What is Account Factory for Terraform (AFT) Account Factory for Terraform (AFT) is a solution provided by AWS that leverages Terraform to automate and manage the creation and configuration of AWS accounts. It is designed to streamline the account provisioning process, enforce consistent configurations, and ensure governance and compliance across multiple AWS accounts. It may … Continue reading Uninstalling Account Factory for Terraform (AFT)
When you deploy an AWS Organization using Control Tower, an AWSSSO IdP is created in every account. It's name ends with DO_NOT_DELETE. What happens if you delete it? Background I recently had someone reach out to me asking what happens if the auto-created AWS SSO IdP Provider that integrates with IAM Identity Center in Control … Continue reading You deleted the “DO_NOT_DELETE” IdP?
In their eagerness to launch a cloud initiative, there are still organizations that deploy new environments and resources from the AWS console. While they may believe it leads to a quick win, the reality is different. Background I spoke with an organization recently that had deployed all of their AWS resources from the console. I … Continue reading Using AWS’s IaC Generator to Rescue Manual Deployments
I recently took (and passed) the AWS Advanced Networking Specialty exam and hope this quick post may help you prepare. Exam Overview The exam itself consists of 65 multiple choice and multiple response questions and you have 170 minutes to take it. When I completed the exam, and a review of a few questions, I … Continue reading Studying for the AWS Advanced Networking Specialty Exam
Use Route 53 Resolver DNS Firewall to help secure egress traffic... What Is Route 53 Resolver DNS Firewall? Route 53 Resolver DNS Firewall is a highly available, fully-managed service/firewall that leverages domain lists and rule groups to provide an additional layer security for outbound DNS traffic. It enables granular control over DNS querying behavior within your … Continue reading Intro to Route 53 Resolver DNS Firewall
Use AWS Skill Builder Digital Badges to showcase your skills! AWS Digital Badges AWS has introduced Digital Badges as a means for you to enhance, and then showcase your knowledge and skills in specific AWS technologies and services. Digital Badges are obtained within AWS Skill Builder, include a pre-built learning path containing training content relevant … Continue reading Get your AWS Digital Badges
Do you need a quick and easy way to inventory EC2 Instances across your organization? Have you tried an Advanced Query for AWS Config? I can't remember if I was on a call or "heard" this over email but a comment like this was made, "I'm updating the EC2 inventory spreadsheet.".....Not knowing anything beyond this … Continue reading A Quick and Easy EC2 Inventory using AWS Config
Remembering When.... There are some days when I reminisce with great fondness about my previous experiences as a VMware consultant and admin. I remember being blown away by that first vMotion, thinking there was no way vMotion was going to work as advertised. I also enjoyed watching customers experience the same fascination when they saw … Continue reading AWS EC2 Image Builder for Beginners
Overview A fairly common ask in relation to the AWS End-User Computing portfolio had been a non-persistent virtual desktop. That ask was answered in August 2020 when AWS introduced a new feature called Desktop View, which provides a desktop experience through Amazon AppStream. In this multi-part series, I'll go through the process to create and … Continue reading Streaming Non-Persistent Virtual Desktops with Amazon AppStream 2.0 – Create the Image
As you continue your journey in and to the cloud, you may find yourself using Lambda functions to send data to remote/3rd party API servers. Not only that, you may find that these 3rd party API providers only accept requests from whitelisted IP addresses. This may shock you, but Lambda functions are not the same … Continue reading Whitelisting Lambda Functions
