ALBs with EC2 instances
<!doctype html> AWS ALB to Protect Instances with Public IPs (Elaborated) If your EC2 instances have public IPs, an AWS Application Load Balancer (ALB) can help — but the…
Shared VPCs for Production and Non Production Assets
Overview A Shared VPC lets one AWS account (the Host) own a VPC and subnets and share those subnets with other AWS accounts (the Participants). This pattern centralizes networking while…
DNS Isolation on AWS
dns isolation aws DNS Isolation on AWS DNS isolation on AWS refers to designing your Amazon Web Services environment so that certain workloads or networks can only resolve DNS names…
How to tell whether an endpoint is public facing?
Interpreting a JSON 404 Response Context: you received a JSON response with status: 404 detail: "no static resource /api/v2/users/myapp" Quick answer This does not prove the API endpoint is…
Control Tower Integrated SSO and Permission Sets
AWS Permission Sets vs Control Tower SSO AWS Permission Sets vs Control Tower SSO 1. AWS Control Tower SSO Purpose: Provides a managed way to centrally set up and govern…
Backup Policies for Servers migrated to AWS
Backup Policy for Windows Servers on AWS Policy ID: IT-BACKUP-001 Version: Effective Date: Owner: IT Operations / Cloud Infrastructure Team 1. Purpose This policy defines standardized procedures for backing…
Aurora Postgres versus RDS Postgres
Phase 1 — Assessment & Planning Choose target engine Aurora PostgreSQL (recommended for PostgreSQL features & ecosystem). Aurora MySQL if your app is already MySQL-based. Inventory & compatibility assessment Catalog…
Tableau – No Authentication Visualizations
Tableau – Publishing Without Authentication Can Tableau Publish Content Without Authentication? Yes — Tableau can publish content that does not require authentication, but only under specific configurations. 1. Tableau Public…
AWS Resource Tag Recommendations
Recommended AWS Resource Tagging Strategy Recommended AWS Resource Tagging Strategy This document provides a comprehensive tagging framework for AWS EC2 and other AWS resources, including S3, RDS, Lambda, and networking…
Security of Signed URLs (for S3 content)
Security of AWS Pre-Signed URLs Are AWS Pre-Signed URLs Safe? Yes—if used correctly. A pre-signed URL is a time-limited, object-scoped URL that grants access to a specific S3 operation (GET/PUT)…