-
Use AWS Config to detect old access keys and disable them with SSM runbook
【Use AWS Config to detect old access keys and disable them with SSM runbook】 One of the AWS SOA topics is on monitoring, logging, and remediation. On the following page, we showed you how to use AWS Config to detect old access keys. ht... -
Use AWS Config to detect outdated access keys
【Use AWS Config to detect outdated access keys】 In the following page, Introduction to AWS Config, we showed you how to audit the logging settings of S3 buckets. https://awstut.com/en/2022/12/03/introduction-to-aws-config-with-cfn-audi... -
Store data in S3 bucket received by Kinesis Data Streams via Firehose
【Store data received by Kinesis Data Streams in S3 buckets via Firehose】 In the following pages, we have shown how data generated by Lambda functions can be received by Kinesis Data Streams and analyzed by Kinesis Data Analytics. https... -
Connect to RDS from EC2 (Linux)/Lambda using IAM authentication
【Connect to RDS from EC2 (Linux)/Lambda using IAM authentication】 One of the features provided by RDS is IAM authentication. You can authenticate to your DB instance using AWS Identity and Access Management (IAM) database authenticatio... -
Preparing Lambda Layer Package with CFN Custom Resources – General File Version
【Preparing Lambda Layer Package with CFN Custom Resources - General File Version】 In the following pages, we have shown you how to automatically create a Lambda layer package for Python. https://awstut.com/en/2022/07/18/preparing-lambd... -
Create Web app using DynamoDB with ECS (Fargate)
【Create Web app using DynamoDB with ECS (Fargate)】 The following page shows how to attach an ECS (Fargate) in a private subnet to an ALB. https://awstut.com/en/2022/01/29/attach-fargate-in-private-subnet-to-elb-2 In the above page, we ... -
Using Amazon ECS Exec to access ECS (Fargate) containers in private subnet
【Using Amazon ECS Exec to access ECS (Fargate) containers in private subnet】 Amazon ECS Exec allows access to running ECS containers. With Amazon ECS Exec, you can directly interact with containers without needing to first interact wit... -
Automatically push test images to ECR using CFN custom resources and CodeBuild
【Automatically push test images to ECR using CFN custom resources and CodeBuild】 Consider automatically pushing test images to an ECR repository when creating a CloudFormation stack. In this article, we will show you how to achieve the... -
AWS WAF String Inspection – Headers/QueryString/Body/Cookies
【AWS WAF String Inspection - Headers/QueryString/Body/Cookies】 One of the features provided by AWS WAF is string match rule statements. A string match statement indicates the string that you want AWS WAF to search for in a request, whe... -
Two ways to access DynamoDB from private subnets
【Two ways to access DynamoDB from private subnets】 There are two ways to access DynamoDB from an EC2 instance in private subnets. NAT Gateway VPC Endpoint (Gateway type) This page will review how to access DynamoDB tables via the above...
