AWS Made Simple - Overcoming Cloud Complexity Trusted by 13k+ engineers! ๐จ
Bi-weekly tips โ
- Tweets 8,387
- Following 215
- Followers 22,218
- Likes 6,078
Pinned Tweet
The ๐๐ช๐ฆ ๐ฆ๐ฒ๐ฟ๐๐ถ๐ฐ๐ฒ ๐๐ป๐ถ๐บ๐ฎ๐๐ถ๐ผ๐ป๐ Page is live! โจ ๐
Currently, it includes 14 services/features, and we'll add more to our library every week!
Current catalog includes:
โข The Dark Reader Deployment Pattern
โข Polling vs. WebSockets via Amazon API Gateway
7
104
621
49,277
Tobias Schmidt retweeted
Most of the AWS architectures I review could run on four services.
Here is the whole stack I would build an app on today:
5
3
97
28,186
Most of the AWS architectures I review could run on four services.
Here is the whole stack I would build an app on today:
5
3
97
28,186
If you enjoyed this post & you want to get ๐ฏ๐ถ๐๐ฒ-๐๐ถ๐๐ฒ๐ฑ ๐๐ช๐ฆ ๐ฐ๐ผ๐ป๐๐ฒ๐ป๐ straight to your inbox, feel free to check out our bi-weekly newsletter ๐จ
You can also browse our ๐ฝ๐ฟ๐ฒ๐๐ถ๐ผ๐๐ ๐ถ๐๐๐๐ฒ๐ to see what you'll subscribe to ๐
awsfundamentals.com/newslettโฆ
1
3
1,744
1. ECS on Fargate for compute. Containers, no cluster to babysit.
2. RDS for the database. Managed Postgres, boring on purpose.
3. IAM for access. Services talk to each other through roles, nothing else.
4. CloudWatch for logs and alarms, because something has to page you.
5
33
2,621
Terraform is still my favorite IaC tool. And this is the repo I keep coming back to: the Awesome Terraform list, the largest curated collection of Terraform resources out there.
Modules, providers, linters, testing tools, configuration examples, books. Hand-picked.
5
10
210
12,457
If you enjoyed this post & you want to get ๐ฏ๐ถ๐๐ฒ-๐๐ถ๐๐ฒ๐ฑ ๐๐ช๐ฆ ๐ฐ๐ผ๐ป๐๐ฒ๐ป๐ straight to your inbox, feel free to check out our bi-weekly newsletter ๐จ
You can also browse our ๐ฝ๐ฟ๐ฒ๐๐ถ๐ผ๐๐ ๐ถ๐๐๐๐ฒ๐ to see what you'll subscribe to ๐
awsfundamentals.com/newslettโฆ
2
7
617
Half of that you would now just ask an LLM for. Fair enough. But a list that people keep updating still beats a generated answer when you are hunting for what actually exists.
github.com/shuaibiyy/awesomeโฆ ๐
4
42
938
Tobias Schmidt retweeted
We wrote a whole book about observability on AWS.
But the most important monitoring tool in most teams is still the one senior engineer who knows which alert actually matters.
You know this person. They look at 8 open problems and say:
3
1
13
1,200
A leaked access key used to mean someone spun up GPU instances on your buckets. Now the expensive thing is quieter: tokenmaxxing through Bedrock ๐ฌ
The case that stuck with me: $97,000 in 48 hours, around 2 million Bedrock tokens per minute, one long-lived key.
5
9
1,435
Debugging inside a private VPC usually ends with a bastion host and a security group rule you promise to remove later. There is a mode most people never toggle: CloudShell VPC mode.
1
4
23
2,962
Your session runs in the subnet. It picks up the security groups and network ACLs around it, so the things that have no route from the internet just answer.
โข Private EC2 instances
โข RDS databases with no public endpoint
โข Internal load balancers
1
3
349
S3 traffic from a private subnet still leaves through the internet by default.
And AWS bills you for the privilege ๐ธ
That is the bit that gets me. A Gateway Endpoint fixes it, costs nothing, and is not enabled by default. For years now.
Why not?
16
6
259
49,783
If you enjoyed this post & you want to get ๐ฏ๐ถ๐๐ฒ-๐๐ถ๐๐ฒ๐ฑ ๐๐ช๐ฆ ๐ฐ๐ผ๐ป๐๐ฒ๐ป๐ straight to your inbox, feel free to check out our bi-weekly newsletter ๐จ
You can also browse our ๐ฝ๐ฟ๐ฒ๐๐ถ๐ผ๐๐ ๐ถ๐๐๐๐ฒ๐ to see what you'll subscribe to ๐
awsfundamentals.com/newslettโฆ
4
1,941
Yet neither S3 nor DynamoDB gets one out of the box. Not in a fresh account. Not in the console wizard.
I understand NAT Gateways are revenue. I do not understand shipping the expensive path as the default and calling the cheap one a best practice.
2
25
4,970
Someone googled "AWS Login" and the top sponsored result was a fake.
A clone of the AWS console login page
Didn't have this on my radar either, so just a thing to look out for ๐ฌ
1
1
8
1,354
โข Use the Access Portal for sign-in
โข Treat sponsored results as untrusted by default
Whole thread is worth a read:
teddit.net/r/aws/comments/1wโฆ
1
93
P.S.: More AWS security gotchas like this in our newsletter: awsfundamentals.com
83