Author: renato
-
Transparent server side encryption on S3
I would like to take advantage of Server-Side Encryption with Amazon S3-Managed Encryption Keys for some existing buckets where I have some legacies applications storing data without S3 encryption. Encryption of data at rest is of course important and with the chance of doing it on AWS with a simple flag (or one line of…
-
AWS operations where a root account is still required
We all know that using the AWS root account is bad practice and that we should rely only on IAM users. The ideal scenario We should always protect the root account with a (possibly hardware) MFA device and close the MFA in a safe place and forget about it. One final step, we can reset…
-
Different AZ names for different accounts
You might occasionally read on the AWS Service Health Dashboard a message referring to issues on “a single Availability Zone in the US-WEST-1 Region” or “We are investigating degraded performance for a small number of EBS volumes in a single Availability Zone in the AP-SOUTHEAST-1 Region” You might wonder why AWS does not disclose the…
-
Stateless architecture. Stateful email
As for stateless applications, there are significant benefits in writing emails that need no knowledge of previous interactions and store no session information.