Archives for AWS - Page 4
Backup and Recovery AWS, Azure or GCP
Backup and recovery conversations often get derailed. While everyone understands RTO and RPO, it is hard to apply these metrics in a granular fashion. To that end, it is better…
ADFS and SSO Federated Users in AWS
(Also see - Functional Roles and AWS managed policies) Permissions Set and SSO Groups SSO Groups are created within AWS IAM (they come directly from the IdP). The actual permissions…
AWS Managed Policies for work functions
Keep in mind that anything with 'Admin' in it allows creation of other users as well as attaching / detaching policies to users. Anything with 'user' in it, has no…
AWS Custom Groups and (Managed) Policies Needed
This is meant to be a quick recap of some recommended custom AWS Groups and the included Managed Policies. A Network Admin Group AWS managed policy name: NetworkAdministrator A Security Auditor…
Oracle on AWS RDS
These are some field tips for migrating Oracle databases to AWS RDS (or custom EC2 instances). Tuning, Monitoring, Pricing, Backup tips are included. Often, a reference to the appropriate AWS…
KMS Basics AWS (or GCP)
This content is password protected. To view it please enter your password below: Password:
Secrets Manager and KMS in AWS
To protect secrets, Secrets Manager uses envelope encryption with AWS KMS customer master keys (CMKs) and data keys. Secrets Manager uses a unique data key to protect each secret value. Whenever the secret value in…
Restricted EC2 Access Policies in AWS
Often, in an effort to speed up development, AWS admins will grant broader access to services than is needed. As an example, to enable developers to quickly spin instances up,…
S3 Request Metrics, Cloudwatch Alarms
Overview It is useful to get notifications (dashboard alarms and email notifications) when S3 uploads fail (request metric). Or when your bucket exceeds a certain size (Storage metric). The S3…
Policies on AWS vs GCP
Also read Programmatic Identities on Google Cloud vs AWS Policies in AWS A policy definition by itself, contains very little in AWS. It contains what type of resources (NOT the…