AWS Cloud Operations & Migrations Blog

Category: Technical How-to

Moving to event-driven architectures with serverless event aggregators

Event-driven architectures are gaining attention because they help organizations achieve benefits through the decoupling of services, increasing scalability, adding flexibility, and increasing developers’ agility. As companies grow over time, they need to find ways to integrate (couple) multiple processes and applications (which are usually owned by different teams.) Coupled applications work in certain scenarios where […]

Monitoring CoreDNS for DNS throttling issues using AWS Open source monitoring services

Monitoring Infrastructure and Application is essential today as it provides important information to the operations engineers to ensure the technology stack runs healthy to achieve the business outcomes. To build a microservices environment using container orchestration tool like Kubernetes, which is designed to increase flexibility and agility, there are many distributed parts that have to […]

Gain compliance insights using the open source community for AWS CloudTrail

Does your organization need to maintain visibility into operations in their AWS accounts for security and compliance? Do you need this visibility across multiple AWS accounts and geographic regions? Would you like predefined templates to help you get started with analyzing account activity quickly? Using AWS CloudTrail Lake and our newly announced public repository of […]

Announcing inbound network access control in Amazon Managed Grafana

Many customers that use Amazon Managed Grafana have a need to restrict the Grafana workspace public access and enable fine-grained control to allow which traffic sources can reach the Grafana workspace. Today, we are announcing Amazon Managed Grafana’s new feature that supports inbound network access control. This enables you to secure Grafana workspaces using VPC […]

How CyberArk Implements Feature Flags with AWS AppConfig

Written by Ran Isenberg, Principal Architect at CyberArk Feature flags are a powerful tool that allow you to change software behavior. In addition, feature flags can improve your CI/CD pipeline by enabling capabilities, such as A/B testing, thus making them an enabler of DevOps and a crucial part of any CI/CD pipeline. However, feature flagging […]

Tag workloads with AWS Config conformance packs across AWS accounts

Overview As cloud deployments get larger and more complex, Organizations struggle with managing and identifying a growing set of resources. Tags provide companies with metadata about their resources – they can use them to identify the resources for cost allocation, operations or data security. AWS Config is an AWS service that continually assesses, audits, and […]

Implementing a custom ConfigSource in Quarkus using AWS AppConfig

Most systems developed on the cloud nowadays implement a microservices architecture. A common demand is that each microservice is highly configurable and that configuration can be changed without changing code, and ideally, without restarting a running service instance. Quarkus (see https://quarkus.io/) is a popular framework for writing high-performing microservices in Java. AWS AppConfig is AWS’ […]

Reversing Technical Debt with Cloud

This blog post covers best practices to manage and reverse technical debt by prudently leveraging and operating cloud services. Technical debt is a metaphor coined by Ward Cunningham, to deal with the cost of making tradeoffs in software development to meet near-term business needs. In the case of financial debt, you take a loan to […]

Delegate AWS Organizations policy management in a multi-account environment

AWS Organizations helps you centrally manage and govern multiple AWS accounts within AWS. You can manage organization structure, add and remove accounts, define configuration using policies, handle consolidated billing, and control multi-account features of integrated AWS services. As your environment grows, your administrators have to manage more accounts and policies which often requires coordination between […]

Consolidate and query AWS CloudTrail data across accounts and regions using AWS CloudTrail Lake

AWS CloudTrail allows tracking of user and API activities across your AWS infrastructure. AWS CloudTrail best practices recommend AWS customers set up separate trails for different use cases such as operational troubleshooting, auditing, security monitoring, etc. Once the use case is accomplished, customers might permanently delete some of the trails but choose to retain their […]