Tagged with

Aws

PEP and PDP for Secure Authorization with Cognito

2025-01-30

aws, authz, serverless

Authorization is a critical part of securing cloud applications, and understanding the best practices for implementing it can make all the difference. In this post, we dig deep on the concepts of Policy Decision Points (PDPs) and Policy Enforcement Points (PEPs), and how they work together to manage user access efficiently. We dive into a serverless solution using AWS Lambda and API Gateway, implementing Role-Based Access Control (RBAC) for fine-grained access control based on Cognito User Groups. This solution ensures scalability, low latency, and efficient authorization in serverless environments.

Serverless self-service IoT certificate management - Part 2.

2024-12-22

aws, iot, security, serverless

Secure communication is a important in IoT systems, where certificates and trust play a vital role. In this post we extend the API introduced in part 1, we will add functionality to create device certificates, introduce an inventory, add some event-driven parts, and the possibility to list and get certificates. This hands-on approach is great for learning purposes and development environments, production setups however require robust managed solutions.

Serverless self-service IoT certificate management - Part 1.

2024-11-27

aws, iot, security, serverless

Secure communication is a important in IoT systems, where certificates and trust play a vital role. In this post, I explore the foundations of certificate management, including PKI, certificate chains, and trust. Also I introduce a serverless self-service API using Amazon API Gateway and Lambda for an easy way to create certificates. This hands-on approach is great for learning purposes and development environments, production setups however require robust managed solutions.

/Automate DevOps, boost productivity & developer experience

2024-11-13

Serverless AWS DevOps

In today’s fast-paced development environments, reducing manual tasks is crucial for productivity. This talk will explore how MyMoney, fintech market leader in Sweden, leveraged Slack integrated with AWS, creating an event-driven solution, to automate tasks across a multi-account setup. Learn how this journey enhanced productivity and security by eliminating repetitive tasks, minimizing human error. A key aspect was integrating alarms and notifications directly into Slack, enabling developers to take immediate action on system alerts. We will look at the problems, implementation, and challenges faced. Join us to gain valuable insights and practical tips for transforming your workflows. Audience will learn how we integrated our DevOps way of working and tooling with Slack to automate tasks, boosting productivity, creating better developer experience and at the same time reducing cost. Key Takeaways: - How to automate task to increase developer experience - How to create an event-driven solution across multiple AWS accounts - Using automated scheduling to save cost.

Serverless website analytics with Lambda@Edge

2024-11-06

serverless AWS analytics

Talk about the innovative approach of utilizing AWS Lambda@Edge to gather statistics for a static website, focusing on server-side data collection for page views.

Serverless AI powered content moderation service

2024-10-31

aws, ai, security, serverless

In this post, I extend the File Manager service I built previously by adding content moderation capabilities. The original service stores files in S3 and records them in a DynamoDB table, using a serverless, event-driven approach. Now, with AWS GuardDuty and Rekognition, I’ve enhanced the service with malware scanning and image moderation.

Building resilient serverless workloads: Navigating through failures

2024-10-03

Serverless resiliency AWS

Serverless and event-driven workloads on AWS are well known for their inherent high availability and scalability, offering a robust platform right out of the box. However, in the world of cloud, it's a well known that everything fails all the time. This reality becomes even more complex when serverless systems interact with non-serverless components, which may not possess the same agility in scaling.

The art of surviving re:Invent: Tricks from a eight year veteran

2024-09-25

aws, re:Invent

re:Invent is one of, if not the biggest, tech conferences in the world. Attending re:Invent for the first time can be overwhelming. In this post I try give you some advice how to survive not only re:Invent but also Las Vegas as a first time attendee.

Building a serverless connected BBQ as SaaS - Part 4 - AuthZ

2024-09-20

serverless, aws, saas, IoT

In part four of the series about the world of BBQ, where tradition and technology rarely cross paths. The future of grilling is here, and it’s connected, smart, and runs on the cloud! We look at the key difference between Authentication and Authorization in a SaaS solution. We introduce a new authorization architecture with a centralized Policy Decision Point (PDP) and distributed Policy Enforcement Points (PEPs) implemented serverless with API Gateway and Lambda.

