Tagged with "Aws" | Jimmy Dahlqvist

PEP and PDP for Secure Authorization with AVP and ABAC

2025-05-06

aws, authz, serverless

Taking our authorization system to the next level! In this third part of our series, we're enhancing our Amazon Verified Permissions (AVP) solution with Attribute-Based Access Control (ABAC). By combining RBAC and ABAC, we get a powerful authorization system that can enforce fine-grained access based on user attributes and context - perfect for multi-tenant applications where access control needs to account for more than just roles.

/Automate. Serverless and event-driven approach to DevOps

2025-04-10

Serverless EventDriven AWS Devops

This talk will explore how a fintech market leader in Sweden, created a serverless and event-driven integration with Slack on AWS. Creating a solution, to automate tasks across a multi-account setup. Learn how this journey optimized cost, enhanced productivity and security by eliminating repetitive tasks, by minimizing human error. A key aspect was integrating alarms and notifications directly into Slack, enabling developers to take immediate action on system alerts. We will look at the problems, deep dive into implementation, and the challenges we faced. Join us to gain valuable insights and practical tips for transforming your workflows.

Event-Driven and serverless in world of IoT

2025-04-02

Serverless IoT AWS

In large-scale IoT systems, where thousands of devices are constantly communicating, data and control messages can flow unpredictably and at varying rates throughout the day. Serverless and event-driven architectures provide a dynamic and efficient solution to this challenge. In this session, we’ll explore why serverless is a great fit for IoT, particularly in handling data ingestion and management. We’ll dive into the key architectural patterns used in IoT systems, highlighting how event-driven design enables scalability, flexibility, and cost optimization. I’ll also walk you through an architecture I designed for an IoT use case, showcasing the integration of various AWS services tailored for data ingestion, processing, and analytics. Along the way, we’ll discuss the challenges encountered and lessons learned during development, offering actionable insights into the unique aspects of building serverless IoT solutions. Join me to understand how serverless and event-driven architectures can unlock the full potential of IoT, enabling resilient and scalable systems that are easy to manage and adapt to evolving demands.

Event-Driven and serverless in world of IoT

2025-03-26

Serverless IoT AWS

In large-scale IoT systems, where thousands of devices are constantly communicating, data and control messages can flow unpredictably and at varying rates throughout the day. Serverless and event-driven architectures provide a dynamic and efficient solution to this challenge. In this session, we’ll explore why serverless is a great fit for IoT, particularly in handling data ingestion and management. We’ll dive into the key architectural patterns used in IoT systems, highlighting how event-driven design enables scalability, flexibility, and cost optimization. I’ll also walk you through an architecture I designed for an IoT use case, showcasing the integration of various AWS services tailored for data ingestion, processing, and analytics. Along the way, we’ll discuss the challenges encountered and lessons learned during development, offering actionable insights into the unique aspects of building serverless IoT solutions. Join me to understand how serverless and event-driven architectures can unlock the full potential of IoT, enabling resilient and scalable systems that are easy to manage and adapt to evolving demands.

PEP and PDP for Secure Authorization with AVP

2025-02-20

aws, authz, serverless

As authorization needs evolve, managing access efficiently becomes even more crucial. In this follow-up post, we extend our Policy Decision Point (PDP) and Policy Enforcement Point (PEP) solution by introducing Amazon Verified Permissions (AVP) for fine-grained authorization. Instead of storing permissions in DynamoDB, we leverage AVP’s centralized policy engine and Cedar policy language to define and enforce access control dynamically.

PEP and PDP for Secure Authorization with Cognito

2025-01-30

aws, authz, serverless

Authorization is a critical part of securing cloud applications, and understanding the best practices for implementing it can make all the difference. In this post, we dig deep on the concepts of Policy Decision Points (PDPs) and Policy Enforcement Points (PEPs), and how they work together to manage user access efficiently. We dive into a serverless solution using AWS Lambda and API Gateway, implementing Role-Based Access Control (RBAC) for fine-grained access control based on Cognito User Groups. This solution ensures scalability, low latency, and efficient authorization in serverless environments.

