AWS Notes

Cloudflare Global Network experiencing issues

Cloudflare is experiencing an internal service degradation. Some services may be intermittently impacted.

https://www.cloudflarestatus.com/

MWAA Serverless (Apache Airflow) 🎉

https://aws.amazon.com/blogs/big-data/introducing-amazon-mwaa-serverless/

🔸 No provisioning overhead
🔹 Pay-per-use pricing model
🔸 Automatic scaling based on workflow demands
🔹 Enhanced security through granular IAM permissions
🔸 Simplified workflow definitions using YAML

#MWAA

He can’t recommend Grafana anymore

https://henrikgerdes.me/blog/2025-11-grafana-mess/

🔸 Rapid product changes and deprecations
🔹 Breaking changes to Helm charts and dashboards
🔸 Constant introduction of new tools/operators
🔹 Complexity from "All-in-One" solutions
🔸 Major architectural shifts without predictability
🔹 Grafana Cloud
🔸 Lack of stability
🔹 Complex software lifecycle management
🔸 Management problems

Lambda + Rust 🎉

https://aws.amazon.com/blogs/compute/building-serverless-applications-with-rust-on-aws-lambda/

#Lambda

Good evening, people jan! 🤗
Before we all head into “weekdays closing Friday ceremony :D))” mode, quick heads up on a pretty cool update:

AWS Application Load Balancer now supports JWT verification - which basically means :
🫴 Your ALB can now verify JSON Web Tokens in request headers automatically
🫴 Handles token signatures, expiration times, and claims - zero code changes
🫴 ALB does all that OAuth 2.0 token validation for you now
🫴 Works with Client Credentials Flow and other OAuth 2.0 flows

So just simplify your life - no more writing token validation logic in every service. 😎

Already available in all AWS Regions where ALB runs.

🔗 Full details here , if you want to dig in over the weekend (or you know, maybe just enjoy your weekend instead 😉)

Have a great weekend, everyone! 💙

Project Kuiper
AWS Starlink
Amazon Leo 🎉

https://leo.amazon.com/

ALB + JWT verification 💪

https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-verify-jwt.html

ALB will validate the token signature and requires two mandatory claims: 'iss' (issuer) and 'exp' (expiration). Additionally, if present in the token, ALB will also validate 'nbf' (not before) and 'iat' (issued at time) claims. You can configure up to 10 additional claims for validation.

These claims support three formats:
🔹 Single-string: A single text value
🔹 Space-separated values: Multiple values separated by spaces (maximum 10 values)
🔹 String-array: An array of text values (maximum 10 values)

If the token is valid, the load balancer forwards the request with token as is to the target. Otherwise, it rejects the request.

#ALB

Ingress Nginx всё 🪦
https://kubernetes.io/blog/2025/11/11/ingress-nginx-retirement/

Good morning, people jan ~ ☺️

🔥FREE AWS SkillBuilder subscription-based exam prep materials until December 31, 2025.

This is a limited-time offer, especially valuable if cost was stopping you from starting.
Find all the details in my post and start your journey. 🤓

AWS Backup + EKS 🎉

https://aws.amazon.com/blogs/aws/secure-eks-clusters-with-the-new-support-for-amazon-eks-in-aws-backup/

✅ Agent-free, native AWS integration (no custom scripts or third-party tools needed)
✅ Cross-Region and cross-account copies
✅ Automated scheduling and retention management
✅ Immutable backup vaults

Restore options:
🔸 Full EKS cluster
🔸 Specific namespaces
🔸 Individual persistent volumes

#Backup #EKS

Строго секретно — новый секретный AWS регион: AWS Secret-West Region 🎉

(ссылку не даю, т.к. секретно)

Итого на сейчас флеш-рояль каждого по два:

🔸 AWS GovCloud US-East (2018)
🔸 AWS GovCloud US-West (2011)

🔹 AWS Secret-East (2017)
🔹 AWS Secret-West (2025)

▫️ AWS Top Secret-East (2014)
▫️ AWS Top Secret-West (2021)

Секретные регионы отделены от "основного" AWS и интернета вообще — у них полностью своя сеть.

Чем более секретный, тем больше требований и тем меньше AWS сервисов доступно. На текущий момент в AWS Secret-East доступно лишь 79 сервисов.

#AWS_Regions

— Какая надёжность у вашего сервиса?
— Пять девяток!
— Но он же лежит постоянно!
— 9.9999%

Где вы видите себя через пять лет?

