AWS Open Source Blog

Category: Technical How-to

high level architecture of How to manage Grafana and Loki in a regulated multi-tenant environment

Managing Grafana and Loki in a regulated multitenant environment

Grafana Loki was introduced in 2018 as a lightweight and cost-effective log aggregation system inspired by Prometheus. Grafana, often with Prometheus, is a popular open source platform for monitoring and observability that can be used to query, visualize, and create alerts on a number of metric and data sources. With the increase in maturity of […]

ShpilbergStudios – stock.adobe.com

Cloud governance and compliance on AWS with policy as code

To stay competitive, organizations must innovate faster and operate more efficiently, and using dynamic and highly scalable cloud resources can help. IT teams can shift from the mindset of a binary choice between business agility and governance control, to a mindset that includes speed and governance over cost, security, compliance, and more. The following common […]

Song_about_summer – stock.adobe.com

Scaling threat prevention on AWS with Suricata

This post was written by Victor Julien, Kelley Misata, Shakeel Ahmad, and Maritza Mills. Suricata is a fast, robust, open source network threat detection engine that includes real-time intrusion detection (IDS), an inline intrusion prevention system (IPS), network security monitoring (NSM), and offline packet capture (pcap) processing. Suricata is owned by the community-run, non-profit Open […]

entire architecture illustrated

Using AWS Distro for OpenTelemetry Collector for cross-account metrics collection on Amazon ECS

In November 2020, we announced OpenTelemetry support on AWS with AWS Distro for OpenTelemetry (ADOT), a secure, production-ready, AWS-supported distribution of the Cloud Native Computing Foundation (CNCF) OpenTelemetry project. With ADOT, you can instrument applications to send correlated metrics and traces to multiple AWS solutions, such as our Amazon Managed Service for Prometheus (AMP) and […]

Leigh Prather – stock.adobe.com

Managing AWS Distro for OpenTelemetry Collector with AWS Systems Manager Distributor

AWS Systems Manager Distributor simplifies the distribution, installation, and update process for software packages on managed instances at scale. AWS Systems Manager also provides a secured and centralized repository with version control for these software packages. With AWS Systems Manager Distributor, users can install and update their software packages for a large set of managed […]

Enhancing data science environments with Vim, tmux, and Zsh on Amazon EC2

This post was written by Josiah Davis, Yin Song, and Anne Hu. The solution can also be found on GitHub. Many professional data scientists are adopting open source software development tools such as Vim, tmux, and Zsh to get more productivity out of their working environment. Vim is a free and open source, highly configurable […]

Song_about_summer – stock.adobe.com

Introducing Assisted Log Enabler for AWS

Logging information is important for troubleshooting issues and analyzing performance, and when Amazon Web Services (AWS) customers do not have logging turned on, the ability to assist them becomes limited, to the point that performing analysis may be impossible. In some cases, customers may not have the technical expertise needed to set up logging properly […]

Framework Wonderland – stock.adobe.com

Getting started with Bottlerocket on AWS Graviton2

AWS Bottlerocket is a Linux distribution that has been designed from the ground up to run containers. With its built-in security hardening and transactional update model, Bottlerocket offers improved security and operations for container infrastructure. It can be integrated with container orchestrators to allow for auto-update, thereby reducing management and operational overhead along with improved […]

Sergey Nivens – stock.adobe.com

How to deploy Spinnaker Keel on Amazon EKS

Originally open sourced by Netflix in 2015, Spinnaker is a continuous delivery platform for releasing software changes rapidly and reliably. Spinnaker provides the flexibility to deploy applications on virtual machines running in the cloud or in your container platform of choice, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon […]

architecture for sample request parameter-based OPA Lambda authorizer that receives the identity of the caller in a combination of headers and converts them as structured context data for OPA to make a policy decision and authorize your API call

Creating a custom Lambda authorizer using Open Policy Agent

Organizations have complex infrastructure and need common tooling to make decisions about the system as a whole. In such scenarios, policy-based decision making could be implemented using Open Policy Agent (OPA). OPA is an open source, general-purpose policy engine, which decouples policy decision-making from policy enforcement. When a web-based application needs to make a policy […]