aws - sjramblings.io

Getting started with cfn-guard

Update Link to offical AWS blog post here There are a fair few policy-as-code tools popping up these days. This post looks at getting start with cfn-guard to parse AWS Config Resource JSON outputs. Why Guard? The reason this one has peaked my interest is due to the native AWS

aws

Security Hub now supports Custom AWS Config Rules

AWS recently announced an integration that I'm a little excited about! AWS Security Hub now receives AWS Config managed and custom rule evaluation results This post provides a summary of what it looks like and a little about its potential. Some history For those that follow AWS service releases you'll

aws

When Enterprise IT systems migrate to AWS

So we've all seen the marketing slides.... * Company x saved 40% in infrastructure costs * Company y collapsed their monothlith into 40 Lambdas But what happens when an on-prem system that has humed its tune in the local Data Centre for years and the vendor has never even thought of a

aws

How to sync containers to AWS ECS the easy way

It's actually really easy to set this up using CodeBuild & Event Bridge all wrapped up in a Cloudformation Stack!

aws

How to use cfn-guard with AWS Config

How to use cfn-guard with AWS Config. I'm not sure when but AWS Config now supports using Guard!

aws

Config Conundrum

Why is AWS Config costing so much in this account?

aws

AWS Managed Prefix Lists

How-to provide managed prefix lists for services that users can consume either manually or through automation using the an SSM Parameter Store hierarchy.

aws

AWS GP3 Volumes

AWS GP3 volumes have some great cost benefits for AWS customers!

aws

Prowler on AWS

Prowler is an awesome open source tool for auditing AWS settings within an account or many accounts across an organisation.

aws

Bootstrap Terraform on AWS

How-To Bootstrap Terraform on AWS