The AWS STS service is a core security service that issues temporary credentials. It is the central component of multi-account authentication and single sign-on. In this post, I compare the permanent credentials of IAM users vs the temporary credentials of roles. I also describe the six methods that can be used to request temporary credentials, …
AWS recently added AWS Network Firewall to its service offerings. AWS Network Firewall is a Layer 4 security device that complements network ACLs, and security groups, and that can do VPC to VPC traffic inspection. Priced at over $250 per month per interface, it is mostly aimed at large organizations with strict security requirements. Typical …
AWS Network Firewall – A Robust Network Firewall Service from AWS Read More »
Database administration is a crucial aspect of IT operations and it’s often a difficult one. Using a managed database solution is a good idea to avoid headaches while maintaining your application availability. A managed database service worth considering is AWS Aurora Serverless v2, recently announced at re:Invent 2020. Compared to a traditional database which is …
AWS Aurora Serverless v2 – The Serverless Database that Scales Read More »
In this post, I’ll go through the process of setting up a highly available VPN connection between GCP and AWS with dynamic route propagation through BGP. AWS does not support multiple IP addresses on a single customer gateway, therefore 4 tunnels are required to make this setup work. Overall, the setup can be summarized as: …
How to establish a highly-available VPN connection between AWS and GCP Read More »
In this post, I will describe, step-by-step, how to use your existing Office365 credentials to login to your AWS account, and how to assign AWS permissions to your current Office 365 users. I’m assuming you already have (1) an Office 365 subscription and (2) an AWS account. 1. Login to Azure Active Directory a) In …
Tell us about your situation and we’ll figure out the best option for you and your project