AWS Cloud Operations Blog

Implementing AWS Session Manager logging guardrails in a multi-account environment

Raiffeisen Bank International (RBI), a prominent Austrian banking group, maintains a multi-account AWS environment that allows product teams to build and test new customer features at speed, but within the limits of central security guardrails. One of these guardrails requires central logging of all sessions established to Amazon Elastic Compute Cloud (Amazon EC2) instances across the […]

Announcing Amazon Managed Grafana workspace version selection with version 9.4 support

Many customers that use Amazon Managed Grafana have requested for the ability to choose a Grafana version with the latest product features including navigation, dashboards, and visualizations. Today, we are announcing Amazon Managed Grafana workspace version selection with version 9.4 support. Since the product was launched, Amazon Managed Grafana maintained a single version offering globally. […]

Scale AWS Well-Architected Framework Reviews with the new Consolidated Report

Scale AWS Well-Architected Framework Reviews with the new Consolidated Report

AWS Well-Architected Framework Reviews help you improve your workload‘s architecture by identifying risks that require attention across the six pillars of the framework. However, after identifying the risks in your architecture, you need to prioritize them and create an improvement strategy to address them. Using Consolidated Report, a new feature added recently to AWS Well-Architected […]

Tracking and remediating non-compliant resources by integrating AWS Config and Atlassian Jira Service Management through automated webhooks

Tracking and remediating non-compliant resources by integrating AWS Config and Atlassian Jira Service Management through automated webhooks

Organizations require their cloud environment to be secure and compliant according to their governance policies. AWS Config provides customers configuration details of their resources in AWS accounts. Customers can make use of AWS Config managed rules, AWS Config custom rules or conformance packs to get to know the configuration details of their resources quickly. Being aware of […]

Coordinating complex resource dependencies across CloudFormation stacks

There are many benefits to using Infrastructure as Code (IaC), but as you grow your infrastructure or your IaC coverage, the number of components and their dependencies can become increasingly more complex. In this post we will walk through strategies to address this complexity. CloudFormation has built-in support for defining dependencies across resources in your […]

AWS Mainframe Modernization – Refactor Legacy code base to Java using AWS Blu Insights

According to Reuters , there are 220 billion lines of code in customers’ production environments running Cobol and other legacy languages. Customers are looking to modernize their mainframe-based applications to take advantage of the AWS Cloud. These advantages help them to increase their agility, their capacity to innovate, and to benefit from the continual trends […]

Build AWS Systems Manager Automation runbooks using AWS CDK

AWS Systems Manager Automation runbooks let you deploy, configure, and manage AWS resources safely and at scale. You can use AWS-published runbooks or build your own to enable AWS resource management across multiple accounts and regions. The AWS Cloud Development Kit (AWS CDK v2) is an open-source framework that can build applications with the expressive power of […]

Automate account customization using Account Factory Customization in AWS Control Tower

Automate account customization using Account Factory Customization in AWS Control Tower

Before customers can build, migrate and operate their workloads at scale, they must build a foundation to enable a multi-account architecture that supports the growing needs of their organization. With this foundation in place, customers can create AWS accounts to enable workload isolation within their organizations. As customers build their AWS account structure to group […]

AWS Organizations, moving an organization member account to another organization: Part 3

February 27, 2025: This post was republished to update the AWS Firewall Manager guidance. In part one, we identified different features of AWS Organizations requiring guidance and consideration when you move an account from one organization in Organizations to another. We focused on Organizations Polices, AWS Resource Access Manager (AWS RAM) shares, and AWS global condition context […]

AWS Organizations, moving an organization member account to another organization: Part 2

In part one, we identified different features of Organizations requiring guidance and consideration when you move an account from one organization in Organizations to another. We focused on Organizations Polices, AWS Resource Access Manager (AWS RAM) shares, and AWS global condition context keys. In this post, part two of a three-part series, we identify behaviors […]