Enforcing encryption standards on S3-objects

Thumbnail
Encrypting objects at rest is a best practice when working with S3. Enforcing this with policies is not as trivial as you may think. There are subtle issues with default encryption, which may result in compliance risks. We’re going to investigate these issues and show you how to solve them.
Read more →
Encrypting objects at rest is a best practice when working with S3. Enforcing this with policies is not as trivial as you may think. There are subtle issues with default encryption, which may result in compliance risks. We’re going to investigate these issues and show you how to solve them.
Read more →

Deployment Issues with Cross Stack Dependencies and the CDK

Thumbnail
In this blog post I explain to you how to handle a particular class of errors with cross stack dependencies in the CLoud Development Kit.
Read more →
In this blog post I explain to you how to handle a particular class of errors with cross stack dependencies in the CLoud Development Kit.
Read more →

CDK Speedster - fast Lambda deployment

Thumbnail

CDK is great for serverless architectures. But the deploy times even for small lambda functions is to slow.

Here is a little trick which can speed up things a lot. A small caveat: It is cheating.

Read more →

CDK is great for serverless architectures. But the deploy times even for small lambda functions is to slow.

Here is a little trick which can speed up things a lot. A small caveat: It is cheating.

Read more →

The CDK pipeline construct

Thumbnail

Generation of Infrastructure-as-Code is fun. To be the real DevOps hero, you should build a complete CI-CD pipeline. But this is a piece of work. And if you want to deploy to multiple accounts, it gets tricky. With the new CDK, builtin pipeline Construct, it’s easy - if you solve a few problems. Here is a complete walk-through.

Read more →

Generation of Infrastructure-as-Code is fun. To be the real DevOps hero, you should build a complete CI-CD pipeline. But this is a piece of work. And if you want to deploy to multiple accounts, it gets tricky. With the new CDK, builtin pipeline Construct, it’s easy - if you solve a few problems. Here is a complete walk-through.

Read more →

Bridging the terraform - CloudFormation gap

Thumbnail

CloudFormation does not cover all AWS Resource types. Terraform does a better job in covering resource types just in time. So if you want to use a resource type which CloudFormation does not support yet, but you want to use CloudFormation, you have to build a Custom Resource with an own Lambda Function. CDK to the rescue: use AwsCustomResource.

Read more →

CloudFormation does not cover all AWS Resource types. Terraform does a better job in covering resource types just in time. So if you want to use a resource type which CloudFormation does not support yet, but you want to use CloudFormation, you have to build a Custom Resource with an own Lambda Function. CDK to the rescue: use AwsCustomResource.

Read more →