DevOps on AWS Radio

Paul Duvall (CTO at stelligent) interviewed Andreas and me for the DevOps on AWS Radio. We talked about: Our book Amazon Web Services in Action and what changed in the second edition Our top 3 recommendations for enterprises on what to do to be most s...

GitHub process automation: A bot to build pull requests authorized by core maintainers

We are maintaining multiple Open Source projects where we focus on CloudFormation templates. To ensure that the templates are of high quality, we leverage automated testing and pull requests. We could use the CodeBuild GitHub integration to execute yaml...

Our book

Amazon Web Services in Action introduces you to computing, storing, and networking in the AWS cloud.

Customer Reviews:

Buy now

Subscribe now and we'll keep you posted about new content on our blog.

We are raffling our book AWS in Action among all newsletter subscribers.

Newsletter RSS Feedly

Collections

To get started, we provide you with curated posts by topic.

Security Computing with EC2 Infrastructure as Code Serverless IoT Continuous Delivery Docker

About us

Andreas Wittig

Andreas is an Amazon Web Services (AWS) and DevOps enthusiast. His first cloud project was to build the infrastructure for an online banking platform on AWS. Andreas loves to teach no matter if virtual or face-to-face. He is the author of Amazon Web Services in Action, published by Manning.

Michael Wittig

Michael Wittig is author of Amazon Web Services in Action (Manning). He helps his clients to gain value from Amazon Web Services. As a software engineer he develops cloud-native real-time web applications. He has expertise in distributed system development and architecture, with experience in algorithmic trading and real-time analytics.

We are available for projects: Hire us!

Encrypting sensitive data stored on S3

S3 comes with a bunch of features to encrypt your data at rest. Data at rest means inactive data stored physically on disk. Before we dive into encrypting data at rest, I want to highlight that there is also data in use and data in transit. If the data...

Restricting Access to EC2 Instances Based on Tags

The principle of least privilege is key when it comes to securing your infrastructure on AWS. For example, an engineer should only be able to control EC2 instances that are in scope for her day-to-day work. But how do you make sure an engineer is only a...

Analyzing CloudTrail with Athena

Which IAM users have been active within your AWS account within the last 30 days? Are all of the 999 IAM roles still in use, or can you remove some of them to clean up your infrastructure? Is it safe to remove the action s3:GetObject from the IAM policy...