AWS Notes

🆕 Security Hub + custom control parameters

https://docs.aws.amazon.com/securityhub/latest/userguide/custom-control-parameters.html

То есть сейчас можно изменить поведение Security Hub для каких-то security controls, а не просто их задизаблить.

К сожалению, сейчас, на момент выкатки фичи, можно кастомизировать лишь примерно десятую часть security controls, но в будущем должно быть больше. Список доступных для изменения security controls:

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-controls-reference.html

#SecurityHub

🆕 AWS Console-to-Code

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/console-to-code.html

Проект AWSConsoleRecorder от Ian Mckay по сути теперь запили в консоли.

#AWS_Console

​​🆕 CodeWhisperer + CloudFormation & AWS CDK & Terraform 🎉

https://docs.aws.amazon.com/codewhisperer/latest/userguide/language-ide-support.html

#CodeWhisperer #CloudFormation #CDK #Terraform

🟣 Issue #99 | 26 November 2023

▪️   ALB/NLB FIPS 140-3 for TLS Termination
▪️   Amplify
       ▫️  server-side rendering (SSR) support
       ▫️  next-gen backend building capabilities
▪️   Athena CloudWatch metrics for Provisioned Capacity
▪️   CloudFront KeyValue Store, a globally managed key value datastore
▪️   CodePipeline starting a pipeline execution with source revision overrides
▪️   CodeWhisperer command line | Preview
▪️   Customer Profiles Flow simplifies authentication
▪️   Distro for OpenTelemetry Logs support
▪️   DocumentDB
       ▫️  I/O-Optimized
       ▫️  no-code machine learning with SageMaker Canvas
▪️   EC2 Image Builder image lifecycle management and deletion
▪️   EC2 Mac Apple macOS Sonoma
▪️   EC2 Security group connection tracking adds support for configurable idle timeouts
▪️   Elastic Block Store io2 Block Express volumes available on all EC2 Nitro
▪️   EMR on EC2 launch clusters in 5 minutes or less
▪️   EMR on EKS Flink | GA
▪️   EMR Studio CodeWhisperer support
▪️   Entity Resolution HIPAA eligible
▪️   FSx for OpenZFS additional performance metrics
▪️   Glue
       ▫️  entity-level actions to manage sensitive data
       ▫️  serverless Spark UI and observability metrics
▪️   IAM Identity Center APIs for visibility into workforce access to AWS
▪️   IoT SiteWise
       ▫️  Asset model components
       ▫️  bulk import, export and update of metadata
       ▫️  ingestion of buffered and batched measurement data
       ▫️  multi-variate anomaly detection with Amazon Lookout for Equipment
       ▫️  storage tier for industrial data
       ▫️  Query API for metadata, and telemetry data retrieval
       ▫️  user-defined unique identifiers
▪️   IoT TwinMaker new features to improve the digital twin entity modeling
▪️   Kinesis Data Streams cross-account access with Lambda
▪️   Lake Formation data filters now support permissions on nested data
▪️   Marketplace Vendor Insights Security and MSSP Specializations
▪️   OpenSearch Service OpenSearch version 2.11
▪️   Outposts rack supports service link interface throughput metrics
▪️   Partner Competency Advertising and Marketing Technology
▪️   QuickSight
       ▫️  asset events using EventBridge
       ▫️  Connectivity to Google BigQuery
       ▫️  export and import of asset permissions and tags
       ▫️  redesigned analysis experience
       ▫️  runtime filtering for embedded dashboards and visuals
       ▫️  runtime theming for embedded dashboards and visuals
       ▫️  SPICE capacity auto-purchase
▪️   RDS for PostgreSQL version 16
▪️   Redshift Glue column-level statistics integration
▪️   S3
       ▫️  Batch Operations buckets or prefixes in a single step operation
       ▫️  Mountpoint optimizes for repeated data access
       ▫️  Connector for PyTorch
       ▫️  enabling S3 Object Lock on existing buckets
       ▫️  server access logging now supports automatic date-based partitioning
▪️   Systems Manager Incident Manager identifies probable root causes of incidents
▪️   Verified Permissions
       ▫️  batch authorization
       ▫️  enhanced visual mode for schema editing

​​Зарплата в перспективе.

