Identities are sorted - an IAM user (Part-1), accounts (Part-2) and roles (Part-3). Time to run something. Amazon EC2 (Elastic Compute Cloud) is the virtual server service, and in this Part-4 we launch one from the console, connect to it, and understand every choice on the launch page so that nothing on the bill …

Before the full VPC build in Part-5 of the AWS series - which takes an hour and creates fifteen resources - here is the five-minute version that the short video above gives you in 27 seconds: what a VPC is, what a subnet is, and the handful of words around them. If you can explain this page to a colleague, the rest of …

Most of this blog uses Terraform to build AWS infrastructure, so people ask me regularly - do I still need to know CloudFormation? The answer is yes, for three reasons - it is the native infrastructure-as-code service of AWS and shows up everywhere (Control Tower, Service Catalog, SAM, CDK, the "Launch …

Every network tutorial on this blog - the AWS VPC, VPC peering, Transit Gateway, Cloud WAN, the GCP VPC posts, even the Kubernetes setup - starts with something like 10.0.0.0/16. If that slash-sixteen has always been a thing you copy rather than a thing you understand, this post fixes it in ten minutes. CIDR - …

Your laptop has the address 192.168.1.10. So does your neighbour's. So do roughly a hundred million other laptops in the world right now - and yet every one of them can open this page. The trick that makes that possible is NAT, network address translation, and it is also the trick behind the AWS NAT Gateway that lets …

If you prefer to watch, the whole guide is also a video - In this article we are going to look at Amazon API Gateway - the AWS service that acts as the "front door" for your backend, whether that backend is a Lambda function, a container on ECS/Fargate, an EC2 instance or another AWS service. If you have …

Amazon S3 (Simple Storage Service) was the second AWS service ever launched, back in 2006, and it is still the one you will touch in almost every AWS project - for backups, logs, build artifacts, static websites, data lakes, Terraform state files and the images on this very blog. It is object storage - you put files …

1. Introduction Security in the cloud is not just an option; it's an imperative. Much like a well-guarded fortress, your cloud infrastructure needs robust, scalable defenses. AWS provides us with a wealth of tools and best practices for this task, but managing them manually can feel like trying to organize an unruly …

Navigating the intricacies of Amazon Web Services (AWS) can be a complex task. Even seasoned developers working with Infrastructure as Code (IaC) tools like Terraform and CloudFormation may occasionally face frustrating obstacles. A common stumbling block arises from conflicts in Virtual Private Cloud (VPC) settings, …

This blog post is going to be a comprehensive guide on managing AWS IAM Users, IAM Roles and IAM Policies using Terraform. Managing IAM Users, Roles and Policies is always crucial from a security perspective. Proper management of the IAM User, IAM Roles and IAM Policies can really reduce the operational burden as well …