Serverless Cost Containment

Serverless soultions is can be incredibly cheap due to their event-based nature - if your system isn't working, you pay barely anything for it. But if you're not careful, serverless can still result in some nasty surprises when it comes to costs.

Everything you need to know about CloudFormation Drift Detection

Announced this week, CloudFormation Drift Detection [https://aws.amazon.com/blogs/aws/new-cloudformation-drift-detection/] has been a long time coming! That being said, it's great when features like this are added to the platform and I get to use

Understand your Lambda Event Retries

Understanding the differences between the various event types and their retries is important, because it will change how you design and code your application. If you're developing a serverless application in Lambda, you will have to deal with

Secure your CloudFront Distributions

UPDATE: AWS announced over the weekend [https://aws.amazon.com/blogs/security/enhanced-domain-protections-for-amazon-cloudfront-requests/] that they're enhancing protections against this kind of scenario. A few weeks ago a security researcher shared [https://disloops.com/cloudfront-hijacking/] it was possible to

Federated CodeCommit Access

CodeCommit access via federated credentials is the way to go. You're not using long-lived Access Keys are you? Bad engineer! Stop that! For better or worse, federated IAM access requires you to use the HTTPS endpoint with a

Serverless Operations Presentation

Last week I presented to the Sydney AWS Lambda User Group [https://www.meetup.com/Sydney-AWS-Lambda-User-Group/events/245247306/] about serverless operations aka. LessOps. Here are the slides I used to talk about the good - and less good - things