#пятничное

Mountpoint for Amazon S3 + caching

https://docs.aws.amazon.com/AmazonS3/latest/userguide/mountpoint-usage.html#mountpoint-caching

mount-s3 some-bucket ~/mnt --cache /local/path

More examples:

https://github.com/awslabs/mountpoint-s3/blob/main/doc/CONFIGURATION.md#caching-configuration

#S3 #Mountpoint

Всем привет , мы сегодня зарелизили 0.5.1 версию SRE Learning Platform!

Добавлено:
- CKAD mock exam сценарий , видео запуска экзамена
- СKAD mock exam решения и видео
- HR сценарий . Как пример оценки кандидата на скрининг интервью (примерно 20-25 минут ) . стек технологий : aws, kubernetes, helm, prometheus
- HR решения и видео .

На данный момент у нас доступны сценарии экзаменов CKA, CKS,CKAD, а также видео запуска и решений

CloudFront KeyValueStore for CloudFront Functions 🎉

CloudFront KeyValueStore is a secure, global, low-latency key value datastore that allows read access from within CloudFront Functions, enabling advanced customizable logic at the CloudFront edge locations.

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/kvs-with-functions.html

Use cases:

▫️ URL rewrites or redirects.
▫️ A/B testing and feature flags.
▫️ Access authorization.

Supported values:

◽ String
◽ Byte-encoded string
◽ JSON

#CloudFront

​​Теперь можно ссылаться на Security Groups из другой VPC, которая присоединена через Transit Gateway:

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html#tgw-vpc-rules

Раньше можно было ссылаться на SG из других VPC только через VPC peering, теперь можно из через TGW. Правда для этого потребуется обновить TGW или VPC attachment:

https://docs.aws.amazon.com/vpc/latest/tgw/tgw-sg-updates.html

Особенности:

▪️ Ссылаться через TGW peering нельзя (VPC -> TGW -> TGW peering -> TGW -> VPC, только VPC -> TGW -> VPC).
▪️ Ссылаться можно лишь в правиле для входящего трафика.
▪️ Не работает на древних виртуалках (только Nitro-based EC2 instances).
▪️ Не работает на любых виртуалках, расположенных в древних датацентрах, конкретно подзона use1-az3 (которую всегда рекомендовал исключать).
▪️ Не работает, как минимум пока, с PrivateLink и Reachability Analyzer.

Кому-то мелкая вещь и бессмысленная вещь, а кому-то упрощение управление зоопарком Security Groups в сложной сети.

#VPC #TransitGateway #SecurityGroup

​​CodeWhisperer for command line или башим по-полному!

https://aws.amazon.com/blogs/devops/introducing-amazon-codewhisperer-for-command-line/

Кроме понятного и полезного автокомплита, с помощью команды cw ai можно запустить перевод с человеческого на баш! 💪

Поддержка:

▫️ bash
▫️ zsh
▫️ fish
▫️ Terminal
▫️ iTerm2
▫️ Hyper
▫️ Visual Studio Code
▫️ JetBrains

#CodeWhisperer

Судя по всему, лента обновлений AWS замерла в связи с предстоящим через неделю re:Invent 2023 (не забываем зарегистрироваться), поэтому буду скидывать интересное вместо @awsfeed.

P.S. Полный список AWS обновлений за прошлую неделю можно найти на @awsweekly.

EKS + EBS CSI snapshot controller:

https://docs.aws.amazon.com/eks/latest/userguide/csi-snapshot-controller.html

CSI snapshot controller enables the use of snapshotting functionality in compatible CSI drivers, such as the EBS CSI driver.

▫️ We recommend that you install the CSI snapshot controller through the EKS managed add-on.
▫️ Alternatively, if you want a self-managed installation of the EBS CSI snapshot controller, see Kubernetes external-snapshotter on GitHub.