Serverless self-service IoT certificate management - Part 2.

2024-12-22

aws, iot, security, serverless

Secure communication is a important in IoT systems, where certificates and trust play a vital role. In this post we extend the API introduced in part 1, we will add functionality to create device certificates, introduce an inventory, add some event-driven parts, and the possibility to list and get certificates. This hands-on approach is great for learning purposes and development environments, production setups however require robust managed solutions.

Serverless self-service IoT certificate management - Part 1.

2024-11-27

aws, iot, security, serverless

Secure communication is a important in IoT systems, where certificates and trust play a vital role. In this post, I explore the foundations of certificate management, including PKI, certificate chains, and trust. Also I introduce a serverless self-service API using Amazon API Gateway and Lambda for an easy way to create certificates. This hands-on approach is great for learning purposes and development environments, production setups however require robust managed solutions.

/Automate DevOps, boost productivity & developer experience

2024-11-13

Serverless AWS DevOps

In today’s fast-paced development environments, reducing manual tasks is crucial for productivity. This talk will explore how MyMoney, fintech market leader in Sweden, leveraged Slack integrated with AWS, creating an event-driven solution, to automate tasks across a multi-account setup. Learn how this journey enhanced productivity and security by eliminating repetitive tasks, minimizing human error. A key aspect was integrating alarms and notifications directly into Slack, enabling developers to take immediate action on system alerts. We will look at the problems, implementation, and challenges faced. Join us to gain valuable insights and practical tips for transforming your workflows. Audience will learn how we integrated our DevOps way of working and tooling with Slack to automate tasks, boosting productivity, creating better developer experience and at the same time reducing cost. Key Takeaways: - How to automate task to increase developer experience - How to create an event-driven solution across multiple AWS accounts - Using automated scheduling to save cost.

Serverless website analytics with Lambda@Edge

2024-11-06

serverless AWS analytics

Talk about the innovative approach of utilizing AWS Lambda@Edge to gather statistics for a static website, focusing on server-side data collection for page views.

Serverless AI powered content moderation service

2024-10-31

aws, ai, security, serverless

In this post, I extend the File Manager service I built previously by adding content moderation capabilities. The original service stores files in S3 and records them in a DynamoDB table, using a serverless, event-driven approach. Now, with AWS GuardDuty and Rekognition, I’ve enhanced the service with malware scanning and image moderation.

Building resilient serverless workloads: Navigating through failures

2024-10-03

Serverless resiliency AWS

Serverless and event-driven workloads on AWS are well known for their inherent high availability and scalability, offering a robust platform right out of the box. However, in the world of cloud, it's a well known that everything fails all the time. This reality becomes even more complex when serverless systems interact with non-serverless components, which may not possess the same agility in scaling.

A arte de sobreviver à re:Invent: Dicas de um veterano de oito anos

2024-09-25

aws, re:Invent

🇺🇸 🇩🇪 🇪🇸 🇫🇷 🇮🇹 🇵🇹

A re:Invent é uma das maiores, se não a maior, conferências de tecnologia do mundo. Participar da re:Invent pela primeira vez pode ser avassalador. Neste post, tento dar alguns conselhos sobre como sobreviver não apenas à re:Invent, mas também a Las Vegas como um participante de primeira viagem.

The art of surviving re:Invent: Tricks from an eight-year veteran

2024-09-25

aws, re:Invent

🇺🇸 🇩🇪 🇪🇸 🇫🇷 🇮🇹 🇵🇹

re:Invent is one of, if not the biggest, tech conferences in the world. Attending re:Invent for the first time can be overwhelming. In this post, I try to give you some advice on how to survive not only re:Invent but also Las Vegas as a first-time attendee.

