AWS Control Tower Account Factory.

Lists all of the available service-specific resources, actions, and condition keys that can be used in IAM policies to control access to AWS Identity and Access Management (IAM).

Introduction This blog post is for customers who want to implement automated tagging controls and strategy for cost allocation. Customers want to centralize and maintain consistency for tags across AWS Organizations so they are available outside their AWS environment (e.g. in build scripts, etc.) or enforce centralized conditional tagging on existing and new AWS resources […]

The

Spotify is very much an engineering led company. It is also a product led company. Therefore when it decided it needed to get a better handle on its cloud spend, it decided to build an internal product designed to be used by its engineers. The result is Cost Insights, a plugin for Spotify’s Backstage developer

AI-powered Search and Chat for AWS Documentation

Compare how savings percentages are calculated when you use Savings Plans for different usage scenarios in AWS.

Out of 94 benchmarks ran across all tested 4xlarge Amazon EC2 instances, the Graviton3 instance had the most first place finishes at 43 wins to Intel Xeon at 35 and the EPYC Milan instance at 16. When taking the geometric mean of all 94 benchmark results, the Graviton3 c7g.4xlarge narrowly passed the Xeon Ice Lake c6i.4xlarge instance type followed by the EPYC Milan c6a.4xlarge.

Recently we have moved 8 accounts under a new organization. It was full of ups and downs; there was hope, there was recklessness, there was fear, happiness, adrenaline rush, and feel of failure. It all started as the same old story: with a spark of an idea, maybe a blogpost, maybe a podcast session, or a solution engineer mentioning it every email. Why did we do it? The new hype, a.

How much does it cost to move a terabyte of data in AWS? Who the hell knows. We tried though, and created a diagram to illustrate it.

Create a variable set for your AWS IAM credentials that you can reuse across workspaces. Apply the variable set to a workspace.

Secrets managers are a great tool to securely store your secrets and provide access to secret material to a set of individuals, applications, or systems that you trust. Across your environments, you might have multiple secrets managers hosted on different providers, which can increase the complexity of maintaining a consistent operating model for your secrets. […]

This repository provides a command line interface (CLI) utility that replicates an Amazon Managed Workflows for Apache Airflow (MWAA) environment locally. - aws/aws-mwaa-local-runner: This reposito...

Learn about how to use Amazon Managed Workflows for Apache Airflow (MWAA) to create environments that let you easily configure, deploy, and manage your Apache Airflow workflows.

“However beautiful the strategy, you should occasionally look at the results.” —Winston Churchill “Tell me and I forget. Teach me and I remember. Involve me and I learn.” —Benjamin Franklin Many modern enterprises are a maelstrom of emotions, facts, opinions, and in many cases, outright competition both inside and outside of the organization. The bigger […]

Firecracker is a microVM manager in Rust that powers AWS services like Lambda and Fargate. It's also one of the key components of Grapl's multi-tenant isolation. A critical dependency deserves some red teaming - here's how we attacked AWS Firecracker.

A CLI tool and go library which recommends instance types based on resource criteria like vcpus and memory - aws/amazon-ec2-instance-selector: A CLI tool and go library which recommends instance ty...

This team of AWS employees are pushing the limits of what it means to design and build computer hardware to help customers work faster, more securely, and more sustainably—at lower cost.

Campaign landing page Graviton Fast Start evergreen developer campaign

This paper seeks to empower you to maximize value from your investments, improve forecasting accuracy and cost predictability, create a culture of ownership and cost transparency, and continuously measure your optimization status.

Introduction Many organizations as part of their cloud journey into Amazon Web Services migrate and modernize their ETL (extract-transform-load) batch processing workloads running on on-premises Hadoop clusters to AWS. They often start their journey with the lift and shift approach, by hosting their Hadoop environment on Amazon Elastic Compute Cloud (Amazon EC2) or migrate to […]

AWS App Runner is one of the simplest ways to run your containerized web applications and APIs on AWS. App Runner abstracts away the cloud resources needed for running your web application or API, including load balancers, TLS certificates, auto-scaling, logs, metrics, tracing (such as observability), as well as the underlying compute resources. With App Runner, […]

Understanding the cost of your containerized workloads

History of Amazon Web Services

Packer configuration for building a custom EKS AMI - awslabs/amazon-eks-ami

Spot Instance advisor helps you determine pools with the least chance of interruption and provides the savings you get over On-Demand rates. You should weigh your application’s tolerance for interruption and your cost saving goals when selecting a Spot instance. The lower your interruption rate, the longer your Spot instances are likely to run.

While AWS manages security of the cloud, security in the cloud is the responsibility of the customer. Learn more about the Shared Responsibility Model.