The CloudFormation Layer Cake
So I've had the idea of this post for a while. Like "3 years ago" a while: CFN Layer Cake FTW!I first came across...
So I've had the idea of this post for a while. Like "3 years ago" a while: CFN Layer Cake FTW!I first came across...
AWS documentation letting you down? Never fear, GitHub can help with that! Find CloudFormation examples quickly and easily....
TL;DR I made Effective IAM Actions [https://bigorange.cloud/actions/], a small tool to expand wildcards "*"in IAM Policy Actions [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_action.html] so that you can see explicitly what permissions are granted by a policy. It supports multiple statements in each policy, Allow...
The main problem is this: By using tags for authorisation, you have a multitude of completely new - per-service - actions that can be used to compromise your security posture....
Recently I've been working with Step Functions in my day-to-day work, as well as in my personal projects, and I decided to write this post as a way of articulating the ins-and-outs of Step Functions I've learnt while using them. It helps that a few [https://aws.amazon.com/about-aws/whats-new/2019/05/aws-step-functions-support-callback-patterns/] new...
Serverless soultions is can be incredibly cheap due to their event-based nature - if your system isn't working, you pay barely anything for it. But if you're not careful, serverless can still result in some nasty surprises when it comes to costs....