SCC

Brasil

os cloud gurus

AWS

Software Cloud Consulting

Your software development, cloud, consulting & shoring company

AWS Blog Wolfgang Unger & SCC Brasil

News, HowTos & Tutorials about AWS

Haben sie Fragen zu AWS Themen?
Dieser Blog versucht die Antworten dazu zu liefern
und Anleitungen & HowTos bereitzustellen, wie man eine Cloud Infrastruktur aufbaut und wartet.
Fokus sind DevOps & Buildtools, Infrastructure as Code, Sicherheit, Kostoptimierung, Architektur, Account Setup.
Youtube Banner
Autor Wolfgang Unger - Cloud & AWS
Subscribe

Letzte Posts

5 common problems and errors on AWS & cloud accounts
Is your AWS account and architecture really setup correctly? Is it really secure, resilent and reliable? This blog will cover the most common issues which you normally find on AWS You can use this blog as a checklist and do a self review on your account and architecture
AWS Backup - Hot to backup cross region and cross account
What are the best practices for data backup and retention on AWS? AWS Backup is not quite easy to setup if you have an advanced backup strategy. This blog explains how to setup AWS backup for cross region and cross account backups and what you have to pay attention to
Serveless DMS (Data Migration Service)
The Data Migration Service is now also Serverless Available. Let's have a look on this awesome new feature.

DevTools

Pipeline for automatic CloudFormation Deployments
Do you need an automation to deploy your CloudFormation Templates to your AWS Account(s)? A Pipeline or a tool that will automatically create a CloudFormation Deployment Pipeline for each of your stacks ? Read this blog about my Github Project to setup such a Pipeline for your CloudFormation Templates
Pipeline for automatic CloudFormation Deployments (CDK)
Do you need an automation to deploy your CloudFormation Templates to your AWS Account(s)? A Pipeline or a tool that will automatically create a CloudFormation Deployment Pipeline for each of your stacks ? Read this blog about my Github Project to setup such a Pipeline for your CloudFormation Templates with CDK
Azure Devops Pipeline for Terraform Deployments
Are you using Azure Devops and Terraform? You need a Pipeline to automate your Deployments to the cloud? This blog shows how to deploy Terrafrom with Azure Devops to a AWS Account by creating a Pipeline step by step. Of course you could also deploy to Azure or GCP.
How to setup a Multi Branch Pipeline with Webhook
This tutorial will cover how to setup a feature branch pipeline with CDK and CodePipeline. Since there is no native support for this functionality in CodePipeline and many other Build Tools, we have to implement this on our own. Based on my Github Project I will explain the setup and how to adapt for your requirements.
How to get started with Amazon Code Catalyst
Code Catalyst is a new Service to offer a unified software and development service to enable teams to easier develope and deploy their applications on AWS.
This tutorial and HowTo shows how to setup CodeCatalyst and create your first project.
AWS Code Whisperer
AWS Code Whisperer is an awesome tool to speed up your coding, therefor let's have a look on it. A HowTo and Quickstart for Code Whisperer
Using Git Submodules in CodePipeline
If you use Git Submodules in your Project you won't be able to use this in CodePipeline out of the box, meaning using the Source Step as for a simple Git Project. There are some additional steps required, this tutorial will show you how to proceed. Your Main Github Project will remain the Source of your Pipeline ( probably defined as Source Step in your Pipeline) For the Git Sub-Module you will have to add a CodeBuild Project and a Buildspec Yaml.
CodePipeline with CDK Python and generic Superclass
This tutorial will cover various topics about AWS Code Pipelines for deploying AWS Resources and Stacks to your accounts First, how should in general the account structure and setup look like to deploy with AWS codepipeline? Next, how should the CodePipeline be implemented in CDK (Python). See my example on github : Git Wolfgang Unger CDK Pipeline I will also cover here how to use object orientated features in your CDK Python Project to
CodePipeline - Pass variables from Source to other Stages
If you worked with CodePipeline, you might know you have normally various stages, like Source, Build, Test etc The Source Stage will checkout the Source Code needed for the other stages from Github or CodeCommmit The following stages could be a CodeBuild Project, could include Actions like ShellScripAction or other Actions Sometimes you might need some Git Infos in one of these actions or stages

