Adding Authorization to a GraphQL API
Authorization is the mechanism that controls who can do what on which resource in an application and it is a critical part of an application. In this post, I’ll be illustrating how to set up authorization in a GraphQL API using a custom directive and Oso, an open-source authorization library.
Cross Account RDS Snapshotting Automation Leveraging Pilot Light DR Strategy
An automated solution in a cost effective way to have RDS snapshots shared on a timed schedule with different AWS accounts in order to centrally manage the data also in a different location. The solution mainly caters for standing an infrastructure and bringing the system back to continue the operations for the business continuity within the approved RPO and RTO when any of the disaster events kicks in.
Benefits and usability of different AWS EC2 Access Methods
A quick guide to different EC2 access methods covering, SSH/RDP, Session Manager, EC2 Serial Console and Cloudshell.
Fast Feedback 101 [DevOps Series]
Today, I’m going to talk about fast feedback, what it is, why it’s important, and walk through an example of how we made it happen in one of our own projects.
As I write this, I’m currently waiting for a Cloudformation script update to deploy a lambda version of a product to a development environment. This is an implementation of Infrastructure as Code, where code stored in version control defines how we build, deploy, and run our product. There’s just one problem.
How to Secure your Instance Metadata Service on AWS Using AWS Systems Manager Run Commands
In the final part of this series, I will demonstrate how to configure EC2 Instance Metadata Service (IMDS) through the use of AWS Systems Manager (SSM) Run Commands using a tag based approach to target EC2 instances to run our IMDS commands against. In addition, I will look at automating this process using EventBridge to maintain IMDS on a periodic basis.
Cevo Achieves AWS Migration Competency and Amazon EC2 for Microsoft Windows Server Service Delivery Program Status
Cevo enables continuous evolution in enterprises through Application Modernization and Windows Migration services of legacy workloads.
Migrating to the cloud enables businesses to make substantial IT cost savings, reducing the risk of project failure, increasing security and becoming more agile to drive future innovation.
Well Architected Serverless – AWS Lambda PowerTools for Python
The AWS Lambda PowerTools for Python is an open source framework library that assists in building well-architected serverless applications. It implements a number of observability best practices across the three core observability pillars: logging, metrics, and tracing. In this post, we’ll take a sample serverless application and implement a number of observability best practices using the AWS Lambda PowerTools.
How to Secure your Instance Metadata Service on AWS
In this two-part series, I will explain and demonstrate how to update your EC2 instances to use IMDSv2 as well as automate this process through the use of SSM Documents that can be provisioned within your CloudFormation templates.
Well Architected Serverless – Enabling CloudWatch Lambda Insights
CloudWatch Lambda Insights is a monitoring and troubleshooting solution for serverless applications running on AWS Lambda. It collects, aggregates, and summarises system-level metrics including CPU time, memory, disk, and network. It also collects, aggregates, and summarises diagnostic information such as cold starts and Lambda worker shutdowns to help you troubleshoot health and performance issues with your Lambda functions.
How to Extend IAM’s Switch Role Limit using AWS Extend Switch Roles
In this blog post, I will be highlighting a browser extension that I have found to be extremely beneficial in managing access to multiple AWS Cloud Accounts. Introducing AWS Extend Switch Roles, a browser extension that allows users to switch between roles and customize its appearance all through the tool’s configuration window.