For large enterprises already making use of AWS’s Service Catalog it would great to support a integration pattern with the Backstage Scaffolder Was thinking this could be very similar or even build...

AWS Control Tower Account Factory.

Lists all of the available service-specific resources, actions, and condition keys that can be used in IAM policies to control access to AWS Identity and Access Management (IAM).

Introduction This blog post is for customers who want to implement automated tagging controls and strategy for cost allocation. Customers want to centralize and maintain consistency for tags across AWS Organizations so they are available outside their AWS environment (e.g. in build scripts, etc.) or enforce centralized conditional tagging on existing and new AWS resources […]

Choose the right Google Compute Engine machine type available in Google Cloud Platform. Compare different families like N1 with N2.

The

Spotify is very much an engineering led company. It is also a product led company. Therefore when it decided it needed to get a better handle on its cloud spend, it decided to build an internal product designed to be used by its engineers. The result is Cost Insights, a plugin for Spotify’s Backstage developer

AI-powered Search and Chat for AWS Documentation

Compare how savings percentages are calculated when you use Savings Plans for different usage scenarios in AWS.

Out of 94 benchmarks ran across all tested 4xlarge Amazon EC2 instances, the Graviton3 instance had the most first place finishes at 43 wins to Intel Xeon at 35 and the EPYC Milan instance at 16. When taking the geometric mean of all 94 benchmark results, the Graviton3 c7g.4xlarge narrowly passed the Xeon Ice Lake c6i.4xlarge instance type followed by the EPYC Milan c6a.4xlarge.

Recently we have moved 8 accounts under a new organization. It was full of ups and downs; there was hope, there was recklessness, there was fear, happiness, adrenaline rush, and feel of failure. It all started as the same old story: with a spark of an idea, maybe a blogpost, maybe a podcast session, or a solution engineer mentioning it every email. Why did we do it? The new hype, a.

How much does it cost to move a terabyte of data in AWS? Who the hell knows. We tried though, and created a diagram to illustrate it.

This detailed tutorial answers the question of how to leverage Amazon's AWS Fargate container technology for GitLab Runners.

In a SaaS environment, the compute, storage, and bandwidth resources are often shared among tenants, but this makes it challenging to deduce per tenant cost. A SaaS application running on a Kubernetes cluster on AWS adds a layer of further complexity as far as calculating the per tenant cost. Kubernetes is great at abstracting away the underlying pool of hardware. It almost gives us an illusion of having access to a single large compute resource.

Review pricing information for Vertex AI

Provision a Kubernetes Cluster in AWS. Configure the AWS CLI to provide IAM credentials to Terraform, clone an example repository, and deploy the cluster. Configure kubectl and the Kubernetes dashboard. Finally destroy the cluster.

Create a variable set for your AWS IAM credentials that you can reuse across workspaces. Apply the variable set to a workspace.

Working with Terraform on a daily basis and using Neovim as my main and only editor, I recently figured out a few improvements, which I’ll share in this blog post.

Secrets managers are a great tool to securely store your secrets and provide access to secret material to a set of individuals, applications, or systems that you trust. Across your environments, you might have multiple secrets managers hosted on different providers, which can increase the complexity of maintaining a consistent operating model for your secrets. […]

To meet user demand, dynamic HTTP-based applications require constant scaling of Kubernetes pods. For applications exposed through Kubernetes ingress objects, the AWS Application Load Balancer (ALB) distributes incoming traffic automatically across the newly scaled replicas. When Kubernetes applications scale down due to a decline in demand, certain situations will result in brief interruptions for end […]

This repository provides a command line interface (CLI) utility that replicates an Amazon Managed Workflows for Apache Airflow (MWAA) environment locally. - aws/aws-mwaa-local-runner: This reposito...

Learn about how to use Amazon Managed Workflows for Apache Airflow (MWAA) to create environments that let you easily configure, deploy, and manage your Apache Airflow workflows.

“However beautiful the strategy, you should occasionally look at the results.” —Winston Churchill “Tell me and I forget. Teach me and I remember. Involve me and I learn.” —Benjamin Franklin Many modern enterprises are a maelstrom of emotions, facts, opinions, and in many cases, outright competition both inside and outside of the organization. The bigger […]

Firecracker is a microVM manager in Rust that powers AWS services like Lambda and Fargate. It's also one of the key components of Grapl's multi-tenant isolation. A critical dependency deserves some red teaming - here's how we attacked AWS Firecracker.

A CLI tool and go library which recommends instance types based on resource criteria like vcpus and memory - aws/amazon-ec2-instance-selector: A CLI tool and go library which recommends instance ty...

Catalog, Codify, and Control your Entire Infrastructure to Prevent Service Failures, Replace Toil with Automation and Rediscover your Cloud

This team of AWS employees are pushing the limits of what it means to design and build computer hardware to help customers work faster, more securely, and more sustainably—at lower cost.