L'art de survivre à re:Invent : Astuces d'un vétéran de huit ans

2024-09-25

aws, re:Invent

🇺🇸 🇩🇪 🇪🇸 🇫🇷 🇮🇹 🇵🇹

re:Invent est l'une des plus grandes conférences technologiques au monde, sinon la plus grande. Assister à re:Invent pour la première fois peut être accablant. Dans cet article, j'essaie de vous donner quelques conseils pour survivre non seulement à re:Invent mais aussi à Las Vegas en tant que participant pour la première fois.

El arte de sobrevivir a re:Invent: Trucos de un veterano de ocho años

2024-09-25

aws, re:Invent

🇺🇸 🇩🇪 🇪🇸 🇫🇷 🇮🇹 🇵🇹

re:Invent es una de las conferencias tecnológicas más grandes del mundo, si no la más grande. Asistir a re:Invent por primera vez puede ser abrumador. En esta publicación, intento darte algunos consejos sobre cómo sobrevivir no solo a re:Invent sino también a Las Vegas como asistente por primera vez.

Die Kunst, re:Invent zu überleben: Tipps von einem Achtjahresveteranen

2024-09-25

aws, re:Invent

🇺🇸 🇩🇪 🇪🇸 🇫🇷 🇮🇹 🇵🇹

re:Invent ist eine der größten, wenn nicht sogar die größte Tech-Konferenz der Welt. Der erste Besuch bei re:Invent kann überwältigend sein. In diesem Beitrag versuche ich, Ihnen einige Ratschläge zu geben, wie Sie nicht nur re:Invent, sondern auch Las Vegas als Erstbesucher überleben können.

The art of surviving re:Invent: Tricks from a eight year veteran

2024-09-25

aws, re:Invent

🇺🇸 🇩🇪 🇪🇸 🇫🇷 🇮🇹 🇵🇹

re:Invent is one of, if not the biggest, tech conferences in the world. Attending re:Invent for the first time can be overwhelming. In this post I try give you some advice how to survive not only re:Invent but also Las Vegas as a first time attendee.

Building a serverless connected BBQ as SaaS - Part 4 - AuthZ

2024-09-20

serverless, aws, saas, IoT

In part four of the series about the world of BBQ, where tradition and technology rarely cross paths. The future of grilling is here, and it’s connected, smart, and runs on the cloud! We look at the key difference between Authentication and Authorization in a SaaS solution. We introduce a new authorization architecture with a centralized Policy Decision Point (PDP) and distributed Policy Enforcement Points (PEPs) implemented serverless with API Gateway and Lambda.

Building resilient serverless workloads: Navigating through failures

2024-09-17

Serverless resiliency AWS

Serverless and event-driven workloads on AWS are well known for their inherent high availability and scalability, offering a robust platform right out of the box. However, in the world of cloud, it's a well known that everything fails all the time. This reality becomes even more complex when serverless systems interact with non-serverless components, which may not possess the same agility in scaling.

Serverless website analytics with Lambda@Edge

2024-09-11

serverless AWS analytics

Talk about the innovative approach of utilizing AWS Lambda@Edge to gather statistics for a static website, focusing on server-side data collection for page views.

Serverless website analytics with Lambda@Edge

2024-08-24

serverless AWS analytics

Talk about the innovative approach of utilizing AWS Lambda@Edge to gather statistics for a static website, focusing on server-side data collection for page views.

Building a serverless connected BBQ as SaaS - Part 3 - Tenants

2024-08-23

serverless, aws, saas, IoT

In part three of the series about the world of BBQ, where tradition and technology rarely cross paths. The future of grilling is here, and it’s connected, smart, and runs on the cloud! I continue with tenant management using an serverless and event-driven approach with EventBridge, StepFunctions, API Gateway, Lambda, and Cognito User Pools.

How I extend my blog with gamified learning

2024-07-25

aws, event-driven, serverless

One of the major reason that I write all of these blog posts is to help people learn about cloud and AWS. How would you know that you understood what you read and learned from it? In this post I discuss how I introduced gamified learning by adding a quiz from kvist.ai on my blog posts, directly from my CI/CD pipeline running as an event-driven system using Amazon EventBridge and AWS StepFunctions.