Recently we had a requirement to setup basic auth on one of our public facing URL which was getting served by a Nginx server, running behind an ALB. We also wanted to restrict failed login attempts so we decided to use fail2ban. …

In this post, we’ll see how we can use Transit Gateway as single exit point For internet And VPC endpoints access. Reference: https://aws.amazon.com/blogs/networking-and-content-delivery/creating-a-single-internet-exit-point-from-multiple-vpcs-using-aws-transit-gateway/ Integrating AWS Transit Gateway with AWS PrivateLink and Amazon Route 53 Resolver | Amazon Web… I want to take some time to dive more deeply into a use case outlined in NET301 Best Practices for AWS PrivateLink. The…aws.amazon.com

In this post, we’ll see how we can use AWS Session Manager instead of SSH to connect to an EC2 instance and execute a playboook. Step 1: Create an IAM user with programmatic access and get the Access Key/Secret Access Key for this user. …

In this post, we’ll see how we can debug access related issues while using AWS Gateway Endpoints. For more details about GateWay Endpoints, you can refer to https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints.html Setup: We’ve setup oure resource in us-east-1 region where we have a VPC with 2 Public/Private subnets. We also have one EC2…

In this post, we’ll see how to handle the AWS access key which has been exposed. During such incidents, the first thought that comes into our mind is to deactivate/delete that access key. …

In this post, we’ll see how we can use AWS AppConfig to pass configuration settings to our ECS tasks. If you haven’t heard of AppConfig, refer to AWS documentation to understand this service in detail. What Is AWS AppConfig? Use AWS AppConfig , a capability of AWS Systems Manager, to create, manage, and quickly deploy application…docs.aws.amazon.com Reference: https://aws.amazon.com/blogs/mt/introducing-aws-appconfig-python-helper-library/

In this post, we’ll see how we can send CloudWatch Alarm status to Telegram. Pre-requisite: For this demo, we’ve created an EC2 instance and set up a CloudWatch alarm on CPUUtilization metric.

In https://faun.pub/aws-ecs-blue-green-deployment-setup-using-terraform-b56bb4f656ea, we saw how we can setup Blue/Green deployment for ECS service. In this post, we will setup continuous deployment for a standalone service(which is not behind a load balancer). Since CodeDeploy doesn’t support ECS deployment without a load balancer, we will instead use CodePipeLine ECS deployment type to…

In this post, we’ll see how we can route Falco alerts to a SNS topic. Falco is the open source standard tool for continuous risk and threat detection across Kubernetes, containers and cloud. Step 1:Open CloudShell and configure awscli with your credentials.Now install eksctl and kubectl using following commands: curl…