AWS Support App in Slack is a new AWS feature that allows users to manage AWS support case in Slack. This is pretty useful for teams that are heavily on Slack. Here is a quick summary of what I have learned so far: User can create/search/resolve cases with AWS support…

It is quite convenient to use the AWS Config advance queries against the aggregator, a simple use case is like — Find out which instances in which accounts have public IP address cross the organisation. Instead of writing a script to describe instances across all the accounts, we can just…

Continue with my previous post Automate VPN connection and its TGW attachment, in this post I would like to share the solution for VPN failover via TGW attachment. The key components in the solution are: Network Manager for Transit Gateway EventBridge Lambda The basic idea is: Register TGW to Network…

If you use the CloudFormation resource AWS::EC2::VPNConnection to create the VPN connection and attach it to the Transit Gateway (TGW), you may notice that it does not return the TGW attachment ID. …

A couple years back I wrote a post to share how to create AWS instance profile for on-premise servers. That was to use SSM agent and Lambda function to manage the IAM credentials for the on-premise servers. …

Here we Go - my first side project ( Concierge) that is written in Go 😅 . It is a AWS CloudFormation compliance check tool which uses CloudConformity API to evaluate the CloudFormation stack compliance status. …

We recently noticed an interesting error in CloudTrail across multiple accounts: "errorMessage": "User: arn:aws:sts::123456789012:assumed-role/AwsConfigServiceRole/ConfigResourceCompositionSession is not authorized to perform: iam:CreateServiceLinkedRole on resource: arn:aws:iam::123456789012:role/aws-service-role/globalaccelerator.amazonaws.com/AWSServiceRoleForGlobalAccelerator because no identity-based policy allows the iam:CreateServiceLinkedRole action"

Does QuickSight increase CloudTrail cost? In short, it does. But it could be either minor or major. It really depends on your use case. As mentioned in another post AWS Cost Anomaly Detection, we noticed a dramatic CloudTrail cost in one of our AWS accounts. After some diggings, it turns…