aws - sjramblings.io

Unleashing the power of AWS Athena on Transit Gateway Flow Logs

AWS Transit Gateway Flow Logs provide valuable insights into the traffic flowing through your network. However, analyzing this data can be challenging, especially if you have many logs to sift through. In this article, we will show you how to use AWS Athena to quickly ingest and query your Transit

github

Github Runner ECS Authentication

Using this fantastic open-source project, we have enabled GitHub Actions using ephemeral self-managed runners on AWS SPOT. 💡Please head over to GitHub to check out and support their excellent work. However, one thing we have hit is docker hub limits when running multiple workflows that use containers. We are running

aws

Up and running with AWS Network Firewall - Part 3

The third post in my series as I share my learnings with AWS Network Firewall. If you want to start at the beginning, check out part 1 here and part 2 here. Let's get into setting up an Inspection VPC across multiple Availability Zones! The Setup Building on the example

aws

Cloudformation FirewallPolicy UPDATE_FAILED

While I have a fond love for Cloudformation, sometimes I find myself banging my head against a wall when trying to get past an error. This time it's related to AWS::NetworkFirewall::FirewallPolicy. The Issue The policy associated with an AWS Network firewall can be configured in either DEFAULT_ACTION_

aws

Up and running with AWS Network Firewall - Part 1

This post is the first in a series to share my learnings as I get to grips with AWS Network Firewall. See the second part here There are many use cases; however, in this series, I'll focus on the following. Inspection VPC This pattern will place the firewall between two

aws

Getting started with cfn-guard

Update Link to offical AWS blog post here There are a fair few policy-as-code tools popping up these days. This post looks at getting start with cfn-guard to parse AWS Config Resource JSON outputs. Why Guard? The reason this one has peaked my interest is due to the native AWS

aws

Security Hub now supports Custom AWS Config Rules

AWS recently announced an integration that I'm a little excited about! AWS Security Hub now receives AWS Config managed and custom rule evaluation results This post provides a summary of what it looks like and a little about its potential. Some history For those that follow AWS service releases you'll

aws

When Enterprise IT systems migrate to AWS

So we've all seen the marketing slides.... * Company x saved 40% in infrastructure costs * Company y collapsed their monothlith into 40 Lambdas But what happens when an on-prem system that has humed its tune in the local Data Centre for years and the vendor has never even thought of a

aws

How to sync containers to AWS ECS the easy way

It's actually really easy to set this up using CodeBuild & Event Bridge all wrapped up in a Cloudformation Stack!

aws

How to use cfn-guard with AWS Config

How to use cfn-guard with AWS Config. I'm not sure when but AWS Config now supports using Guard!

aws

Config Conundrum

Why is AWS Config costing so much in this account?

aws

AWS Managed Prefix Lists

How-to provide managed prefix lists for services that users can consume either manually or through automation using the an SSM Parameter Store hierarchy.

aws

AWS GP3 Volumes

AWS GP3 volumes have some great cost benefits for AWS customers!

aws

Prowler on AWS

Prowler is an awesome open source tool for auditing AWS settings within an account or many accounts across an organisation.

aws

Bootstrap Terraform on AWS

How-To Bootstrap Terraform on AWS