36 items across 1 section
A hands-on introduction to chaos engineering on AWS. Deploy a product catalog API backed by Aurora, then break it with AWS Fault Injection Service to find the gap between your architecture diagram and reality.
Add CloudWatch dashboards, alarms, and FIS stop conditions to your chaos engineering lab. See how guardrails automatically abort experiments when things go wrong.
Force an Aurora failover with AWS FIS and watch your application break. Then fix it with RDS Proxy, read/write separation, and retry logic. Real Terraform code, real experiment results.
When the database is completely gone, RDS Proxy and retries cannot help. Survive an extended Aurora outage with a circuit breaker, a DynamoDB read cache, and SQS write buffering. Real Terraform, real outage, real numbers.
Inject CPU stress, memory pressure, network latency, and packet loss into a whole EC2 fleet with AWS FIS. Watch network faults turn a healthy service into 7-second page loads while every error dashboard stays green. Real Terraform, real numbers.
Take down an entire Availability Zone with AWS FIS: stop every instance in it, blackhole its subnet, and fail Aurora over. See whether a multi-AZ architecture really survives, and the roughly two-minute window that static stability does not erase.
Sever the DynamoDB and S3 endpoints an application quietly depends on, using AWS FIS, and watch whether one dependency outage stays contained or takes the whole app down. Real Terraform, real per-endpoint numbers.
Leave EC2 behind. Stop a whole Fargate task set and force AWS Lambda invocations to error and to stall, using AWS FIS. Real Terraform, real numbers, and the exact setup gotchas for the Lambda fault-injection extension.
Stop talking about disaster recovery and measure it. Pause DynamoDB global table replication with AWS FIS while a live two-Region application keeps writing, then count exactly how many records the surviving Region cannot see. Real Terraform, real RPO, real recovery time.
One experiment is a demo. A program is what builds resilience. Turn FIS experiments into an ongoing practice: the resilience flywheel, GameDays, continuous automated chaos on a schedule and in CI/CD, and AWS Resilience Hub. Includes a real, validated EventBridge Scheduler setup and the jsonencode gotcha that makes a recurring schedule silently run only once.
A CLI tool that scans 140+ AWS services across all regions in about 130 seconds, generating HTML, JSON, or CSV inventory reports for audits, cost analysis, and security reviews.
From forgotten USB drives to the cloud revolution: how Drew Houston's bus ride and Amazon S3's launch changed computing forever, validated by Instagram's $1B acquisition.
A practical guide to configuring AWS CLI v2, Boto3, and secure credential management for professional cloud development.
Deep dive into AWS IAM policies covering policy types, evaluation logic, condition keys, advanced patterns, and common pitfalls with real-world examples.
Understanding HashiCorp Vault, why traditional credential management is broken, how dynamic secrets work, and hands-on setup of the AWS secrets engine with role-based credential generation.
Deep dive into Vault authentication methods including AppRole and AWS IAM auth, with a complete Python application that uses dynamic AWS credentials transparently.
Complete guide to deploying HashiCorp Vault in production on AWS with Terraform, KMS auto-unseal, Raft storage, TLS, load balancing, auto scaling, monitoring, and backup strategies.
Step-by-step guide to launching, configuring, and managing your first Amazon EC2 instance, covering instance types, security groups, key pairs, SSH access, web server setup, monitoring, and cost management.
Master EC2 instance type selection. Learn instance families, burstable instances and CPU credits, purchasing options, enhanced networking, placement groups, and right-sizing strategies.
Master EC2 networking and security. Learn VPCs, subnets, security groups, NACLs, NAT gateways, VPC endpoints, SSH hardening, load balancers, and defense-in-depth architecture.
Complete guide to AWS Lambda covering the execution model, deployment options, triggers, cold starts, concurrency, pricing, and production architecture patterns.
Complete guide to Amazon S3 covering the object model, storage classes, security, encryption, lifecycle policies, replication, performance optimization, and cost management.
Complete guide to Amazon RDS and Aurora covering supported engines, Multi-AZ deployments, read replicas, backups, security, monitoring, Aurora architecture, and production best practices.
Complete guide to Amazon DynamoDB covering data modeling, primary keys, secondary indexes, capacity modes, transactions, streams, global tables, DAX caching, and production best practices.
Complete guide to Amazon API Gateway covering REST API vs HTTP API, Lambda integration, authorization, custom domains, throttling, caching, WebSocket APIs, and production best practices.
Complete guide to Amazon CloudWatch covering metrics, alarms, Logs Insights, CloudWatch Agent, dashboards, anomaly detection, Synthetics, Container Insights, X-Ray tracing, EMF, and cost optimization.
Complete guide to running containers on AWS with ECR, ECS, and Fargate. Covers task definitions, services, networking, load balancing, IAM roles, service discovery, logging, and CloudFormation deployment.
Production patterns for Amazon ECS covering rolling updates, blue-green deployments with CodeDeploy, auto-scaling, Fargate Spot, secrets management, CI/CD pipelines, AWS Batch, and cost optimization.
Complete guide to Amazon EKS covering cluster creation with eksctl, managed node groups, Fargate on EKS, Kubernetes manifests, IRSA, EKS Pod Identity, AWS Load Balancer Controller, Karpenter autoscaling, and the ECS vs EKS decision guide.
Complete guide to Amazon SQS and SNS covering standard and FIFO queues, dead-letter queues, SNS fan-out, message filtering, Lambda integration, encryption, pricing, and event-driven architecture patterns.
Complete guide to Amazon CloudFront covering S3 origins with OAC, cache policies, path-based routing, origin failover, CloudFront Functions, Lambda@Edge, WAF, signed URLs, invalidation, pricing, and monitoring.
Complete guide to AWS AI services including Rekognition, Comprehend, Textract, Polly, Translate, Transcribe, and Bedrock with CLI commands, pricing, and production best practices.
Complete guide to AWS cost optimization covering Cost Explorer, Compute Optimizer, Savings Plans, Spot Instances, S3 lifecycle policies, gp2 to gp3 migration, scheduling, budgets, and production best practices.
Six production-proven AWS architecture patterns: three-tier web apps, serverless APIs, event-driven processing, static websites, data lakes, and multi-region disaster recovery with diagrams and implementation guides.
A thank you to my readers, and a call to support open source AWS tools.
A few weeks ago I published awsmap. Scan your AWS account. 140 services. One command. This is v1.5.0 with SQLite storage, natural language queries, pre-built security audits, and multi-account support.
Our AWS security experts can help you implement best practices across all these topics.
Contact Us