AWS Notes

🆕 OpenTF + end-to-end encryption for state files

This feature has been blocked in Terraform since 2014. OpenTF makes it possible.

https://twitter.com/brikis98/status/1696453969118113902

⚠️ The encryption feature is experimental for now; an official RFC is coming soon.

P.S. GitHub stars:
▪️ Terraform → 38.7k
▫️ OpenTF → 22k and you can help here 👇
https://github.com/opentffoundation/manifesto 😃

#OpenTF

▫️ Issue #86 | 27 August 2023

▪️  AppFabric is now HIPAA eligible
▪️  Aurora Global Database Global Database Failover
▪️  Aurora MySQL  Percona Xtrabackup for MySQL 8 physical migrations
▪️  AWS ROSA hosted control planes | Preview
▪️  Certificate Manager Enterprise Controls to help govern certificate issuance
▪️  Connect  scheduling of agent group activities
▪️  Cost Allocation Tags  Last-Updated and Last-Used timestamps
▪️  Cost Explorer support for Billing Conductor
▪️  Dedicated Local Zones announce
▪️  EC2 Hibernate now supports M7i and M7i-flex instances
▪️  ElastiCache for Memcached simplifies creating new clusters in the Console
▪️  Global Accelerator client IP address preservation for NLB endpoints
▪️  GuardDuty Improvements to multi-account management
▪️  Microservice Extractor visualizing very large enterprise applications
▪️  PrivateLink user defined IP on VPC endpoints
▪️  QuickSight scheduled and programmatic export to Excel format
▪️  RDS for MariaDB MariaDB 10.11 for up to 40% higher transaction throughput
▪️  RDS for PostgreSQL minor versions 15.4, 14.9, 13.12, 12.16, and 11.21
▪️  re:Post enhanced search experience
▪️  SageMaker Data Wrangler
      ▫️ role-based access control for Amazon EMR
      ▫️ S3 access points
▪️  SageMaker
      ▫️ GPU/CPU profiler tooling for deep learning model development | Preview
      ▫️ new Rolling Deployment endpoint update option
▪️  SageMaker Model Cards cross-account sharing of model cards
▪️  SageMaker Studio Lab SageMaker Distribution
▪️  WorkSpaces new Linux client with Ubuntu 20.04 and 22.04

New event is coming!

WHAT: 2 technical sessions with a pizza break
WHERE: ONLINE or OFFLINE in Gdynia
WHEN: September 7, 18:00
HOW: in English
HOW MUCH: free of charge

AGENDA:

▪️ "Kubernetes Well-Done - How we have made it" (Adam Brodziak, DevOps Architect at Future Processing).

▪️ "Developer experience with Amazon Code family tools: Amazon CodeCatalyst and Amazon CodeWhisperer" (Anton Kovalenko, Senior Solutions Architect at AWS).

▪️ "Kahoot Quiz with AWS Credits to win" (Maksim Shylau, Senior Software Engineer at EPAM).

Meet us at the meetup! https://www.meetup.com/ru-RU/aws-user-group-3city/events/295673343/

💥 OpenTF announces fork of Terraform:

https://opentf.org/announcement

#OpenTF #Terraform

Давай, расскажи, как ты сегодня устал настраивать пайплайны.

#пятничное

Полезные комментарии Дениса Астахова по поводу перехода Terraform на BSL лицензию:

https://www.youtube.com/watch?v=dr6cwY2WbZA

Отмечу по этому поводу следующее.

◾ "Создающие альтернативы продуктам Hashicorp" — это не только Terraform.

◾ Если Hashicorp, например, купит какую-то компанию в области предоставления облачных сервисов, то под это определение автоматически подпадут все облака.

◾ Потенциально такое определение распространяется на любой бизнес, а не только напрямую связанное с Terraform.

◾ Не всё так однозначно. ©

#Terraform #OpenTF

🌤 Issue #85 | 20 August 2023

▪️  AppSync JavaScript for all resolvers in GraphQL APIs
▪️  Audit Manager integration with EventBridge
▪️  AWS Startups AWS Build self-paced program for pre-MVP founders
▪️  Backup Audit Manager delegated backup administrator
▪️  Batch on Amazon ECS AL2023 support
▪️  CodePipeline GitLab support
▪️  DeepRacer Student educator playbooks
▪️  Distro for OpenTelemetry Kubernetes Metadata Enrichment
▪️  EC2
      ▫️  Hpc7a instances for compute-intensive, latency-sensitive, HPC workloads
      ▫️  M7a general purpose instances
▪️  EMR Serverless fine grained log configurations
▪️  FSx for NetApp ONTAP new performance metrics and updated dashboard
▪️  GameLift support Graviton3 processors
▪️  Glue Studio Visual ETL adds 5 new visual transforms
▪️  HealthOmics
      ▫️ cross-account sharing of omics analytics stores
      ▫️ versioning of annotation stores
▪️  IAM Identity Center integration with QuickSight | GA
▪️  Kinesis Video Streams improves image sampling frequency to 5 FPS
▪️  Lex Confirmation slot type
▪️  Mainframe Modernization Data Replication with Precisely
▪️  Marketplace self-service Vendor Insights
▪️  OpenSearch Serverless larger workloads and collections
▪️  Polly new Gulf Arabic male NTTS voice
▪️  RDS Custom for Oracle
      ▫️ R5b and X2iedn instances
      ▫️ R6i, M6i, and T3 instances
▪️  RDS Performance Insights on-demand analysis experience
▪️  Resilience Hub Exclude Recommendations

Ещё 0.44 дашборды и придётся платить!

