We can use the AWS EventBridge event bus to receive events from various event sources such as AWS services, custom applications, SasS applications, etc. To do that, AWS EventBridge provides two types of event buses such as default and custom. In this example, I will show you how we can…

In this post, I am going to explain how we can scan docker images for vulnerabilities from a CI/CD pipeline. I use AWS CodePipeline to scan Docker images stored in AWS ECR. Note that I use AWS CDK for creating all the resources and you can clone the complete project…

Event Filtering AWS Lambda provides a feature to filter events that come from Amazon SQS, Amazon Kinesis, and Amazon DynamoDB. With this feature, Lambda only sends the filtered events to the handler function. Advantages of event filtering In some use cases, we may not need to process all the events that come from the event sources…

In this post, I will show you how we can create an ECS cluster with multiple ECS services using Terraform. Example As shown in the above diagram, this architecture consists of three services that run in public and private subnets in a VPC. Frontend service: This is the public-facing application that…

In this post, I will show you how we can create a Datadog dashboard using Terraform. In this example, I create a dashboard for monitoring AWS RDS metrics. Defining Datadog Dependencies and Keys You can create Datadog API and APP keys in Integrations > APIS Datadog Dashboard Widgets Widgets are the main building blocks of a dashboard…

In this post, I want to show you the API Gateway private integration feature with an ECS service running inside a private subnet. With this feature, we can easily expose any private API to the outside of the VPC. Steps Setting up a VPC Setting up an internal application load balancer …

Datadog is one of the best monitoring tools that can be used to monitor your cloud infrastructure. In this post, I will show you how we can use Datadog to monitor AWS Lambda functions. Steps Datadog integration with your AWS account Creating two simple Node.js Lambda functions Instrumenting the Lambda function …

AWS Config Auto Remediation feature helps to automatically remediate non-compliant resources evaluated by AWS Config rules. In this blog post, I will show you how we can use this feature to remediate any non-compliant S3 buckets which have access logging disabled. Steps Prerequisites Create an AWS Config managed rule (s3-bucket-logging-enabled) Create…

Canary Based Deployment In this post, I will show you how we can deploy an AWS Lambda function using the “canary-based” deployment strategy. The “canary-based” deployment helps to deploy a Lambda function gradually. With this approach, we can test the new version with some production traffic and roll back to the original if…