AWS on Teddy Ferdinand

AWS IAM: Between dream and nightmare

Sun, 16 Aug 2020 04:51:07 +0000

I have been using AWS professionally for over 4 years now.

To be a bit old-fashioned, when I started on AWS, the following services and features did not exist:

The ALB/NLB
ACM
ElasticSearch Service
Lambda inside a VPC or with the duration of more than 5 minutes
ECS/EKS/ECR

During these 4 years, I had the opportunity to do a lot of IAM, essential to deploy secure solutions on Amazon.

IAM and least privilege

Identity and Access Management (IAM) is the AWS service that defines users or roles and their associated permissions.

Accelerate the test of your lambda functions with Docker

Mon, 27 Apr 2020 06:00:00 +0000

Lambda is a very powerful AWS tool. Executing scripts in serverless mode drastically reduces the cost and complexity of managing a scalable infrastructure, however, testing its functions directly on Lambda can sometimes be frustrating as it requires round trips between the development station and the AWS environment.

There are testing features built into the AWS toolkit for the most popular editors (for Microsoft Visual Studio Code / PyCharm, for example), however, this restricts the possible editors and creates an adherence that is not particularly desirable.

Understanding the success of the "Serverless" model

Thu, 19 Dec 2019 12:30:30 +0000

Anyone who has ever done infrastructure on a cloud provider has already heard of the serverless model, behind this name is actually hiding many aspects. Let’s take a look…

The serverless model: logical evolution of containers?

For several years now, we have been talking about containers. A revolution over the last 5 years, containers (and orchestrators) have profoundly changed the approach to infrastructure, allowing applications composed of microservices to be deployed more and more simply and quickly. I won’t talk about this evolution here.

Terraform VS CloudFormation: Which tool to deploy on AWS?

Fri, 13 Dec 2019 11:00:00 +0000

Terraform or CloudFormation, the two tools are often pitted against each other, asking DevOps to decide and choose one tool or the other. However, from my point of view, these two tools do not necessarily address the same needs.

Asking the question of one’s exact need

Before knowing which tool to go to, it is important to know the exact need to be addressed:

Do I want to deploy only on AWS?
Do I need to interface with existing tools (especially CI/CD)?
Do I want to host the deployment solution myself or depend on a managed service?
Do I already use other tools from the HashiCorp ecosystem (Nomad, Packer, Consul or Vault for example)?

Indeed, with these questions you can already target the tool you want to use more easily.

Linux without SSH? It's possible with Amazon SSM

Thu, 18 Jul 2019 07:10:54 +0000

In a computer park with linux machines, SSH is something classic. Very often scanned, regularly badly secured, it is also a possible entry point for attacks. Moreover, the problem of SSH traceability often pushes companies to set up specific processes.

On Amazon, it has been possible since last year to log in using SSH without the need for a key, login or password… and without SSH.

SSM - Systems Manager Agent: Amazon-style configuration manager

Amazon makes it easy to deploy server fleets, however, deploying a server is easy, maintaining it is not necessarily. Many companies will probably choose to use Ansible, Puppet, Chef or another manager configuration.

Migrate your infrastructure to AWS in an optimal way

Fri, 12 Apr 2019 12:39:56 +0000

The Cloud appears to be an Eldorado for many companies: simpler application deployment, cost reduction, use of innovative technologies, so many advantages that Amazon promises to its potential customers, but is it that simple?

AWS, and the cloud more generally, can be an excellent lever on the points mentioned above, however it is quite easy to lose feathers. In this article, I will list what, for me, seems to be the mistakes to avoid.

AWS Summit 2019 - Paris: Between success and disappointment

Thu, 04 Apr 2019 18:27:27 +0000

I was at the AWS Summit in Paris a few days ago. For those of you who don’t know this event, it’s a full day of conferences around Amazon’s cloud, AWS. This meeting is quite interesting because it allows us to get feedback from a lot of companies coming from different backgrounds.

I was going for the second time, the first time being in 2017. I was waiting for this day given the announced conference schedule.