Skip to content

Happy Dussehra! May good always win. Happy Diwali! Wishing you a bright year ahead. Merry Christmas! Warm wishes from Vizag. Happy New Year! Here’s to a great year ahead.

Archive · Track

AWS

30 posts, newest first.

20252

AWS20 Jan 2025Azure to AWS Migration: Connectivity, Data and CutoverConnect the clouds, replicate servers and databases, copy files, then switch traffic with a rehearsed runbook and a rollback point.

AWS Application Migration Service
AWS DMS
AWS DataSync

AWS6 Jan 2025Azure to AWS Migration: Assessment and Service MappingPlan a migration before moving anything: discovery, dependency mapping, a service map, a wave plan and a landing zone, with the target architecture.

Microsoft Azure
AWS Application Discovery Service
AWS Migration Hub

20242

AWS16 Dec 2024LocalStack with Terraform and GitHub Actions: Test Infrastructure Before AWSUse tflocal to apply Terraform against LocalStack, run it in a GitHub Actions job as a pre-merge check, and keep real AWS deployment as a separate gated step.

LocalStack 4.0
tflocal
Terraform 1.10

AWS2 Dec 2024LocalStack 4.0: A Local AWS Dev Environment with Docker and awslocalRun LocalStack in Docker Compose, use awslocal and SDKs against it, seed resources with init hooks, and know where a local emulator stops being accurate.

LocalStack 4.0
awslocal
Docker 27

20234

AWS18 Sept 2023CloudFormation: Change Sets, Drift and StackSetsPreview changes before applying them, detect manual edits with drift detection, protect stateful resources, and roll out a baseline to many accounts and regions with StackSets.

AWS CloudFormation
StackSets
Drift detection

AWS4 Sept 2023CloudFormation: Template Anatomy and a VPC ExampleLearn the sections of a CloudFormation template through a working VPC with public and private subnets, route tables, a conditional NAT gateway, intrinsic functions, outputs and linting.

AWS CloudFormation
cfn-lint 0.x
Amazon VPC

AWS18 Jul 2023AWS to On-Premises Tunnel: Site-to-Site VPN with strongSwanConnect a VPC to an on-premises network with an AWS Site-to-Site VPN, using a Ubuntu 22.04 box running strongSwan as the customer gateway, with route propagation and tests.

AWS Site-to-Site VPN
Virtual Private Gateway
strongSwan 5.9

AWS23 Jan 2023S3 Now Encrypts New Objects by DefaultSince 5 January 2023 every new S3 object is encrypted at rest with SSE-S3. What changes, what stays your choice, how to use SSE-KMS and Bucket Keys, and how to enforce and audit it.

Amazon S3
SSE-S3
AWS KMS

20229

AWS19 Dec 2022Secrets Manager and KMSStore credentials in AWS Secrets Manager, read them with least-privilege roles, rotate them automatically and control the KMS keys behind them, with notes on Parameter Store and Kubernetes.

AWS Secrets Manager
AWS KMS
AWS CLI 2.9

AWS5 Dec 2022A Security Baseline for a New AWS AccountSwitch on CloudTrail, GuardDuty, Config, Security Hub and Access Analyzer, lock down root and S3, enforce encryption, and route findings to people who will act on them.

AWS CloudTrail
Amazon GuardDuty
AWS Config

AWS28 Nov 2022New AWS Region: Hyderabad (ap-south-2)AWS opened a second India region on 22 November 2022: how to enable the opt-in region, plan DR between Mumbai and Hyderabad, and what to verify before moving workloads.

AWS Region ap-south-2
AWS Region ap-south-1
AWS CLI 2.9

AWS7 Nov 2022Running Containers on ECS with FargateDeploy a container behind an Application Load Balancer on ECS Fargate: task definition, IAM roles, networking, autoscaling, circuit breaker rollbacks and debugging with ECS Exec.

Amazon ECS
AWS Fargate
Amazon ECR

AWS3 Oct 2022RDS: Multi-AZ, Backups and RestoresRun a relational database on RDS with Multi-AZ failover, automated backups and snapshots, point-in-time restore, encryption, parameter groups and a tested recovery plan.

Amazon RDS
PostgreSQL 14
MySQL 8.0

AWS19 Sept 2022SQS, SNS and EventBridge: Which to UseThree AWS messaging services compared with a fan-out design, dead-letter queues, FIFO ordering, idempotent consumers, filtering, retries and monitoring.

