Recent content on Jake As A Service
Your disaster recovery plan probably sucks. This is a funny thing since someone took the time to write it up and, then it got blessed by a group of auditors in all likelihood and, people felt good about it despite all that the plan probably sucks. There are a few reasons for this: first off it’s not been tested enough, second the plan is out of date and, third it doesn’t account for enough of what…
Implementing AWS backup allows us to create immutable backups in AWS. It also provides us with a bunch of tools for testing backups and making sure our restores are working properly. You can also use it for sharing backups across regions and across accounts though there will be issues to deal with especially with KMS and IAM to make that work.
One of the key reasons that I wanted to implement…
Loops at first glance seemed to be a natural construct in computing. Obviously every language had them and they were just there from the beginning right? Then I learned about lisp and realized you could construct a language without loops. This created a few questions that I’m attempting to answer here.
Where did loops come from? How did we decide that loops should be one of the fundamental…
Table of Contents Big Picture Resources
Security
Databases and Data Modeling
Continous Delivery
Containers
Networking
Cloud
Linux and Operating Systems
Debugging and Reliability
Systems Thinking and Design
Human Factors
Code Review
Agile
Automation
Incident Response
Monitoring and Observability
Introduction This is a list of DevOps…
I recently joined a startup. As part of doing that I realized there where a ton of questions that I either wished I had asked during the interview process or needed to get the answer to pretty quickly after joining. These quesitons helped me make sense of the technical environment that I was operating in. They also make it clear where things are going well and where there are weaknesses in the…
Today I was chasing down a bug where a database that was in a peered VPC couldn’t be connected to. It was a good reminder of the things that should be checked when trying to debug networking issues in AWS.
Security groups (in my case the problem was the SG on the database though I checked that after everything else) NACLs Route tables Make sure you can resolve DNS between the paired VPCs…
Today I learned when peering VPCs you need to accept the peering invitation before you can update the route tables in the requester VPC.
Today I learned about setting up AWS IAM Identity center for an AWS Organization. There are four major concepts besides the identity provider which I’m not going to get into that you need to know about.
Those concepts are
users groups permisson sets accounts Users are pretty straight forward. Its a person with access to the AWS org. This person can be assigned to groups or directly…
AWS Identity and Access Management (IAM) is needed to make everything else work on AWS. Without knowledge of it everything else is much harder to set up. Unfortunately it’s a glaring blind spot for many people and is treated as purely a concern for infrastructure teams. This approach doesn’t allow for as fine grained access controls as there could be and makes it harder to debug what is going…
It’s common for managers to want to grow the headcount of their teams. While this can make sense from a political perspective it’s usually a mistake for the organization. Big teams don’t cause work to be delivered any faster. The goal should be maximizing the amount of leverage that a team has.
Many large organizations aren’t operating effectively. This creates a big opportunity for small…