AWS Notes

2022-03-01 22:20:16 #машины_aws

Я продолжаю издеваться на Code* сервисами… Хотя скорее они надо мной.

В этой части разбираюсь с поведением CodeDeploy в Blue/Green развертываниях, а так же с тем, что не умеет CodePipeline и CDK.

Ваше прокрастинационное чтиво. Открыть/Комментировать

2022-02-28 22:28:16 ​​SCP Best Practices

Deny list strategy
Allow list strategy

https://aws.amazon.com/blogs/mt/codify-your-best-practices-using-service-control-policies-part-1/

Organizational Units

https://aws.amazon.com/blogs/mt/best-practices-for-organizational-units-with-aws-organizations/

Deny Changes to CloudWatch monitors
Deny Changes to CloudWatch Logs
Deny Changes to Config
Deny accounts from leaving the organization
Deny all actions
Deny access to IAM with role exception
Deny actions outside approved regions
Deny ability to pass IAM roles
Deny changes to GuardDuty
Deny changes to AWS Budget Actions
Limit changes to Cost Anomaly Detection, except when using a specific IAM Role

https://aws.amazon.com/blogs/mt/codify-your-best-practices-using-service-control-policies-part-2/

Stop the war now!

#SCP #security #best_practices Открыть/Комментировать

2022-02-26 14:06:58 Ждём всех желающих погрузиться в AI сервисы AWS. Сделаем небольшой обзор на каждый из семейства AI сервис и научимся решать практические задачи в онлайне вместе с нашими архитекторами.

Какие AI сервисы мы изучим на AWS Интенсиве? 
Amazon Rekognition
Amazon Comprehend
Amazon Forecast 
Amazon Translate
и другие

Ждём!


https://softline.ru/events/sem_2022_ai_servisy_220301?tab=program&utm_source=emailBDM&utm_medium=mail&utm_campaign=5821-AI Открыть/Комментировать

2022-02-26 13:50:16 ​​Weekly Summary on AWS (February 20-26)

Amplify + The Authenticator UI Library for Flutter
AppSync + custom response headers
App Mesh + Agent for Envoy
App Runner + Java
Billing + Payment Profiles
CloudWatch Agent
Configurable Log Group Retention
NVIDIA GPU Metrics
Connect Customer Profiles + high-volume ingestion of customer data
EC2 Auto Scaling Warm Pools + hibernating and returning instances to Warm Pools on scale-in
Firewall Manager + AWS Network Firewall Centralized Deployment Model
Glue Job Run Insights
Glue DataBrew + choose single or multiple output files
Glue Schema Registry + Protobuf
Lambda + .NET 6
QuickSight’s new community hub
RDS for MariaDB + IAM authentication
Redshift + PIVOT and UNPIVOT SQL operators
S3 + additional checksum algorithms
SageMaker + 322 popular ML models
SAM CLI + TypeScript
Transfer Family + enhancements to workflows
NICE DCV version 2022.0 and Web Client SDK version 1.1.0

#AWS_week Открыть/Комментировать

2022-02-25 11:01:21 Top 2021 AWS Security service launches security professionals should review - Part 1

An overview of some of the most important 2021 AWS Security launches that security professionals should be aware of.

https://aws.amazon.com/ru/blogs/security/top-2021-aws-security-service-launches-part-1

#aws Открыть/Комментировать

2022-02-24 22:53:21 Тримайтеся! Все буде гаразд. Открыть/Комментировать

2022-02-23 22:30:30 AWS SAM CLI + TypeScript:

https://aws.amazon.com/blogs/compute/building-typescript-projects-with-aws-sam-cli/

This post reviews several new features that can improve the development experience for TypeScript developers. I show how to create a sample TypeScript project using sam init. I build and deploy a TypeScript project using the AWS SAM CLI. I show how to use AWS SAM Accelerate with your TypeScript project. Last, I measure the impact of bundling, tree shaking, and minification on a sample project.

#SAM #TypeScript Открыть/Комментировать

2022-02-22 10:29:11 AWS WAF Account Takeover Prevention

На прошлой неделе было несколько анонсов без официальных блогов, но при этом весьма интересные фичи, одна из них ATP (AWS WAF Account Takeover Prevention).

Детальное видео о том, что это и как пользоваться:





Ссылка на документацию:

https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-atp.html

#WAF Открыть/Комментировать

2022-02-20 14:58:42 ​​Weekly Summary on AWS (February 13-19)

Backup for S3 + general availability
Braket + 80-qubit
Budgets + Auto-adjusting
CloudWatch Container Insights + EKS Fargate using ADOT
CodeGuru Reviewer
Detector Library
Security detectors for Log-Injection Flaws
Example repositories for Java and Python
EC2 C6a instances
EFS + sub-millisecond read latencies
Firewall Manager + versioning for WAF managed rule group
MQ for RabbitMQ version 3.9.13
OpsWorks for Chef Automate version 20220103112354
RDS for MariaDB + delayed replication
Redshift
Concurrency Scaling + automatic WLM
UNLOAD command for JSON
Cross-regions data sharing
Security Hub + 13 new controls
Transfer Family + banners
WAF Fraud Control + Account Takeover Prevention
s2n-quic

#AWS_week Открыть/Комментировать

2022-02-19 18:42:49 AWS Backup for S3:

https://aws.amazon.com/blogs/storage/automate-and-centrally-manage-data-protection-for-amazon-s3-with-aws-backup/

AWS Backup for Amazon S3 is now generally available in all commercial AWS Regions where AWS Backup is available.

#Backup #S3 Открыть/Комментировать