AWS Notes
Open in Telegram
AWS Notes — Amazon Web Services Educational and Information Channel Chat: https://t.me/aws_notes_chat Contacts: @apple_rom, https://www.linkedin.com/in/roman-siewko/ No ads.
Show more5 826
Subscribers
+124 hours
+57 days
+730 days
Posts Archive
5 826
HardenEKS allows you to make sure that EKS cluster provides EKS Best Practices:
https://github.com/aws-samples/hardeneks
python3 -m venv /tmp/.venv
source /tmp/.venv/bin/activate
pip install hardeneks
hardeneks
#EKS5 826
Repost from AWS Weekly
Issue #49 | 5 December – 11 December, 2022
▪️ Billing Conductor Global Free Tier Pricing Rules
▪️ Braket adjoint gradient computation, runtime improvements, cost savings
▪️ CloudFormation Hooks wildcard config
▪️ CloudShell is now System and Organization Controls (SOC) compliant
▪️ Config drift detection in Config Recorder
▪️ Contact Lens manage rules with Connect APIs
▪️ Cost Anomaly Detection alerts include account name
▪️ Cost Management refresh Savings Plans
▪️ EC2 Auto Scaling Metric Math for Target Tracking Policies
▪️ ECS Service Connect Fargate on Graviton support
▪️ FSx for NetApp ONTAP
▫️ extends NVMe read cache support to Single-AZ file systems
▫️ new ease-of-use features
▫️ Nitro-based encryption of data in transit
▫️ receives DoD Impact Level 4 and 5 authorization
▪️ Glue sensitive data detection is available in 18 additional Regions
▪️ IAM Identity Center FedRAMP High authorization in GovCloud
▪️ IoT Device Defender Audit potential misconfiguration in IoT Policies
▪️ IoT TwinMaker asset synchronization with IoT SiteWise
▪️ Kinesis Data Firehose now delivers to Logz.io
▪️ Lex Arabic, Cantonese, Norwegian, Swedish, Polish, and Finnish
▪️ Location Service is now HITRUST CSF certified
▪️ Managed Grafana CloudFormation support
▪️ NoSQL Workbench DDB
▫️ creating data models directly from sample data model templates
▫️ DynamoDB Local
▪️ QuickSight billion-row dataset with SPICE
▪️ RDS Proxy Aurora Global Database primary and secondary regions
▪️ SageMaker Data Wrangler EMR Presto as a big data query engine
▪️ SageMaker Feature Store Apache Iceberg table format
▪️ SageMaker Model Training support for ml.p4de instances |
Preview
▪️ SageMaker Studio Fine-grained DAC with Lake Formation/EMR
▪️ Security Hub Control Tower integration
▪️ Systems Manager change request CloudTrail events
▪️ Transcribe Custom Language Models for German/Japanese5 826
What is the maximum number of IP addresses that an Amazon VPC can have?
5 826
Repost from DevOps&SRE Library
Key metrics for AWS monitoring
https://sidhurana.medium.com/key-metrics-for-aws-monitoring-1a7bea663f01
5 826
🆕 AWS Stash: 🎉
https://awsstash.com/
🔍 Content from:
✅ A Cloud Guru
✅ AWS Blog
✅ AWS Skill Builder
✅ AWS Slides
✅ AWS Solutions
✅ AWS Tech Talk
✅ AWS Whitepapers
✅ GitHub
✅ Launch Announcement
✅ Podcast
✅ Prescriptive Guidance
✅ Reddit
✅ Twitch
✅ YouTube
🔎 Search, Filter, Sort by:
☑
Year
☑ Event
☑ Series
☑ Level
#Stash5 826
⛅ AWS re:Invent 2022 - Advanced VPC design and new Amazon VPC capabilities:
https://www.youtube.com/watch?v=cbUNbK8ZdA0
The main video from each re:Invent — and so every year. 😀
1:26 From the beginning
4:33 IPv6 (2021 releases)
7:20 ENA Express 💥 New
9:54 Network Address Usage
13:08 VPC Peering
14:07 Transit Gateway
19:22 Cloud WAN (2021)
25:15 Application networking
27:27 VPC Lattice 💥 New
37:00 Network Operations
37:39 Network Manager
38:29 Infrastructure Performance
40:23 CloudWatch Internet Monitor 💥 New
44:03 AWS Verified Access (AVA) 💥 New
#VPC #Lattice #CloudWatchInternetMonitor #AVA #reInvent5 826
⛅ AWS re:Invent 2022 - Advanced VPC design and new Amazon VPC capabilities:
https://www.youtube.com/watch?v=cbUNbK8ZdA0
The main video from each re:Invent — and so every year. 😀
1:26 From the beginning
4:33 IPv6 (2021 releases)
7:20 ENA Express 💥 New
9:54 Network Address Usage
13:08 VPC Peering
14:07 Transit Gateway
19:22 Cloud WAN (2021)
25:15 Application networking
27:27 VPC Lattice 💥 New
37:00 Network Operations
37:39 Network Manager
38:29 Infrastructure Performance
40:23 CloudWatch Internet Monitor 💥 New
44:03 AWS Verified Access (AVA) 💥 New
