AWS Control Tower Account Factory.

Lists all of the available service-specific resources, actions, and condition keys that can be used in IAM policies to control access to AWS Identity and Access Management (IAM).

Introduction This blog post is for customers who want to implement automated tagging controls and strategy for cost allocation. Customers want to centralize and maintain consistency for tags across AWS Organizations so they are available outside their AWS environment (e.g. in build scripts, etc.) or enforce centralized conditional tagging on existing and new AWS resources […]

The

Spotify is very much an engineering led company. It is also a product led company. Therefore when it decided it needed to get a better handle on its cloud spend, it decided to build an internal product designed to be used by its engineers. The result is Cost Insights, a plugin for Spotify’s Backstage developer

AI-powered Search and Chat for AWS Documentation

Compare how savings percentages are calculated when you use Savings Plans for different usage scenarios in AWS.

Out of 94 benchmarks ran across all tested 4xlarge Amazon EC2 instances, the Graviton3 instance had the most first place finishes at 43 wins to Intel Xeon at 35 and the EPYC Milan instance at 16. When taking the geometric mean of all 94 benchmark results, the Graviton3 c7g.4xlarge narrowly passed the Xeon Ice Lake c6i.4xlarge instance type followed by the EPYC Milan c6a.4xlarge.

Recently we have moved 8 accounts under a new organization. It was full of ups and downs; there was hope, there was recklessness, there was fear, happiness, adrenaline rush, and feel of failure. It all started as the same old story: with a spark of an idea, maybe a blogpost, maybe a podcast session, or a solution engineer mentioning it every email. Why did we do it? The new hype, a.

How much does it cost to move a terabyte of data in AWS? Who the hell knows. We tried though, and created a diagram to illustrate it.

In a SaaS environment, the compute, storage, and bandwidth resources are often shared among tenants, but this makes it challenging to deduce per tenant cost. A SaaS application running on a Kubernetes cluster on AWS adds a layer of further complexity as far as calculating the per tenant cost. Kubernetes is great at abstracting away the underlying pool of hardware. It almost gives us an illusion of having access to a single large compute resource.

Provision a Kubernetes Cluster in AWS. Configure the AWS CLI to provide IAM credentials to Terraform, clone an example repository, and deploy the cluster. Configure kubectl and the Kubernetes dashboard. Finally destroy the cluster.

Create a variable set for your AWS IAM credentials that you can reuse across workspaces. Apply the variable set to a workspace.

Secrets managers are a great tool to securely store your secrets and provide access to secret material to a set of individuals, applications, or systems that you trust. Across your environments, you might have multiple secrets managers hosted on different providers, which can increase the complexity of maintaining a consistent operating model for your secrets. […]

To meet user demand, dynamic HTTP-based applications require constant scaling of Kubernetes pods. For applications exposed through Kubernetes ingress objects, the AWS Application Load Balancer (ALB) distributes incoming traffic automatically across the newly scaled replicas. When Kubernetes applications scale down due to a decline in demand, certain situations will result in brief interruptions for end […]

This repository provides a command line interface (CLI) utility that replicates an Amazon Managed Workflows for Apache Airflow (MWAA) environment locally. - aws/aws-mwaa-local-runner: This reposito...

Learn about how to use Amazon Managed Workflows for Apache Airflow (MWAA) to create environments that let you easily configure, deploy, and manage your Apache Airflow workflows.

“However beautiful the strategy, you should occasionally look at the results.” —Winston Churchill “Tell me and I forget. Teach me and I remember. Involve me and I learn.” —Benjamin Franklin Many modern enterprises are a maelstrom of emotions, facts, opinions, and in many cases, outright competition both inside and outside of the organization. The bigger […]

Firecracker is a microVM manager in Rust that powers AWS services like Lambda and Fargate. It's also one of the key components of Grapl's multi-tenant isolation. A critical dependency deserves some red teaming - here's how we attacked AWS Firecracker.

A CLI tool and go library which recommends instance types based on resource criteria like vcpus and memory - aws/amazon-ec2-instance-selector: A CLI tool and go library which recommends instance ty...

This team of AWS employees are pushing the limits of what it means to design and build computer hardware to help customers work faster, more securely, and more sustainably—at lower cost.

Campaign landing page Graviton Fast Start evergreen developer campaign

This paper seeks to empower you to maximize value from your investments, improve forecasting accuracy and cost predictability, create a culture of ownership and cost transparency, and continuously measure your optimization status.

Introduction Many organizations as part of their cloud journey into Amazon Web Services migrate and modernize their ETL (extract-transform-load) batch processing workloads running on on-premises Hadoop clusters to AWS. They often start their journey with the lift and shift approach, by hosting their Hadoop environment on Amazon Elastic Compute Cloud (Amazon EC2) or migrate to […]

AWS App Runner is one of the simplest ways to run your containerized web applications and APIs on AWS. App Runner abstracts away the cloud resources needed for running your web application or API, including load balancers, TLS certificates, auto-scaling, logs, metrics, tracing (such as observability), as well as the underlying compute resources. With App Runner, […]

Understanding the cost of your containerized workloads

Overview Data transfer costs can play a significant role in determining the overall design of a system. Amazon Elastic Container Registry (Amazon ECR), Amazon Elastic Container Service (Amazon ECS), and Amazon Elastic Kubernetes Service (Amazon EKS) can incur data transfer charges depending on a variety of factors. It can be difficult to visualize what that means […]

History of Amazon Web Services