Git tips and tricks
A few Git tips I’ve learned the hard way.
Update your RDS SSL certificates
Have you recently logged into your AWS console and seen this message in RDS?
Security and Compliance in the Cloud
What’s useful, where to start and how this all relates to operational realities.
Multi Account AWS Infrastructures with tfctl
At The Scale Factory we’ve been building secure, multi-account AWS infrastructures for a long time – well before AWS Organizations was a thing. Today architects are spoilt for choice with solutions like Landing Zone, Control Tower and, coming soon, the Terraform Landing Zone. All of those let you provision new accounts at the press of […]
AWS Security Features for SaaS Workloads
As a cloud service provider, you’re responsible for making sure that the application code, the infrastructure to run it, and your customers’ data are all available when your customers expect them to be. You can make use of the security controls already available from your cloud infrastructure provider to help secure your workload. Here’s an […]
Cloud Tenancy Types to Suit Everyone
Pick the right model to suit your SaaS product and your set of customers.
Using Multiple kubectl Versions with Minimal Faff
In a previous article I explained how subcommands let developers make command line tools that other people can extend. Here’s a way to use that technique to support multiple versions of kubectl with minimal faff. kubectl only officially supports a version skew of one minor version; if you have the latest kubectl and want to […]
Securing S3 Buckets with s3audit
These days it can seem like we don’t have to wait very long for another data breach involving an insecure S3 bucket. Such data breaches generally involve private data being stored in an S3 bucket which allows public access. Photo by Gregory Culmer on Unsplash This year alone we’ve seen data breaches from Teletext Holidays, […]
Migrating to Fargate from ECS with EC2
You’ve heard all the reasons why you should migrate to Fargate, but what do you need to think about when doing a migration? You have two options for deploying a containerised application to AWS ECS. With the EC2 launch type you deploy your applications to a fleet of EC2 instances which you manage. The Fargate […]
Using CodePipeline to Deploy to an S3 Bucket In Another Account
A common strategy when using CodePipeline is to upload files to an S3 bucket as part of the deployment process. This works great for a simple pipeline where the pipeline and the S3 bucket exist in the same account. But imagine a more complicated situation where you want to deploy artifacts to another AWS account. […]