#VPC #Lattice #CloudWatchInternetMonitor #AVA #reInvent5 826
Graviton3E & Nitro v5:
https://www.nextplatform.com/2022/12/02/aws-tunes-up-compute-and-network-for-hpc/
#graviton #nitro
5 826
Repost from AWS Weekly
Issue #48 | 28 Nov - 04 Dec, re:Invent 2022 | Part #3
▪️ Redshift
▫️ auto-copy from Amazon S3
▫️ centralized access control with Lake formation |
Preview
▫️ Dynamic Data Masking | Preview
▫️ EMR integration for Apache Spark
▫️ Informatica Data Loader integration
▫️ integration for Apache Spark
▫️ RA3 clusters Multi-AZ | Preview
▫️ real-time streaming ingestion for KDS and MSK | GA
▫️ speed up data warehouse migrations | Preview
▪️ Route 53 Application Recovery Controller zonal shift
▪️ S3 Access Points cross-account access permission delegation
▪️ S3 Multi-Region Access Points failover controls enable active-passive configurations and customer-initiated failovers
▪️ SageMaker Autopilot automate MLOps workflows with SageMaker Pipelines
▪️ SageMaker Data Wrangler
▫️ built-in data preparation in notebooks
▫️ now supports over 40 third-party applications as data sources
▫️ real-time and batch inference and additional configs to processing jobs
▪️ SageMaker
▫️ geospatial ML | Preview
▫️ new ML governance tools
▫️ shadow testing
▪️ SageMaker JumpStart share ML artifacts within your organization
▪️ SageMaker Studio
▫️ automatic conversion of notebook code to production-ready jobs
▫️ real time collaboration
▫️ UI redesign
▪️ Security Lake new service | Preview
▪️ SimSpace Weaver new service | Preview
▪️ Step Functions large-scale parallel workflows
▪️ Supply Chain new service | Preview
▪️ Textract Analyze Lending
▪️ Transcribe real-time Call Analytics API
▪️ Verified Access new service | Preview
▪️ VPC Lattice new service | Preview
▪️ VPC Reachability Analyzer cross-account network reachability analysis
▪️ Wickr general availability5 826
Repost from AWS Weekly
Issue #48 | 28 Nov - 04 Dec, re:Invent 2022 | Part #2
▪️ EFS
▫️ 1-Day Lifecycle Management Policy
▫️ Elastic Throughput
▫️ up to 60% read / 40% write lower latencies
▪️ Elastic Disaster Recovery cross-Region and cross-Availability Zone failback
▪️ Elastic Load Balancing new application availability
▪️ EventBridge Pipes point-to-point integration |
GA
▪️ Firewall Manager FortiGate Cloud-Native Firewall
▪️ FSx for NetApp ONTAP simplifies access to Multi-AZ FS from on-premises and peered networks
▪️ FSx for NetApp ONTAP x2 maximum throughput capacity and SSD IOP/fs
▪️ FSx for OpenZFS new gen
▪️ GameLift customer-managed compute with GameLift Anywhere
▪️ Glue
▫️ custom visual transforms
▫️ Data Lake Frameworks (Apache Hudi, Apache Iceberg, Delta Lake)
▫️ Ray new engine for Glue Preview
▫️ Glue Data Quality | Preview
▫️ Glue v4.0 with Spark 3.3.0 and Python 3.10
▪️ GuardDuty RDS Protection | Preview
▪️ IoT Core new Device Location feature
▪️ IoT Device Management Jobs scheduling configuration
▪️ IoT MQTT5 General Availability
▪️ Kendra
▫️ expanded language support for semantic search
▫️ HTML documents tabular search
▪️ Kinesis Data Firehose data stream delivery to OpenSearch Serverless
▪️ KMS launches External Key Store
▪️ Lambda
▫️ Amazon Inspector support
▫️ SnapStart for Java functions
▪️ Local Zones Buenos Aires, Copenhagen, Helsinki, and Muscat | GA
▪️ Macie automated sensitive data discovery
▪️ Marketplace for containers direct deployment to EKS clusters
▪️ Network Manager Global Network real-time performance monitoring
▪️ Nitro Enclaves EKS and Kubernetes
▪️ Omics new service | GA
▪️ OpenSearch Serverless | Preview
▪️ Organizations delegated administrator
▪️ Outposts is now available in Qatar, Guatemala, and Trinidad & Tobago
▪️ Partners
▫️ Glue Delivery
▫️ Graviton Delivery
▫️ MSK Delivery Managed Streaming
▫️ SageMaker Ready Software Products
▪️ QuickSight
▫️ Expanded API capabilities | GA
▫️ Paginated Reports
▪️ QuickSight Q
▫️ automated data preparation
▫️ new "Why" and "forecast" questions
▪️ RDS
▫️ Aurora PostgreSQL Trusted Language Extensions
▫️ Blue/Green Deployments
▫️ Optimized Reads up to 50% faster queries on RDS for MySQL
▫️ Optimized Writes up to 2x higher write throughput at no additional cost