Wekanban.com

Amazon Web Services Config

This week I will explain Amazon Web Services Config, which is a inventory and configuration reporting service for your AWS assets. By using AWS config, you can view your AWS resources, their relationships and  configuration history. This enables us a good insight and all auditing, security analysis and other governance aspects. Today I’ll show how to configure AWS Config and an example of getting…

Amazon Web Services Unused EC2 Resources Checker

This week I will share a tool that finds unused AWS EC2 resources. This script basically finds the unused resources below, then sends an email using Amazon SES. Some of the resources is billed even if you don’t use them, so you can use this script to check if you have any. You can also check your bills and you can use “Trusted Advisor” if you have support package.

Resources checked: –…

Amazon Web Services Auto Scaling CLI Based Dashboard

This week I want to share an Amazon Web Services Auto Scaling Cli based Dashboard written in python using boto3. The script basically fetches your auto scaling groups and lists the configuration of them including ASG names, min,max and desired sizes, instances with status like health states and cpu usages and if ELB is associated to ASG, details for instances attached to ELB and their service…

S3 Bucket Permission Checker

This week I will share a basic S3 bucket permission checker tool. As you know AWS Trusted Advisor tool can help us to use best practices for our AWS environments. If you have AWS business or enterprise support, more features enabled for Trusted Advisor categories. One of these checkes is AWS S3 bucket permissions security. It show us our GlobalListAccess and GlobalWriteAccess enabled buckets. If…

Amazon Web Services CloudTrail

This week I will talk about Amazon Web Services CloudTrail. Cludtrail is the service that keeps all logs related to AWS API calls. For example, restarting an instance, creating a bucket, console login etc. When we enable CloudTrail, logs are have to be send to a S3 bucket and all logs are encrypted by using server-side encryption. Also logs can be send to CloudWatch log groups (to create metrics…

Amazon Web Services Key Management Service

This week I will talk about Amazon Web Services Key Management Service. KMS is used for creating and controlling the encryption keys that can be used for AWS services and for our own applications. It is configured under IAM console and currently not all AWS services are integrated with KMS. Today I will explain some basics about it and show a simple piece of python code that uses KMS.

By using…

Amazon Web Services Lambda

This week I will talk about Amazon Web Services Lambda service. Lambda is a Paas which can be used for event-driven backend applications.You can use it to send an email when a new user signs or deploy your code when you push your code to your repo and even scale your infrastructure fleet. To use Lambda, you just upload your Node.js code and the rest of the job is done via AWS, it’s AWSome isn’t…

Amazon Web Services Storage Gateway Snapshots

This week I will explain Amazon Web Services Storage Gateway Snapshots operations. Snapshots are used to access or restore our data, can be attached and used both in our on-premises or in EC2 as EBS. We can create snapshots as manually or automatically and snapshots are restored to either a storage gateway or to an EBS volume. Today I will demonstrate to take the snapshot of my volume ( I’ve…

Amazon Web Services Storage Gateway Monitoring

This week I will explain Amazon Web Services Storage Gateway monitoring. In my previous posts, I had configured a gateway-cached volume. To proactively maintain our gateway, we have to measure performance of our gateway and volume(s). So today I will tell about the necessary metrics we have to check for. As in AWS documentation, we have to measure performance:

1 – Between our application and our…

Amazon Web Services Storage Gateway Maintenance Tasks

This week I will continue with Amazon Web Services Storage Gateway maintenance tasks. In my previous post, I had explained how to configure a gateway-cached volume using Amazon Web Services Storage Gateway service. Today I will explain how to manage our disk capacities and how to resize our buffer,cache and storage volumes. Let’s start by storage volume.

Resize storage volume:Unfortunately…

Amazon Web Services Storage Gateway

This week I will explain Amazon Web Services Storage Gateway. Storage gateway is a basically a replication tool to use both on-promise and on AWS infrastructure. Common usage examples of storage gateway are backup, disaster recovery , file sharing and data replication. Two main storage gateway types are volume based and tape based. Before proceeding with the demo , I want to explain more details…

Amazon Web Services RDS Log Files

This week I will explain Amazon Web Services RDS log files. RDS enables us to view, download, watch, query and binary of our db instances log files. I will demonstrate how to check our logs using MySQL RDS instance. There are some options we have to know before we proceed with our demo. By default , AWS generates error logs. If we need to see slow query and general log files, we have to set them…

Amazon Web Services Rds Restore

This week I will explain Amazon RDS restore. If we somehow need to restore our data , AWS let us have different choices. We can use Amazon RDS snapshots or “restore to point in time” to restore our data. Before starting our demo, I want to explain Amazon RDS restore options. Amazon RDS snapshots are created automatically ( with automated backups ) and manually. Automated snapshots are deleted if…

Amazon Web Services Rds Cross-region Read Replicas

This week I will explain Amazon RDS Cross-region replication. We can use cross-region replication for different purposes. For example we can use this replica as a disaster recovery solution. We can replicate our data to the other region and if any problem occurs with the region, we can promote it to be a Db instance. Also we can redirect read operations to the read replicas to lower the latency…

Amazon Web Services RDS Encryption At Rest

This week I will start to explain amazon web services rds encryption. RDS is an AWS relational database service that supports MySQL,Oracle,PostgreSQL and MS SQL server. Also there is RDS for Aurora but this service is in preview mode. As other AWS services RDS is an easy manageable and scalable service. If you don’t want to manage your database service and underlying operating system, you can use…