Networking & Content Delivery
Tag: AWS StepFunctions
Automating CIDR expansion: Reducing IP exhaustion downtime
Learn how to build a serverless automation that monitors VPC IP utilization and expands CIDR capacity within minutes. This solution uses AWS Lambda, Step Functions, and IPAM to detect IP exhaustion risk and add secondary CIDRs with new subnets automatically. Three operating modes support environments with full IPAM management, IPAM for subnets only, or no IPAM at all. Deploy with a single SAM command and configure through VPC tags.
Tag-based invalidation in Amazon CloudFront
Update (May 2026): Amazon CloudFront now natively supports tag-based cache invalidation — no additional infrastructure required. You can tag cached objects via origin response headers or S3 metadata and invalidate them by tag directly through the CloudFront API. For details, see the CloudFront Developer Guide and the launch blog post. If you are starting fresh, […]
Analyzing stale security group rules using serverless architecture
Security is a top priority for AWS and customers running workloads in AWS. The previous post Top 10 security items to improve in your AWS account, covered the top security items that AWS customers should pay special attention to if they want to improve their security posture. High on the list is the need to […]


