ALBs with EC2 instances
<!doctype html> AWS ALB to Protect Instances with Public IPs (Elaborated) If your EC2 instances have public IPs, an AWS Application Load Balancer (ALB) can help — but the…
Shared VPCs for Production and Non Production Assets
Overview A Shared VPC lets one AWS account (the Host) own a VPC and subnets and share those subnets with other AWS accounts (the Participants). This pattern centralizes networking while…
DNS Isolation on AWS
DNS Isolation on AWS: Route 53 Resolver, DNS Firewall & Private DNS dns isolation aws DNS Isolation on AWS DNS isolation on AWS refers to designing your Amazon Web Services…
How to tell whether an endpoint is public facing?
Interpreting a JSON 404 Response Context: you received a JSON response with status: 404 detail: "no static resource /api/v2/users/myapp" Quick answer This does not prove the API endpoint is…
Control Tower Integrated SSO and Permission Sets
AWS Permission Sets vs Control Tower SSO: What's the Difference? AWS Permission Sets vs Control Tower SSO 1. AWS Control Tower SSO Purpose: Provides a managed way to centrally set…
Backup Policies for Servers migrated to AWS
Backup Policy for Windows Servers on AWS Policy ID: IT-BACKUP-001 Version: Effective Date: Owner: IT Operations / Cloud Infrastructure Team 1. Purpose This policy defines standardized procedures for backing…
Aurora Postgres versus RDS Postgres
Migrate SQL Server to AWS Aurora PostgreSQL Using DMS and Schema Conversion Phase 1 — Assessment & Planning Choose target engine Aurora PostgreSQL (recommended for PostgreSQL features & ecosystem). Aurora…
Tableau – No Authentication Visualizations
Tableau – Publishing Without Authentication Can Tableau Publish Content Without Authentication? Yes — Tableau can publish content that does not require authentication, but only under specific configurations. 1. Tableau Public…
AWS Resource Tag Recommendations
AWS Resource Tagging Strategy: Best Practices for Governance, FinOps & Security Recommended AWS Resource Tagging Strategy This document provides a comprehensive tagging framework for AWS EC2 and other…
Security of Signed URLs (for S3 content)
Security of AWS Pre-Signed URLs Are AWS Pre-Signed URLs Safe? Yes—if used correctly. A pre-signed URL is a time-limited, object-scoped URL that grants access to a specific S3 operation (GET/PUT)…