#пятничное

Не было и не будет

Инструментов для проверки доступных AWS сервисов в разных регионах много разных и разной степени неудобности. Однако с их помощью можно посмотреть ситуацию лишь на сейчас (или в прошлом, если они не обновляются). Ничего не зная, когда планируется добавление нужного сервиса.

И вот теперь можно проверить, какие AWS сервисы точно никогда не появятся (Not Expanding) в нужном тебе регионе:

https://builder.aws.com/build/capabilities/explore?tab=service-feature

И какие лишь в бэклоге (Planning) либо уже разрабатываются и имеют сроки выхода (2026 Q3).

CloudFront + cross-account VPC origins 🎉

https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-cross-account-support-for-amazon-cloudfront-virtual-private-cloud-vpc-origins/

Теперь можно использовать один CloudFront для доступа в приватные ресурсы в разных аккаунтах. Заметное упрощение многих конфигураций, можно использовать один CloudFront для dev-stage-prod, например, расположив его в Shared аккаунте. Отличная фича.

#CloudFront #RAM

𝟵 𝗺𝗶𝗹𝗹𝗶𝗼𝗻 𝗸𝗶𝗹𝗼𝗺𝗲𝘁𝗲𝗿𝘀 𝗼𝗳 𝗰𝗹𝗼𝘂𝗱 — 𝗮𝗻𝗱 𝗰𝗼𝘂𝗻𝘁𝗶𝗻𝗴...

Did you know AWS operates its own global network spanning over 𝟵 𝗺𝗶𝗹𝗹𝗶𝗼𝗻 𝗸𝗶𝗹𝗼𝗺𝗲𝘁𝗲𝗿𝘀 - 𝗲𝗻𝗼𝘂𝗴𝗵 𝘁𝗼 𝘁𝗿𝗮𝘃𝗲𝗹 𝗳𝗿𝗼𝗺 𝗘𝗮𝗿𝘁𝗵 𝘁𝗼 𝘁𝗵𝗲 𝗠𝗼𝗼𝗻 𝗮𝗻𝗱 𝗯𝗮𝗰𝗸 𝗺𝗼𝗿𝗲 𝘁𝗵𝗮𝗻 𝟭𝟭 𝘁𝗶𝗺𝗲𝘀?

Recently, AWS added a new transatlantic subsea cable connecting the U.S. and Europe, capable of delivering 320+ terabits per second — 𝗲𝗻𝗼𝘂𝗴𝗵 𝘁𝗼 𝘀𝘁𝗿𝗲𝗮𝗺 𝟭𝟮.𝟱 𝗺𝗶𝗹𝗹𝗶𝗼𝗻 𝗛𝗗 𝗺𝗼𝘃𝗶𝗲𝘀 𝗮𝘁 𝗼𝗻𝗰𝗲! All to make the cloud faster, safer, and more resilient. ☁️🚀

AWS Project Rainier: One of the world’s largest AI compute clusters is now fully operational. 🚀

Anthropic is actively using Project Rainier to build and deploy its industry-leading AI model, Claude, which AWS expects to be on more than 1 million Trainium2 chips by the end of 2025.

📹 Watch: Inside Amazon's new AI supercomputer

ECS + canary deployments 🎉

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/canary-deployment.html

ECS + linear deployments 🎉

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-linear.html

ECS + blue/green deployments

https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-blue-green.html

Вы всё ещё кипятите? Тогда мы идём к вам!

#ECS

Обычно проблемы перед реинвентом в ноябре. И обычно у AWS.

Нонче по-другому. DNS пальцем не заткнёшь.

Azure Portal Access Issues (болеем за соседей):

https://azure.status.microsoft/en-us/status

Starting at approximately 16:00 UTC, we began experiencing DNS issues resulting in availability degradation of some services. Customers may experience issues accessing the Azure Portal. We have taken action that is expected to address the portal access issues here shortly. We are actively investigating the underlying issue and additional mitigation actions.

Update:

We have initiated the deployment of our 'last known good' configuration. This is expected to be fully deployed in about 30 minutes from which point customers will start to see initial signs of recovery. Once this is completed, the next stage is to start to recover nodes while we route traffic through these healthy nodes.

Update2:

At this stage, we anticipate full mitigation within the next four hours as we continue to recover nodes. This means we expect recovery to happen by 23:20 UTC on 29 October 2025. We will provide another update on our progress within two hours, or sooner if warranted.