What is the iam:PassRole permission in AWS IAM

Read more >

February 20, 2025

---

AWS CDK best practice: include the region in the stack's ID

Read more >

February 17, 2025

---

A one-liner for getting the exact versions of applications

Read more >

February 14, 2025

---

AppSync footgun: util.error does not work if called with non-string arguments

Read more >

February 12, 2025

---

[Article] Developer practices for long-term product maintainability

It is all too easy to focus on feature X that has to be delivered in 2 weeks and lose sight of the long-term, especially when everybody in the room is fixated on that. My experience is that it's more important to focus on the future instead and not make sacrifices that will bite later.

Continue reading →

Tamás Sallai

January 30, 2025

---

Finally, it's possible to host EC2 instances without paying the public IPv4 price using CloudFront VPC origins

Read more >

January 10, 2025

---

Deployment circle with CloudFront and Terraform

Read more >

January 8, 2025

---

How hard it is to disable an IAM user when it does something suspicious?

Read more >

January 6, 2025

---

AWS

Aurora

[Article] A first look into AWS's new Aurora DSQL database

AWS recently announced the Aurora DSQL database that should fit into the space between the full-blown RDS and the way more restricted DynamoDB. It's still early days as it is currently in preview but there are quite a lot of information out there how to use it.

Continue reading →

Tamás Sallai

December 23, 2024

---

AWS

CloudTrail

EventBridge

[Article] CloudTrail's horrible developer experience

CloudTrail has probably the worst developer experience I had with AWS recently. CloudTrail itself is an immensely useful service: it gives insights into the events that are happening in an account, such as who made changes to what resource, console logins, and also to some extent who accessed what.

Continue reading →

Tamás Sallai

September 17, 2024

---

AWS

CloudFormation

IAM

Security

[Article] AWS management account starter pack

There are a couple of best practices when setting up a new management account in AWS. My current list:

Continue reading →

Tamás Sallai

August 27, 2024

---