IaC - Infrastructure as Code

IaC - infrastructure as Code
What is AWS CloudFormation? What is Terraform? If you want to create Resources on AWS not just for your first steps on AWS, but for live environments, you probably already know, you should use IaC to do so. Let's have a look on the alternatives in this blog. We will discuss CloudFormation, Terraform and the CDK. To see which one might be the best fit for your use case.
Terraform example structure
If you start to work with terraform will maybe ask yourself, how should you structure your terraform project? You can find various example repos and projects in the web, but not all will server for your use case. Indeed a found a lot of not really good sample projects, creating a lot of copy&paste files.
How to organize your CloudFormation Templates
You are using CloudFormation as IaC Tool but you have doubts how to organize your templates? How many Templates should you have, how should you group your resources, how define layers? What are Best Practices on this questions and for CloudFormation?
Pipeline for automatic CloudFormation Deployments
Do you need an automation to deploy your CloudFormation Templates to your AWS Account(s)? A Pipeline or a tool that will automatically create a CloudFormation Deployment Pipeline for each of your stacks ? Read this blog about my Github Project to setup such a Pipeline for your CloudFormation Templates
How to create your own pip modules for your generic, reusable cdk consrtucts
If you have worked with cdk for a while and also in several projects, you might have already asked yourself, how to reuse some of the code you have already written ( and tested) for a similar requirement in the next project. If you use an object oriented language like for example Python with the CDK, one option might be create reuse Superclasses and adapt the behaviour if needed in a project subclass.
API Gateway with CDK
Lets have a look how to create a API Gateway with CDK (Python) The first approach is using the RestApi Class and code the resources and methods. The second by using a Swagger/Open API file. Both APIs will use lambda integrations. We will also see how to use Authorizers with Cognito and Custom Lambda.
CDK - Overview on Stacks and Constructs
If you are working with CDK, especially starting to work with the CDK, you may have had some doubts on how to organize your IaC within CDK There are Stacks in the CDK, there are also Constructs, which you will create and then there are there is the Construct Library, which got 3 different kinds of Constructs L1, L2 and L3. This short Tutorial should give you an overview about how to deal with this.
Get started with the AWS CDK (Python)
In this short tutorial let's give a quick overview on how to get started with the CDK ( this example is for Python). For all of those who don't have yet big experience on this. How to setup our first cdk project and also some important links to find informations on the next steps. The first link you should know is the official AWS Documentation for the CDK
S3 Block public access VS Terraform/Cloudformation
Since April 2023, AWS has change the default configuration of new buckets to "Block public access", if you use a IAC tool like Terraform or Cloudformation, this can cause a lot of problems if you try to create new public buckets.

Architecture and the 5 pillars of the well architected Framework

5 common problems and errors on AWS & cloud accounts
Is your AWS account and architecture really setup correctly? Is it really secure, resilent and reliable? This blog will cover the most common issues which you normally find on AWS You can use this blog as a checklist and do a self review on your account and architecture
Cost optimization strategies | How to save money on AWS
How can I optimize costs on AWS? You want to save money on AWS, your AWS bill is too high? Take a look in this blog to understand approaches to avoid unnecessary expenses.
Security Best practices on AWS | How to secure your AWS Account
How can I secure my AWS resources? How can we ensure the security of our data and applications on AWS? As you might already know, AWS works with the shared responsibility model to secure your cloud resources. This means, AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud. But you are responsible for what runs inside the cloud.
What is Performance Efficiency?
You might already know it form the AWS Well-Architected Framework, the Performance Efficiency Pillar, but what does this really mean?. We will explain this in this blog. Understand the 5 principles and the 4 areas to focus on
What about Reliability?
What means Reliability from the 5 pillars of the Well architected Framework exactly? How do I scale my infrastructure on AWS? We will have a closer look in this blog on this question.
Multi Account Setup
How many accounts will you need to run your workloads in AWS? How to define your AWS Account Structure? This blog explains the principles and best practices of AWS Multi Account Setup and what to consider for organizing your overall AWS environment.
7 R's - the 7 cloud migration strategies
Lets have a look on the 7 R's, the 7 cloud migration strategies. If you plan to migrate your On Premise workloads to the cloud, it is essential to know the options and choose the best one for your use case. The 7 R's are: 1. Retire 2. Retain 3. Relocate 4. Rehost 5. Repurchase 6. Replatform 7. Refactor
Disaster Recovery (RTO/RPO)
RTO and RPO are normally associated with Disaster Recovery, and Business Continuity Plan, these RTO and RPO targets set the time frame that a business can support after a outage, as companies rely more in applications to keep support, sales and production running, this matter become a serious one, saving or costing companies reputation and money.

Computing

AWS Batch - A deep dive
Working with AWS Batch to run container in parallel is not quite simple. There are a bunch of configurations you must set up correct to launch the right instance types and amount of instances. This tutorial will try to clarify the imporant configurations and parameters you need to run batch as expected.
Copy a Lambda Function
If you worked with Lambda you might have been in a situation where you want to test your changes on a existing Lambda Function without changing the productive Lambda Version If you have only code to copy, you can just copy it to the code editor, ok. But if you have a Lambda Function with additional dependencies/packages it is little more effort.
Deploy a Elastic Beanstalk Application in 1 min
This short tutorial shows how to deploy a simple ElasticBeanstalk application ( and environment ) Install the EB commandline If you don't have the EB CLI yet installed, please take a look in this docu and install Install EB CLI Basically you have to execute pip install awsebcli --upgrade --user and add %USERPROFILE%\AppData\Roaming\Python\Python37\Scripts to you PATH variable ( on windows)
Session Manager
If you worked with AWS and EC2 for a while, you probably connected a lot with key pairs and ssh. For example 'ssh -i "mykeypair.pem" ec2-user@myIpAdress With this approach you need the keypair on your local machine and you need to allow traffic from you VPC where the instance is hosted to your local machine and of course you need to open the SecurityGroup of your instance to allow traffic to you local machine If you are not connected with DirectConnect or VPN this is already a security issue. You will have to open Port 22 for the internet or you have to adapt the public IP address of you local machine in the SecurityGroup