#EKS

CodeWhisperer + EMR

https://docs.aws.amazon.com/codewhisperer/latest/userguide/getting-started-emr.html

Теперь подсказки CodeWhisperer прямо в AWS Console для:

▫️ SageMaker
▫️ EMR 🆕
▫️ Glue
▫️ Lambda
▫️ Cloud9

#CodeWhisperer #EMR

AWS Fault Injection Simulator (AWS FIS) переименовали в AWS Fault Injection Service (AWS FIS).

https://aws.amazon.com/fis/

#FIS

​​RDS PostgreSQL 16 on AWS: 🎉

https://docs.aws.amazon.com/AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-versions.html#postgresql-versions-version161

#RDS #PosrgreSQL

Всем привет,

Делимся ссылками на воркшопы Community Day Central Asia:

- GenAI Bedrock Workshop
https://github.com/aws-samples/amazon-bedrock-workshop
Мы проходдили 04_Chatbot/00_Chatbot_Claude.ipynb и 05_Image/Bedrock Stable Diffusion XL.ipynb.
Не забудьте создать SageMaker Domain, и включить модели Titan Embeddings G1 - Text, Claude и SDXL 1.0 в Bedrock. Используйте регион us-east-1

- Build a real-time multiplayer gaming app with AWS Amplify & AWS AppSync
https://catalog.us-east-1.prod.workshops.aws/workshops/fd204433-05a1-4a69-b93f-8bc5028cf8ea/en-US

- Building Generative AI Applications with SageMaker Foundational Models
https://catalog.workshops.aws/building-gen-ai-apps-with-found-models/en-US

Обязательно не забудьте погасить ресурсы после воркшопов!

Больше воркшопов на workshops.aws

Всем привет! Ребят подключайтесь к нашей конференции AWS Community Day онлайн. Ссылка на трансляцию: https://www.youtube.com/watch?v=54WORAGK07U

Exciting News! We're thrilled to invite you to the upcoming AWS User Group 3city Meetup #4!
𝗝𝗼𝗶𝗻 𝘂𝘀 𝗼𝗻 𝗡𝗼𝘃𝗲𝗺𝗯𝗲𝗿 𝟮𝟴 𝗶𝗻 𝗚𝗱𝗮𝗻𝘀𝗸/𝗼𝗻𝗹𝗶𝗻𝗲 𝗳𝗼𝗿 𝗮 𝗽𝗼𝗿𝘁𝗶𝗼𝗻 𝗼𝗳 𝘁𝗲𝗰𝗵 𝗶𝗻𝘀𝗶𝗴𝗵𝘁𝘀 𝗼𝗻 𝗔𝗪𝗦 𝗕𝗮𝗰𝗸𝘂𝗽 𝗮𝗻𝗱 𝗔𝘂𝗿𝗼𝗿𝗮 𝗦𝗲𝗿𝘃𝗲𝗿𝗹𝗲𝘀𝘀 𝗩𝟮.
👉 https://wearecommunity.io/events/aws-3city-meetup4?utm_source=linkedin&utm_medium=ad&utm_campaign=aws_nov
🕕 Time: 6 PM
📍 Location: O4 Coworking, Gdansk
🖥 Can't make it in person? No worries! Registered participants will have exclusive access to the online livestream.
We've planned two informative technical sessions with a delicious pizza break – because good food fuels great ideas! 😉 The talks will be conducted by experienced practitioners - Anton Antanovich from EPAM Poland and Grzegorz Kalwig from Unity Group.
The best part? It's completely free of charge! This is your opportunity to expand your AWS knowledge and connect with like-minded professionals. Don’t forget to register though – it’s mandatory!
Save the date and be a part of the dynamic AWS User Group 3city! 🔥
#AWSUserGroup3city #Meetup #AWS #Gdansk #EPAMPoland #Proxyone #RollingScopes