Building resilient serverless workloads: Navigating through failures

2024-09-17

Serverless resiliency AWS

Serverless website analytics with Lambda@Edge

2024-09-11

serverless AWS analytics

Talk about the innovative approach of utilizing AWS Lambda@Edge to gather statistics for a static website, focusing on server-side data collection for page views.

Serverless website analytics with Lambda@Edge

2024-08-24

serverless AWS analytics

Talk about the innovative approach of utilizing AWS Lambda@Edge to gather statistics for a static website, focusing on server-side data collection for page views.

Building a serverless connected BBQ as SaaS - Part 3 - Tenants

2024-08-23

serverless, aws, saas, IoT

In part three of the series about the world of BBQ, where tradition and technology rarely cross paths. The future of grilling is here, and it’s connected, smart, and runs on the cloud! I continue with tenant management using an serverless and event-driven approach with EventBridge, StepFunctions, API Gateway, Lambda, and Cognito User Pools.

How I extend my blog with gamified learning

2024-07-25

aws, event-driven, serverless

One of the major reason that I write all of these blog posts is to help people learn about cloud and AWS. How would you know that you understood what you read and learned from it? In this post I discuss how I introduced gamified learning by adding a quiz from kvist.ai on my blog posts, directly from my CI/CD pipeline running as an event-driven system using Amazon EventBridge and AWS StepFunctions.

Events vs streaming data in AWS

2024-06-27

aws, event-driven, streaming data

Events are changes in a system’s state, often triggering specific actions, while data streams represent continuous flows of data elements over time. Events can form part of data streams, but not all data streams are composed of events, as they may include continuous data points like sensor readings. AWS offers services like Amazon EventBridge and SNS for managing events, Amazon Kinesis for, real-time data streams, and IoT Core that can handle both, making it possible to handle both concepts in cloud.

Building a serverless connected BBQ as SaaS - Part 2 - User Creation

2024-06-12

serverless, aws, saas, IoT

In part two of the series about the world of BBQ, where tradition and technology rarely cross paths. The future of grilling is here, and it’s connected, smart, and runs on the cloud! I continue with user management using an serverless and event-driven approach with Cognito User Pool together with Lambda, EventBridge, and StepFunctions.

AWS Summit - COM106 - AWS Community Panel

2024-06-04

Community AWS

Join us for a panel discussion about AWS Community from our community members who will be sharing their insights on the impact tech communities have on developers. Learn how you can gain skills, network and collaborate with other like-minded builders.

Building a serverless connected BBQ as SaaS - Part 1

2024-05-29

serverless, aws, IoT

In the world of BBQ, tradition and technology rarely cross paths. But what if I told you that the future of grilling is here, and it’s connected, smart, and runs on the cloud? In this blog series, I will explore how AWS IoT, serverless, and event-driven architecture enables an automated cooking experience. As a tech-savvy griller, I discover how cloud technology can elevate my grilling game to a whole new level.

AWS ECS and AWS Fargate demystified: run serverless containers

2024-05-22

AWS, Serverless, Containers

Running containers in a serverless way, on Fargate, come with a lot of benefits. In this talk I share migration paths and benefits with moving to Fargate. I also share war stories from running containers on Fargate with several customers.

Cloud-grilled delights a high-tech approach to perfect BBQ

2024-05-16

serverless AWS

Talk about building an IoT connected smoker and how to use AWS and IoT to perfect your BBQ skills.

Building resilient serverless workloads: Navigating through failures

2024-05-07

serverless AWS

Talk about building resilient serverless workloads, real life examples and good to know architecture patterns.

Navigating through failures, build resilient serverless systems

2024-04-26

serverless, aws

Serverless and event-driven workloads on AWS are well known for their inherent high availability and scalability, offering a robust platform right out of the box. In the world of cloud, it's well known that everything fails all the time. This reality becomes even more complex when serverless systems interact with non-serverless components. In this post, I'll dig into architecture concepts that can help you handle failures effectively.

Serverless website analytics with Lambda@Edge

2024-04-17

serverless AWS analytics

Talk about the innovative approach of utilizing AWS Lambda@Edge to gather statistics for a static website, focusing on server-side data collection for page views.

Protect API Gateway with Amazon Verified Permissions

2024-04-10

serverless, aws

In this post we'll look at Amazon Verified Permissions (AVP) a serverless service for easy management and enforcement of application permissions, and how to use it to secure Amazon API gateway API together with Cognito User Pools.

Previous Next