Storage

S3 Intelligent-Tiering
Since the 1990s, the cost of storage per MB has been decreasing very rapidly, and this assumption that we don't have to think about the cost of storage has permeated most developers minds for a while. But in the age of big data and cloud services, this issue has come back well, especially when we use pay-as-you-go services like S3, the next month's bill may remind us of a large amount of data that we forget to clean, or it is not being used.
S3 Block public access VS Terraform/Cloudformation
Since April 2023, AWS has change the default configuration of new buckets to "Block public access", if you use a IAC tool like Terraform or Cloudformation, this can cause a lot of problems if you try to create new public buckets.

Home


Haben sie Fragen zu AWS Themen?
Wir hoffen hier die Anwtorten zu liefern.

Was ist AWS?
Wieviel kostet AWS?
Wie funktioniert die AWS-Preisgestaltung?
Wie erstelle ich ein AWS-Konto?
Welche AWS-Dienste gibt es?
Wie starte ich eine EC2-Instanz in AWS?
Was ist Amazon S3?
Wie richte ich eine RDS-Datenbank in AWS ein?
Was ist AWS Lambda?
Wie funktioniert die Abrechnung bei AWS?
Wie kann ich meine AWS-Ressourcen sichern?
Was ist AWS IAM (Identity and Access Management)?
Wie deploye ich eine Webanwendung in AWS?
Wie kann ich meine Infrastruktur in AWS skalieren?
Was ist AWS CloudFormation?
Wie kann ich die Kosten in AWS optimieren?
Welche AWS-Zertifizierungen gibt es, und wie bereite ich mich darauf vor?
Was ist AWS Elastic Beanstalk?
Was ist AWS VPC (Virtual Private Cloud)?
Wie vergleicht sich AWS mit anderen Cloud-Anbietern wie Azure und Google Cloud?
Wie kann ich Probleme bei AWS beheben?
Wie kann AWS die Effizienz und Agilität unseres Unternehmens steigern?
Welche Kosten sind mit der Nutzung von AWS verbunden, und wie können wir sie effektiv verwalten?
Welche bewährten Methoden gibt es für das Management von AWS-Ressourcen und Kostenkontrolle?
Wie stellen wir die Sicherheit unserer Daten und Anwendungen auf AWS sicher?
Welche AWS-Dienste sind für die spezifischen Geschäftsanforderungen unseres Unternehmens relevant?
Wie entwickeln wir eine Cloud-Strategie und Roadmap unter Verwendung von AWS?
Was ist das AWS Well-Architected Framework, und wie setzen wir es in unseren Projekten ein?
Wie überwachen und optimieren wir die Leistung unserer Anwendungen auf AWS?
Was ist AWS Identity and Access Management (IAM), und wie richten wir den Benutzerzugriff ein und verwalten ihn?
Wie implementieren wir Notfallwiederherstellungs- und Hochverfügbarkeitslösungen auf AWS?
Was ist AWS-Compliance, und wie stellen wir die Einhaltung gesetzlicher Vorschriften für unsere Anwendungen sicher?
Was sind bewährte Methoden für die Datensicherung und -archivierung auf AWS?
Wie migrieren wir bestehende Anwendungen und Daten zu AWS?
Was ist der AWS Marketplace, und wie können wir ihn für Lösungen von Drittanbietern nutzen?
Wie verwalten und analysieren wir unsere AWS-Rechnungs- und Nutzungsberichte?
Was ist AWS CloudFormation, und wie kann sie uns bei der Automatisierung der Bereitstellung von Infrastruktur unterstützen?
Wie gehen wir mit Personalbesetzung und Schulung vor, um AWS-Expertise in unserem Team aufzubauen?
Welche AWS-Support- und Service-Level-Vereinbarungen (SLA) gibt es?
Wie können wir AWS-Managed Services und serverloses Computing nutzen?
Welche Fallstudien oder Erfolgsgeschichten bieten Einblicke, wie andere Unternehmen von AWS profitiert haben?

Autor

...

Wolfgang Unger

AWS Architect & Developer

6 x AWS Certified

1 x Azure Certified

A Cloud Guru Instructor

Certified Oracle JEE Architect

Certified Scrum Master

Certified Java Programmer

Passionate surfer & guitar player