Steve Jones - sjramblings.io

GitHub Actions AWS Authentication with OIDC for GitHub Enterprise

There are many blog posts about how to use GitHub Actions OIDC with AWS; however, they all refer to using Github.com and don't provide some easy steps if you are running your own GitHub Enterprise instance. Today I spent far too long working this out and likely annoying my

Up and running with AWS Network Firewall - Part 2

The second post in my series as I share my learnings with AWS Network Firewall. If you want to start at the beginning, check out part 1 here Let's get into setting up an Inspection VPC! The Setup To build our example, we start with the following. All VPCs are

aws

Up and running with AWS Network Firewall - Part 1

This post is the first in a series to share my learnings as I get to grips with AWS Network Firewall. There are many use cases; however, in this series, I'll focus on the following. Inspection VPC This pattern will place the firewall between two VPCs and inspect any traffic

AWS Config Rules Blessed with Cloudformation cfn-guard Support!

They said it was coming, and here it is! Support for defining custom cfn-guard rules for AWS Config via Cloudformation. Build AWS Config rules using AWS CloudFormation Guard For some background on cfn-guard and AWS Config, check out this post. The magic has been enabled within Cloudformation here. We now

terraform

Using Semgrep to keep track of your communities style

Semgrep is a fantastic tool, as the website rightly states! Static analysis at ludicrous speed Find bugs and enforce code standards We use it in our open source community where standards are not just for code but also documentation which we wrap up in a style or contribution guide. The

packer

HashiCorp packer amazon-linux cracklib gotcha

While setting up packer for the first time in ages I found a little cracklib quirk when using amazon linux while following the instructions from the website. Let get into it! Packer setup HashiCorp has some great documentation here on getting started with packer. Install Packer | Packer - HashiCorp LearnPacker

aws

Getting started with cfn-guard

Update Link to offical AWS blog post here There are a fair few policy-as-code tools popping up these days. This post looks at getting start with cfn-guard to parse AWS Config Resource JSON outputs. Why Guard? The reason this one has peaked my interest is due to the native AWS

aws

Security Hub now supports Custom AWS Config Rules

AWS recently announced an integration that I'm a little excited about! AWS Security Hub now receives AWS Config managed and custom rule evaluation results This post provides a summary of what it looks like and a little about its potential. Some history For those that follow AWS service releases you'll

aws

When Enterprise IT systems migrate to AWS

So we've all seen the marketing slides.... * Company x saved 40% in infrastructure costs * Company y collapsed their monothlith into 40 Lambdas But what happens when an on-prem system that has humed its tune in the local Data Centre for years and the vendor has never even thought of a

aws

How to sync containers to AWS ECS the easy way

It's actually really easy to set this up using CodeBuild & Event Bridge all wrapped up in a Cloudformation Stack!

terraform

How to simplify your CI/CD with Makefiles

In this post I'll show examples of how a Makefile can be used to help others use your project and also simplify your CI/CD Terraform workflows.

aws

How to use cfn-guard with AWS Config

How to use cfn-guard with AWS Config. I'm not sure when but AWS Config now supports using Guard!

aws

Config Conundrum

Why is AWS Config costing so much in this account?

terraform

Build a Terraform Community Org on GitHub Enterprise

How-to build a Terraform Community Org on GitHub Enterprise

aws

AWS Managed Prefix Lists

How-to provide managed prefix lists for services that users can consume either manually or through automation using the an SSM Parameter Store hierarchy.

aws

AWS GP3 Volumes

AWS GP3 volumes have some great cost benefits for AWS customers!

aws

Prowler on AWS

Prowler is an awesome open source tool for auditing AWS settings within an account or many accounts across an organisation.

aws

Bootstrap Terraform on AWS

How-To Bootstrap Terraform on AWS