Overview Landing Zone Accelerator (LZA) on AWS solution deploys a cloud foundation that is architected to align with AWS best practices and multiple global compliance frameworks. With this solution, customers with highly-regulated workloads and complex compliance requirements can better manage and govern their multi-account environment. …

Amazon CodeCatalyst is a new addition to the AWS development and delivery toolbox. Comparing to the AWS Code family (CodeCommit, CodeBuild, CodeDeploy, CodePipeline…), it is an integrated DevOps platform rather than a single purpose service. Based on what I found in my lab, I assume it uses some of the…

Amazon CodeWhisperer is a Generative AI powered coding companion. It is very exciting to see that Amazon CodeWhisperper is now generally available and FREE for individual use! As an individual user, you get unlimited number for code suggestions and 50 code security scan each month. …

As the name suggests, mask-words-in-image can mask words in an image file. User specifies which words should be masked, it can be any combinations of the following three types. Regular expressions Keywords PII (Personally Identifiable Information) Under the hood, it use the Text Detection capability in Amazon Rekognition or AWS Textract to detect the texts in the image, then use Amazon Comprehend to detect PII entities in texts.

In my previous blog Why you need CodeGuru, I mentioned that how I used CodeGuru to detect a high severity bug in a piece of Python code. Just out of curiosity, I am wondering what ChatGPT is going to tell me about the same code. This the Python Code: def…

There are a few OUs within the AWS Organizations in my test environment: Security, Prod, Dev, Suspended, Infrastructure and Test. The Test OU has multi layer nested child OUs. I wrote the following Python code to query the total number of OUs in the AWS Organzation. …

As mentioned in AWS Config Advance Queries against Aggregator sample, the Advance Queries is really handy when you are trying to get a list…

Something that I learned Today — I was working on a CodePipeline pipeline which gets the source codes from a CodeStar connection that was…

Below is the typical ingress solution for many organizations’ AWS workloads. The data flow is: Users -> CDN (e.g Akamai，Cloudflare) -> Ingress internet-facing ALB -> Ingress ASG (e.g Nginx, HAProxy) -> TGW -> Workload internal ALB -> Workload applications (ASG or K8S services). As you can see, the improvements are…