Amazon SQS
Amazon SNS
Amazon EventBridge

AWS5 Sept 2022DynamoDB BasicsTables, keys, indexes, capacity modes, consistency, TTL, point-in-time recovery and single-table design thinking, with CLI examples and common pitfalls.

Amazon DynamoDB
AWS CLI 2.7
Region ap-south-1

AWS15 Aug 2022AWS SSO Is Now IAM Identity CenterSet up single sign-on across AWS accounts with groups, permission sets and short-lived credentials, and use it from the CLI instead of IAM users and long-lived keys.

IAM Identity Center
AWS Organizations
AWS CLI 2.7

AWS20 Jun 2022Lambda Function URLsExpose a Lambda function over HTTPS without API Gateway: create a function URL, choose the auth type, set CORS, secure it with IAM, and know when API Gateway is still better.

AWS Lambda
Python 3.9
AWS CLI 2.7

20215

AWS19 Apr 2021Cost Visibility: Budgets, Cost Explorer and TagsA practical cost routine for AWS: tagging, budgets, Cost Explorer views, anomaly detection and the usual suspects behind surprise bills.

AWS Budgets
AWS Cost Explorer
Cost Anomaly Detection

AWS5 Apr 2021IAM Roles for EC2: No Keys on ServersGive applications on EC2 temporary AWS permissions through instance profiles, scope policies tightly, require IMDSv2, and remove long-lived access keys.

AWS IAM
Instance profile
AWS CLI 2.1

AWS22 Mar 2021Serving Traffic: ALB and Route 53Put an Application Load Balancer with HTTPS in front of EC2 or containers, issue a free ACM certificate, point Route 53 at it, and set health checks and redirects.

Application Load Balancer
Amazon Route 53
AWS Certificate Manager

AWS22 Feb 2021CloudWatch Container Insights for ECSTurn on Container Insights for ECS clusters on Fargate or EC2, understand the metrics and performance logs, build alarms and dashboards, and control the cost.

Amazon ECS
CloudWatch Container Insights
AWS Fargate

AWS25 Jan 2021VPC Basics: Subnets, Routes and NATDesign a VPC for Mumbai with public and private subnets across two Availability Zones, route tables, an internet gateway, NAT gateways, endpoints and flow logs.

Amazon VPC
Internet Gateway
NAT Gateway

20208

AWS28 Dec 2020re:Invent 2020: Changes Worth KnowingThe announcements from AWS re:Invent 2020 that affect everyday DevOps work: storage, containers, Lambda and security, with what to try or change first.

Amazon S3
Amazon EBS gp3
AWS Lambda

AWS16 Nov 2020S3 Basics: Buckets, Versioning and Public AccessCreate buckets that are private, encrypted and recoverable: Block Public Access, bucket policies, versioning, lifecycle rules, logging and the consistency behaviour to know about.

Amazon S3
AWS CLI 2.0
Region ap-south-1

AWS19 Oct 2020CloudWatch Logs and Logs InsightsSend application logs to CloudWatch, set retention, turn log lines into metrics, and query them quickly with Logs Insights for incidents and reports.

CloudWatch Logs
CloudWatch Logs Insights
CloudWatch Agent

AWS21 Sept 2020CloudWatch Agent: Memory and Disk MetricsInstall the unified CloudWatch agent on Amazon Linux 2 with the right IAM role, collect memory, disk and swap metrics, store config in SSM, and alarm on them.

CloudWatch Agent
Amazon Linux 2
IAM role CloudWatchAgentServerPolicy

AWS17 Aug 2020CloudWatch Metrics and AlarmsUnderstand what CloudWatch collects for EC2 by default, create alarms with SNS notifications, handle missing data, and use auto-recovery and composite alarms.

Amazon CloudWatch
Amazon EC2
Amazon SNS

AWS20 Jul 2020Launching Your First EC2 InstanceLaunch, secure and connect to an Amazon Linux 2 instance in Mumbai with the CLI, including key pairs, security groups, IMDSv2 and clean-up.

Amazon EC2
Amazon Linux 2
t2.micro

AWS6 Jul 2020Installing and Configuring AWS CLI v2Install the self-contained AWS CLI v2 on Ubuntu 20.04, configure named profiles and safer credentials, and use queries and waiters for scripting.

AWS CLI 2.0
Ubuntu 20.04 LTS
IAM

AWS15 Jun 2020First Steps in a New AWS AccountSecure the root user, create an admin identity, set a password policy, turn on billing alerts and budgets, and choose a region before you launch anything.

AWS IAM
AWS Billing
AWS Budgets