After using AWS for ~14 years, I've internalised a handful of design patterns that I try to apply to my own software. I'm keen to know if it's the same for other folks.
Roughly: tags, IDs (thrice), limits, pagination.
(I'm not going to use the thread emoji)
Oh my god. 13 years after I sign up for AWS it finally happened to me: my first terrifying bill. $1300. 😱
I’d been playing with Control Tower and set up a handful of accounts. Forgot about it for a month. Turns out it deploys a LOT of NAT gateways.
For a personal project on AWS it can feel silly to pay $16.40/mo for a load balancer in front of a $2.70/mo container, just to get TLS termination and zero-downtime deployments.
Try API GW instead. It’s much cheaper, but I rarely see people doing this
awsteele.com/blog/2022/10/1…
The #AWS Heroes inspire, uplift, and motivate the global #AWScommunity. 👩💻☁️👨💻
Today, we’re excited to announce and recognize the newest Heroes in 2023! #CloudComputing 👏 go.aws/3FdjVpw
Very exciting news: AWS have submitted a PR (the first of a few to come) to Envoy to enable Lambda functions as targets in App Mesh.
This will be huge for enabling a seamless transition to and from containers, instances, etc.
I regret to inform that I am extremely back on my bullshit.
I've been thinking about connectivity in unusual places. And I got to thinking: can I establish bidirectional connectivity over the Internet between two EC2 instances in private subnets without a third-party relay?
Ok I blogged about it. That's how excited I am.
1. Deploy this CFN template
2. Write this GHA workflow
3. Never worry about IAM users again
awsteele.com/blog/2021/09/1…
What's the silliest use for 281 trillion IP addresses?
I made a thing that uses the new-ish AWS EC2 support for assigning IPv6 prefixes to EC2 instances. You can only connect to the instance when the IP ends in a TOTP 6 digit authenticator code. How/why:
This afternoon I've been playing with an idea: adding OpenTelemetry to IaC tools (e.g. Terraform here) to get a visual insight into what takes the most time to provision.
Here you can see TF needs to call CreateFunction four times before the IAM role becomes consistent
Are you still using API Gateway? That is soooo first half of November 2021.
All the cool kids are using lambda.CreateFunctionUrlConfig()
…gf.lambda-url.us-east-1.amazonaws.com
When AWS launched container image support for Lambda, I saw people complain that it wasn't as nice as Google Cloud Run - which runs a containerised webapp with zero changes.
I made serverlessish to fix that. Run the same images in Lambda as you do in ECS. github.com/glassechidna/s…