AWS Cloud Operations Blog
Category: Management Tools
Resolving circular dependency in provisioning of Amazon S3 buckets with AWS Lambda event notifications
Overview AWS CloudFormation provides a common language for you to describe and provision all of the infrastructure resources in your cloud environment. CloudFormation allows you to use a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all AWS Regions and accounts. It […]
Applying customizations automatically in AWS OpsWorks for Chef Automate
During mandatory maintenance, AWS OpsWorks for Chef Automate performs Chef Server and Chef Automate version, security, and operating system patching. Version updates for Chef go through extensive testing to verify they are production ready and don’t disrupt existing environments. When an instance is replaced, customers often ask how they can restore their custom settings in […]
How to setup and use AWS OpsWorks for Chef Automate or Puppet Enterprise in an isolated subnet
Introduction For enhanced security, it’s often preferable to place resources in AWS within a subnet with no internet access. Recently, AWS expanded the number of services supported by interface VPC endpoints within the AWS ecosystem, so it’s now easier than ever to run AWS OpsWorks for Chef Automate or AWS OpsWorks for Puppet Enterprise within […]
Using AWS Systems Manager Parameter Store Secure String parameters in AWS CloudFormation templates
When using AWS CloudFormation templates to code your infrastructure, you should consider applying best practices to improve the maintainability of your code. Further, these best practices should be augmented by guidelines like those outlined for twelve-factor apps, which are targeted at optimizing applications for continuous deployment. Of these factors, you should note that you should […]
How to automate Puppet manifest testing and delivery in AWS OpsWorks for Puppet Enterprise
Organizations that use AWS OpsWorks Puppet Enterprise can use AWS services that manage, test, and deploy code to create a continuous integration and continuous deployment (CI/CD) infrastructure. In this blog post, we will show how you can use AWS CloudFormation, Amazon S3, AWS CodeCommit, AWS CodeBuild, AWS Systems Manager, and AWS CodePipeline to set up […]
TCS hybrid cloud patch management at scale using AWS Systems Manager
By Giridharan Varatharajan, Cloud Delivery Platform Architecture lead at TCS and Madhavan Ananthachari, Cloud Delivery Platform Engineering lead at TCS Introduction Now that multitenancy in the cloud is driving IT operation costs down, large enterprises are seeking seamless service delivery methods that address day-to-day activities in your cloud environment. AWS partner Tata Consultancy Services (TCS) […]
Use new resource types in AWS Resource Groups to support day-to-day operations
AWS Resource Groups recently announced its support for additional resource types, including Amazon DynamoDB tables, AWS CloudTrail trails, Amazon SageMaker models, and many more. This blog post will walk you through some examples of how you could use AWS Resource Groups, and its new resource type support to drive some of your day-to-day operations. AWS […]
Signaling AWS CloudFormation WaitConditions using AWS PrivateLink
I’m excited to finally answer a question I’ve been hearing from both Infrastructure as Code developers and security practitioners for years: “How do I send a signal back to my CloudFormation stack from within a private VPC without going across the public internet?”
Automating processes for handling and remediating AWS Abuse alerts
Introduction AWS Abuse addresses many different types of potentially abusive activity such as phishing, malware, spam, and denial of service (DoS)/ distributed denial of service (DDoS) incidents. When abuse is reported, we alert customers so they can take the remediation action that is necessary. Customers want to build automation for handling abuse events and the […]
Secure Serverless Development Using AWS Service Catalog
Serverless computing allows you to build and run applications and services without having to manage servers. AWS Service Catalog allows you to create and manage catalogs of services that are approved for use on AWS. Combining Serverless and Service Catalog together is a great way to safely allow developers to create products and services in […]