📄 Issue #97 | 12 November 2023

▪️  Application Discovery Service communication through network proxy
▪️  Application Migration Service App2Container Replatforming
▪️  Audit Manager framework for generative AI on Amazon Bedrock
▪️  Batch array jobs now support array size environment variable
▪️  CloudFormation faster stack sets deployments with ConcurrencyMode
▪️  CloudFront unified security dashboard
▪️  CloudWatch Container Insights enhanced observability for EKS
▪️  CodeBuild Lambda compute
▪️  Comprehend new trust and safety features
▪️  Config inventory and compliance dashboards
▪️  Connect
      ▫️  persistent chat experiences
      ▫️  prompts configuration page provides CloudTrail coverage
      ▫️  reduces outbound telephony pricing across Europe
      ▫️  reduces telephony pricing across South America
      ▫️  Representative Numbers in South Korea
▪️  Control Tower tagging for controls enabled in AWS Control Tower
▪️  Cost Management recommendations for MemoryDB Reserved Nodes
▪️  Data Lifecycle Manager pre-/post-script automation of EBS Snapshots
▪️  Device Farm upgraded test environment for Android Devices
▪️  EC2 Image Builder Amazon Linux 2023 and Ubuntu 22.04 LTS
▪️  EC2 shared Windows AMIs users enable faster launching
▪️  EKS Anywhere self-service Enterprise Subscription purchases
▪️  ElastiCache network-optimized C7gn Graviton3-based nodes
▪️  Elastic Block Store Block Public Access for EBS Snapshots
▪️  EventBridge +20 CloudWatch Metrics for event buses
▪️  Fargate now enables Amazon ECS tasks to selectively leverage SOCI
▪️  Fault Injection Simulator scenarios and scheduled experiments
▪️  Glue Studio Visual interactive data previews
▪️  GuardDuty new ML threat detection for EKS
▪️  Health
      ▫️  improved visibility into planned lifecycle events
      ▫️  integration via Service Management Connector for ServiceNow
▪️  IoT SiteWise Edge Extended Protocol Support through EasyEdge
▪️  Kinesis Video Streams WebRTC Ingestion | GA
▪️  Lambda
      ▫️  enhances auto scaling for Kafka event sources
      ▫️  faster polling scale-up rate for SQS as an event source
      ▫️  support for Amazon Linux 2023
      ▫️  troubleshoot errors and timeoutes during Init and Restore phase
▪️  Launch Wizard Deploy SAP applications programmatically
▪️  Lex Selective Conversation Log Capture for Lex V2
▪️  MSK too many partitions check in Trusted Advisor
▪️  MWAA Apache Airflow version 2.7 and deferrable operators
▪️  NICE DCV WebAuthn redirection in v2023.1
▪️  OpenSearch Service introduces Neural Search
▪️  Partner Central News and Events Feature
▪️  QuickSight launches FLOAT data type support for SPICE datasets
▪️  RDS
      ▫️  Aurora MySQL  zero-ETL integration with Redshift | GA
      ▫️  Aurora PostgreSQL Optimized Reads
      ▫️  Aurora Global Database for PostgreSQL write forwarding
      ▫️  Database Activity Streams Kinesis data streams in on-demand mode
      ▫️  MySQL delivers up to 3X higher write throughput at no additional charge
      ▫️  Oracle now supports Oracle Multitenant
      ▫️  MySQL and MariaDB Optimized Writes M5 database instances
      ▫️  Performance Insights supports exporting dashboards to CloudWatch
▪️  RDS Proxy PostgreSQL Extended Query Protocol
▪️  RDS Proxy RDS Multi-AZ Deployments with two readable standbys
▪️  Redshift MaxRPU, a new compute cost control setting for Redshift Serverless
▪️  Resilience Hub next generation Resiliency Scores
▪️  SageMaker Canvas Build ML models w/ advanced configurations, gain Model Leaderboard visibility
▪️  Service Management Connector Health/OpsCenter integrations in Jira Cloud
▪️  SES 60 days of metric history in Virtual Deliverability Manager
▪️  SNS increases default FIFO topic throughput by 10x to 3,000 MPS
▪️  SQS
      ▫️  EventBridge Pipes console integration
      ▫️  support for JSON protocol