#CloudWatch #Budgets #FreeTier

​​🆕 Amazon EC2 M7a instances, powered by 4th Gen AMD EPYC processors (code-named Genoa) with a maximum frequency of 3.7 GHz, DDR5, AVX3-512, VNNI, and bfloat16.

https://aws.amazon.com/ec2/instance-types/m7a/

#AMD #EC2

​​📢 17 августа 2023 г. в Гданьске в 18:00 по местному времени пройдёт AWS Meetup.

Мероприятие offline, но запись будет доступна для зарегистрированных пользователей:

https://wearecommunity.io/events/aws-3city-meetup2

В программе следующие доклады:

⚪ "Database migration: through thorns to RDS" — Кирилл Соловей, Epam.

🔴 "DevOps is dead or not? Exploring its relationship with platform teams" — Виктор Ведмич, AWS.

После докладов AWS викторина с раздачей слонов кредитов AWS. Лишь для тех, кто придёт лично, поэтому обязательно приходите.

🏢 Где? O4 Coworking, Aleja Grunwaldzka, Gdańsk
📆 Когда? 17 августа 2023, 18:00 UTC+2

Я тоже приеду, так что будет чего обсудить в кулуарах и после митапа. Да и кредиты ведь лишними не бывают. 😁

#AWS_Meetup

OpenTF — open source Terraform

https://opentf.org/

GitHub 🔗 https://github.com/opentffoundation

#Terraform #OpenTF

🟢 Issue #84 | 13 August 2023

▪️  Artifact email notifications
▪️  Backup logically air-gapped vault | Preview
▪️  CloudWatch Agent OpenTelemetry traces and AWS X-Ray
▪️  Connect excluding outbound calls in deciding agent routing order
▪️  DataSync copying data to and from other clouds
▪️  Detective enhances visualizations to improve security investigations
▪️  ElastiCache for Redis online migration of clusters running in cluster mode
▪️  EMR Studio Lake Formation fine-grained access control
▪️  EventBridge
      ▫️  API Destinations | new regions
      ▫️  Schema Registry and Schema Discovery now in additional regions
▪️  Fargate process ID namespace sharing and kernel parameter configuration
▪️  Firewall Manager optimize WAF web ACL creation in AWS accounts
▪️  FSx
      ▫️  Lustre release inactive data
      ▫️  OpenZFS Multi-AZ deployment option for file systems
      ▫️  Windows File Server increases maximum throughput to 12 GB/s
      ▫️  Windows File Server scale IOPS separately from storage
▪️  Global Accelerator extends IPv6 support to EC2 endpoints
▪️  Glue Studio CodeWhisperer in additional regions
▪️  Interactive Video Service
      ▫️  live video output price changes
      ▫️  Real-Time Streaming
▪️  MSK Serverless +3 regions
▪️  MWAA Apache Airflow version 2.6
▪️  Network Load Balancer Security Groups support
▪️  OpenSearch Serverless deployments with Terraform
▪️  QuickSight
      ▫️  embedded callback actions
      ▫️  hierarchy layout for pivot tables
▪️  RDS Database Preview Environment PostgreSQL 16 Beta 3
▪️  RDS for MySQL new minor versions 5.7.43 and 8.0.34
▪️  RDS for Oracle July 2023 Release Update
▪️  S3 Glacier Flexible Retrieval improves data restore time by up to 85%
▪️  S3 Mountpoint | GA
▪️  Security Hub +12 security controls
▪️  Service Catalog HashiCorp Terraform Cloud support
▪️  Timestream releases open-source ODBC driver

Terraform: open source — вычёркиваем.

https://habr.com/ru/companies/flant/news/754094/

#Terraform

ℹ️ 70% прибыли Amazon за последний квартал дал AWS.

Top10 спонсоров выпуска:

🔟 Серьёзному проекту - серьёзные виртуалки.
9️⃣Временно запустим, потом выключим.
8️⃣Если вдруг придут пользователи.
7️⃣Сделай, чтобы надёжно было.
6️⃣Поставь на всякий случай.
5️⃣Чтобы точно не тормозило.
4️⃣Не знаю, фигня какая-то.
3️⃣А вдруг кому-то нужно.
2️⃣Это до меня сделали.
1️⃣Не трогай то, что работает!

​​NLB + Security Groups

https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-security-groups.html

✅ You can associate SG with NLB when you create it.

✅ After you create NLB with associated SG, you can change SG associated with NLB at any time.

👉 If you create NLB without associating any SG, you can't associate them with NLB later on.

⚠️ Health checks are subject to outbound rules, but not inbound rules. You must ensure that outbound rules don't block health check traffic. Otherwise, NLB considers the targets unhealthy.

✅ You can control whether PrivateLink traffic is subject to inbound rules. If you enable inbound rules on PrivateLink traffic, the source of the traffic is the private IP address of the client, not the endpoint interface.

#NLB #SG

ALB vs NLB vs GWLB (Gateway Load Balancer)

https://devopscube.com/aws-load-balancers/

All the most important features of different types of AWS Load Balancers (ALB, NLB, GWLB) in one place. Great animation, informative pictures, highly recommended!

#ALB #NLB #GWLB

Свежий Whitepaper по Гибридной архитектуре и data locality
Автор - @john_starbucks Слава Редько 👍
https://docs.aws.amazon.com/whitepapers/latest/hybrid-architectures-to-address-personal-data-processing-requirements/hybrid-architectures-to-address-personal-data-processing-requirements.html

​​TFTUI — a textual utility for viewing and interacting with Terraform state

https://github.com/idoavrah/terraform-tui

#terraform