RSSAmplifier

Blog

Element7

Recent content on Element7

element7.ioRSS feed ↗54 posts

Latest posts

Please AWS, Allow Me to Enforce the Decommission of Deprecated Lambda Runtimes

Deprecated Lambda runtimes present significant security risks, and managing them manually is cumbersome. AWS should provide tools to enforce a grace period for deprecated runtimes, after which they are either automatically updated or disabled. This approach would benefit both customers and AWS, improving security and efficiency.

The Relativity of GenAI Productivity Gains and the Jevons Paradox

The article examines the concept of GenAI productivity gains in relation to the Jevons Paradox, arguing that while GenAI can significantly enhance productivity, these gains may be offset by increased expectations and demands, leading to a need for a nuanced understanding of its true impact.

The Double-Edged Sword of AWS Backup Vault Lock: Guarding Against Ransom Attacks but at What Cost?

The AWS Backup Vault Lock provides robust protection against ransom attacks, but without setting a proper retention time, businesses risk escalating storage costs or complex, costly account migrations.

Empowering Cloud Security and Resiliency: A Guide to Read-Only Console Access

Enforcing read-only access to the cloud console can help mitigate configuration drift, improve resilience, and protect against an account takeover. Learn why and how.

Shift Left Security: The Git Backdoor in Deployment Pipelines

A pipeline triggered by Git responsible for deploying your infrastructure can do quite some harm. In this post we examine this problem and the necessary security measurements.

Shift Left Security: Why You Should Use AWS IMDSv2 Explained in Detail

This article explains the security enhancements IMDSv2 bring and how this is technically achieved.

Boost Performance and Reduce Costs Using Lambda Extensions

Learn how to utilize Lambda Extensions to cache your secrets and parameters for better perfomance and reduced costs.

AWS SSM Session Manager Port Forwarding to RDS without SSH

How to use Session Manager to establish a secure connection to an RDS running in a private subnet

The Hidden CloudWatch Metric Filter Debugger

A CloudWatch Metric Filter Debugger exists in the AWS Web Console. It’s a very handy tool, you just need to find it.

How-to debug and trace problems in AWS CodeBuild

Capabilities to debug and test AWS CodeBuild exist but seem unknown to most people, let’s change that!

A Hidden Gem: Two Ways to Improve AWS Fargate Container Launch Times

Because image caching is not easy to fix on AWS Fargate, AWS is working on two alternative approaches to reduce container launch times

Sustainability and Software Development: Properly Prioritise Your Actions

When thinking about sustainability, properly prioritize your efforts toward limiting your carbon footprint.

Resilient and Cost-Optimized Artifactory Hosting on AWS

Set up Artifcatory on AWS with cost-efficiency and resiliency in mind

The importance of Securing Serverless Infrastructure

Understand why you should and why it is important to secure serverless infrastructure.

How to prepare for the AWS Solution Architect Professional certification (SAP-C01)

Get an insight on how to prepare for AWS Solution Architect Professional certification

AWS RDS upgrade: how to solve the 'Oracle RDS ORA-28040: No matching authentication protocol' issue

Learn to use RDS parameter groups to define authentication protocols and solve connection issues

Understand, Visualize, and Lower CloudWatch Costs

Become aware of CloudWatch costs and learn how to bring them down

AWS SQS Inside Out, Encryption at Rest & Resource Policies

Learn how to enable encryption at rest and how to use resource policies on AWS SQS

IT Professionalism: Have You Ever Wondered Why We Ship Shit?

Bad design and incompetence are two main reasons for delivering low-quality software.

Improving Resiliency using Immutable Infrastructure

Scale faster and avoid unpredictable in your systems using Immutable Infrastructure

One-Click Set Up: Querying AWS ALB and VPC Flow Logs Made Easy

An easy way to set up an Athena integration to query AWS ALB and VPC Flow logs

How-to Use Static Stability to Design a Resilient Architecture

A deep dive into static stability and how to apply it to a system design

AWS RDS Backup Dilemma: Why It is Hard to Do Good on RTO and RPO Simultaneously

Recovery Point in time offers the best RPO but it comes with a price.

AWS re:Invent 2021 recap by a DevTools Hero

My personal list of the most exciting announcements at re:Invent 2021

Ransomware Mitigation: The New Vault Lock for AWS Backup

How to protect your backups using AWS Backup against post-encryption or deletion.

AWS API Gateway Best Practices in-depth

AWS API Gateway Best Practices about throttling and security in general

The Quirks of Software Effort Estimation

Some interesting concepts and laws regarding software effort estimation.

AWS EC2 Resilience Engineering the easy way

Use Maximum Instance Lifetime property to ensure that instances are recycled before reaching the specified lifetime.

Be aware: AWS Lambda Deployments Fail on Isolation

While deploying Lambdas a time window exists where different Lambda versions can run side by side (both old and new). If you’re unaware of this, a deployment could end up pretty messy.

Keep up with the times: use AWS PrivateLink

The benefits of using AWS PrivateLink and a how-to guide.

AWS Chatbot to the rescue: never miss an AWS Security alert

Use AWS Chatbot to forward all you security alerts to your chat client.

From now on, you can pay your fines online for the City of Ghent

Technical writeup on how we have launched invoice.gent

How-to avoid cloud vendor lock-in

How-to use a multi-account setup and loose coupling to avoid vendor lock-in

A lifesaver: Prevent AWS SNS subscriptions to become 'floating'

A solution to monitor and prevent SNS topics to become floating

Keep up with the times: forget SSH, welcome AWS Session Manager

Installation, usage and advantages of AWS SSM Session Manager

The Curious Case of Autoscaling

Why you should implement a Fail Fast mechanism in your backend

Creating an AWS Fargate service with a custom Task Definition using the AWS Python CDK

A Python CDK code example for creating an ECS Fargate service

The Polyglot Developer

The advantages of knowing multiple programming languages

Lambda Cold Starts, why I don’t see the problem

Cold starts are just part of Lambda

You Build It, You Run It: at least there's one caveat

TLDR; It boils down to authority

Sprint planning: how-to use RTO & RPO to prevent feature stuffing

A best practice against feature stuffing

How-to organize CloudFormation stacks to minimize blast radius

A strategy to organize your CloudFormation stacks based on stack velocity

Managing Multiple AWS Accounts using the CLI

Managing Multiple AWS Accounts using the CLI.

Publishing a Go module: getting up and running

Tips & tricks on how to publish a Go module.

React: white-box vs black-box testing

A comparison of white-box and black-box testing when testing React components.

TDD with Petri Nets

Write-up of the talk by Gojko Adzic at SC London 2019.

Feedback Loops for Software Delivery

Write-up of the talk by Gojko Adzic at SC London 2019.

SC London 2019 — Discussion Panel

Write-up of the discussion panel at SC London 2019.

The Gordian Knot

Write-up of the talk by Alberto Brandolini at SC London 2019.

What does GREAT Architecture Look like?

Write-up of the talk by James Birnie at SC London 2019.