AWS Partner Network (APN) Blog
Category: Expert (400)
Archiving Amazon MSK Data to Amazon S3 with the Lenses.io S3 Kafka Connect Connector
Amazon Managed Streaming for Apache Kafka (Amazon MSK) is a fully managed, highly available, and secure Apache Kafka service that makes it easy to build and run applications that use Kafka to process steaming data. Learn how to use the new open source Kafka Connect Connector (StreamReactor) from Lenses.io to query, transform, optimize, and archive data from Amazon MSK to Amazon S3. We’ll also demonstrate how to use Amazon Athena to query the partitioned parquet data directly from S3.
How to Export a Model from Domino for Deployment in Amazon SageMaker
Data science is driving significant value for many organizations, including fueling new revenue streams, improving longstanding processes, and optimizing customer experience. Domino Data Lab empowers code-first data science teams to overcome these challenges of building and deploying data science at scale. Learn how to build and export a model from the Domino platform for deployment in Amazon SageMaker. Deploying models within Domino provides insight into the full model lineage.
How to Implement Object-Based Authorization in Serverless Applications Using Amazon Cognito
When building a complex web service such as a serverless application, sooner or later you must deal with permission control. Amazon Cognito is a powerful authentication and authorization service managed by AWS and is often combined with Amazon API Gateway and AWS Lambda to build secure serverless web services. Through the blueprint of an AWS Lambda authorizer, learn how to implement object-based authorization in serverless applications on AWS.
How to Integrate AWS Client VPN with Azure Active Directory
It’s well known that IT departments prefer authentication integration into existing IdPs such as Azure Active Directory to reduce operational overhead and the attack surface of IT systems. AWS announced federated authentication support for AWS Client VPN in May 2020, and this support requires integration with a SAML 2.0 provider, such as Azure Active Directory. Learn how to integrate AWS Client VPN with an Azure Active Directory to give remote users access to an AWS private VPCs..
How HeleCloud Used AWS Secrets Manager to Automate Credentials Rotation of MS SQL on Amazon EC2
HeleCloud combines AWS Secrets Manager and the AWS Systems Manager Run Command into a solution that automatically rotates secrets for databases running on Amazon EC2. In addition to automatically rotating your secrets, it allows you to access them in applications running on Amazon EKS. Learn about the HeleCloud solution and walk through the code snippets and steps required to set up automatic credentials rotation of MS SQL Server running on Amazon EC2.
Provisioning a Virtual Private Cloud at Scale with AWS CDK
Infrastructure as code is one of the most important concepts used with cloud solutions, and AWS CloudFormation enables IaC by deploying stacks and provisioning resources on AWS using JSON or YAML files called templates. APN Ambassador Francois Rouxel from Slalom will show you how to create a hundred VPCs in one AWS region without providing any parameters, and how to easily establish a peering connection between two of them within a single line of code.
How nClouds Helps Accelerate Data Delivery with Apache Hudi on Amazon EMR
Apache Hudi on Amazon EMR is an ideal solution for large-scale and near real-time applications that require incremental data pipelines and processing. This post provides a step-by-step method to perform a proof of concept for Apache Hudi on Amazon EMR. Learn how a non-customer-facing PoC solution from nClouds set up a new data and analytics platform using Apache Hudi on Amazon EMR and other managed services, including Amazon QuickSight for data visualization.
How to Upgrade Large Windows 2008 R2 Workloads in Place
Upgrading legacy systems to the cloud can seem daunting and time-consuming, but with the right combination of AWS Systems Manager, AWS Directory Service, and a few simple AWS Lambda functions, you can upgrade from your outdated Windows environments flawlessly, seamlessly, and at scale. Learn how you can run an in-place upgrade of your Windows 2008 R2 production instances to Windows 2019 R2, and how to control instance tagging so you can orchestrate the root volume replacement process.
Accelerate Data Warehousing by Streaming Data with Confluent Cloud into Amazon Redshift
Built as a cloud-native service, Confluent Cloud offers developers a serverless experience with elastic scaling and pricing that charges only for what they stream. Confluent’s Kafka Connect Amazon Redshift Sink Connector exports Avro, JSON Schema, or Protobuf data from Apache Kafka topics to Amazon Redshift. The connector polls data from Kafka and writes this data to an Amazon Redshift database. Polling data is based on subscribed topics.
Isolating SaaS Tenants with Dynamically Generated IAM Policies
Many SaaS organizations leverage AWS Identity and Access Management (IAM) to define a series of policies and roles that can be used to ensure tenants are not allowed to cross tenant boundaries when accessing resources. To make this work, you have to create separate policies for each tenant which can create an explosion of tenant policies that push the account limits of IAM. Learn how dynamic policy generation creates a more scalable and manageable isolation experience.