My AWS Rocks!

Thoughts, stories and ideas on making your AWS solutions rock.

AWS Golden Jacket; Is it worth the race?

Why did I end up getting them all?

Getting all AWS certifications is not something I set out to achieve at the start. So why did I end up getting them all? This post takes a look at 6 reasons why you might want to consider before taking on the challenge.

AWS Well-Architected - Why so many get it wrong

How to become 'well-architected'.

Analysis of why organizations struggle with Well-Architected reviews - common misunderstandings, pillar misinterpretation, and enterprise architecture patterns.

You put what in a public subnet‽

Why make something public vs private

Security exploration of common subnet design mistakes - why many resources shouldn't be public and better alternatives like NLBs, ALBs, and bastion hosts.

Troubleshooting with VPC Flow Logs

How to understand VPC Flow Logs and use them to troubleshoot connectivity in AWS.

So you built and secured your VPC. But solutions are not working? How to understand VPC Flow Logs and use them to troubleshoot connectivity in AWS.

How to use NACLs and Security Groups

Where and how should you use NACLs and Security Groups to ensure you have a secure network on AWS.

Practical guide to implementing layered network security using NACLs and Security Groups in multi-tier VPC architectures and production environments.

Network Access Control Lists vs Security Groups

What are NACLs and Security Groups? What are the differences? How do they work?

Technical comparison of Network ACLs and Security Groups - understanding stateful vs stateless processing, rule evaluation, and when to use each.

Are you 'The One'

My CloudFormation challenge for the AWS Global Certified Community code challenge.

Walkthrough of CloudFormation challenge demonstrating common infrastructure code vulnerabilities, security pitfalls, and remediation strategies.

Why use a Transit Gateway

Transit Gateway or VPC Peering? A common question but not an easy answer. This is why I recommend Transit Gateway for anything over a POC.

Comprehensive analysis of Transit Gateway vs VPC Peering for hybrid network connectivity - comparing cost, throughput, VPN integration, and scalability.