API Gateway to Private HTTP Endpoint via VPC Link — In this blog post, we’ll look into an AWS serverless pattern on how we can expose a private HTTP endpoint to public users without exposing the internal resources to a public subnet. Before we dive into the implementation details I would recommend taking a moment to explore the basics of…

Every announcement from AWS re:Invent looks important one way or the other. But, here are my favorites… — This year’s (2021) pandemic-era AWS re:Invent was held in person after the last year’s virtual conference. Although I did not attend this year in person I took the virtual route to follow the keynotes, announcements, and a few talks. With over 200 AWS products and services as of today and…

Take-aways from the recent Amazon Kinesis outage that can help us build better systems. No rants! — The recent AWS outage came at a time which I can imagine to be probably the busiest time of the year for AWS and Amazon, being the Black Friday week and AWS re:Invent 2020 around the corner. And, it’s probably the busiest time of the year for many other businesses…

Lessons that have helped me in my personal & professional development — We learn, unlearn, and relearn every day till the day we die. But, there are a few things we learn that stay with us forever. I won’t be able to cover all the life lessons that I learned over the years as a professional in a single blog post. I…

Using ArgoCD and other AWS services like CodeCommit, CodePipeline, CodeBuild, Amazon EKS — In this post, we’ll look into how to build a GitOps pipeline to deploy applications on Amazon EKS (Elastic Kubernetes Service). We’ll use ArgoCD and various AWS services like CodeCommit, CodePipeline, CodeBuild, and Amazon Elastic Container Registry (ECR). Sometime back, I had written a post on GitOps and some of…

One size does not fit all. Pick from Kubernetes, Docker Swarm, Nomad, Amazon ECS, Apache Mesos + Marathon (or DC/OS), etc. — Containers and container orchestration have become a key part of almost every IT organization’s cloud-native and microservices strategy. Containerization has transformed how we write, deploy, and manage software today. Although several container orchestration products and technologies appeared on the scene, Kubernetes quickly became one of the most popular container orchestration…

Using Amazon Macie, AppFlow’s Slack integration, CloudWatch Events to detect & notify on sensitive data leaks in Slack channels — AWS announced a new service called Amazon AppFlow recently. Amazon AppFlow allows us to integrate and automate data flow between various Software as a service (SaaS) applications and AWS services. This can be a game-changer in many aspects and can open up many new possibilities and interesting use cases. Amazon…

Why Is GitOps Powerful? Key Considerations Before Embracing GitOps. — ‘GitOps’ is an operating model for the delivery and management of cloud native applications on Kubernetes. It can be considered as an optimization of the DevOps and SRE (Site Reliability Engineering) best practices around Kubernetes based systems. Given that ‘GitOps’ is a term that was coined at Weaveworks and it…

Deep-dive troubleshooting of AWS Security Groups and Network ACLs. What you should know to troubleshoot? And, a few useful networking utilities. — If you have been working on AWS for some time, either managing infrastructure or creating some fancy serverless applications, you must have run into some sort of networking issue at least once due to the wrong configuration of AWS Security Groups or Network Access Control Lists (ACL).