tl;dr If you want to query a day of your s3 server side logging data and find Athena abort because the underlying s3 bucket throttles read, use SymlinkTextInputFormat S3 has become a fundamental building block in many AWS deployment. When you run into unexpected issues with S3, you need to…

Target audience: folks who are starting to manage multiple EC2 hosts and have yet to deploy a observability platform. This week we learnt about DirtyPipe Linux vulnerability. In order to investigate which hosts are affected, I need to vet through all the EC2 hosts I have in the company and…

Why does this article exist? If you are using Okta (funny me too), this AWS blog article should be sufficient. However, you need to be careful if you are using Okta along with AWS SSO because you are managing multiple AWS account under an organization (which I am), you technically…

I’ve wanted to write up a short introduction to email security. If you are in a well setup shop, email security is not interesting because it is all done already. (Of course, if you are deep in email security domain, you know it continues to be cat-and-mouse game.) What if…

I want to write down my recent experience with serverless framework and AWS IAM. Like others, the infrastructure I work on uses terraform. I have atlantis and terraform setup, so other developers don’t need expansive privilege to provision infrastructure on AWS. The actual deployment is done via atlantis using an…