AWS Shield and Web Application Firewall (WAF) are both products which provide perimeter defence for AWS networks. — Shield provides DDOS protection and WAF is a Layer 7 Application Firewall. Ref: https://www.cloudflare.com/en-au/learning/ddos/what-is-a-ddos-attack/ We can use CDK to create AWS WAF with the expected rules and associate it to the ALB What’s In This Document Init WAF CDK Project Write code stack

- Dead-letter queue is used to send undeliverable messages to a dead-letter queue. Sometimes, for example, if there’s a bug in the worker code, you can configure SQS to send such problematic messages to a dead-letter queue (DLQ), where you can inspect them in isolation and work out what went wrong. — - Once we’ve found the problem in the worker, fixed the bug and deployed a new version, we want to send all the messages from the DLQ back to the original input queue, so they can be processed by the updated worker. There’s no way to do this in SQS directly, so we’ve written a script to do it for us.

- There are many web apps provide the service of shortening your long url (free or charged). This ariticle introduces the way of using serverless with Cloud development toolkit (CDK) — - CDK helps to create this project by coding (python language), What’s its benefits? + Infra structure as code + Update lambda function code and just need to execute cdk deploy, all the code and modules will be up-to-date

Use expect programming language to add you IAM access key by one enter — What’s In This Document Write the code Run example 🚀 Write the code add_key.sh #!/usr/bin/expect set access_key [lindex $argv 0] set screte_key [lindex $argv 1] spawn aws configure # Add access key expect "]:" send "$access_key\r" # Add secrete key expect "]:" send "$screte_key\r" # Default region expect "]:" send "\r" # Default output format expect "]:" send "\r" interact

CloudOpz — Any commits should be tagged align with build version especially master branch. How to configure Gitlab runner to do this? What’s In This Document What is the usecase Solve problem by using OAUTH2.0 and tokens 🚀 What is the usecase Developer tells gitlab runner to tag the commit and publish the tag .gitlab-ci.yml build: stage: build script: - echo "Build and tag the commit" - tag=1.0-${CI_COMMIT_SHORT_SHA} - git tag $tag - git push origin $tag tags: - gitlab-runner

CloudOpz — - With RDS you don’t edit config files directly. Instead edit the parameters through the RDS console, or via the API. - As of now, RDS does allow changing configurations. So you can See the list of configurations that your RDS is using. You can change these parameters. You can change those that are listed in the RDS reference page. - This post give an example of change wal_level from replica to logical

CloudOpz — Quick start aws-chalice A very simple example of creating lambda function with cloudwatch event using aws-chalice. It provides an optional of how to create lambda function beyond aws-cdk (eg. python lamdbda cron) What’s In This Document Create new chalice project Create the functions in app.py Config lambda fuction attributes Deploy chalice to create cloudwatch event which trigger lambda cron

🚀 Install SSM Agent on Ubuntu Server instances — To install SSM Agent on Ubuntu Server 20.10 STR & 20.04, 18.04, and 16.04 LTS 64-bit instances (with Snap package) ~ $:/home/ubuntu# sudo snap install amazon-ssm-agent --classic 🚀 Check SSM Agent log ~ $:/home/ubuntu# systemctl restart snap.amazon-ssm-agent.amazon-ssm-agent.service ~ $:/home/ubuntu# tail -f /var/log/amazon/ssm/amazon-ssm-agent.log status code: 400, request id: ea74ed4f-70d4-4610-8221-ce7868c3c9fb 2021-01-08 08:40:20…