Global KMS keys and secrets in AWS

I absolutely love encryption and secret management in AWS. Don’t get me wrong, it does deserve some love here and there but it’s coming together quite well. In this post I want to give you a brief introduction on how to manage KMS keys and secrets in Secret Manager globally. Multi-region KMS key July last year AWS introduced multi-region keys. A new capability that lets you replicate keys from one region into another....

January 23, 2022 · 4 min

AWS remote backend module

Everytime I have to setup a remote backend in AWS I end up getting slightly more annoyed. I’m either copy pasting code from previous projects (where I manage to improve it after every copy-paste) or I deploy a CloudFormation stack that I forked a while ago from a colleague. It was time to take matters into my owns hands, why not create a Terraform module for this? After all, these remote backends are not rocket science....

January 20, 2022 · 2 min

Delete old SageMaker resources

Imagine creating hundreds of SageMaker resources a day (models, pipelines, etc). You’ll quickly end up with a very polluted environment where searching for a specific resource quickly turns into a tedious thing to do. After running into this problem several times a day it became essential that we sould tidy up. We decided to create a Lambda function that takes care of deleting the SageMaker models using boto3, invoked through a scheduled EventBridge rule....

January 15, 2022 · 2 min

Latency based routing in AWS

Distance affects performance, going further away latency can easily reach a third or half of a second for a round-trip. This could be a bummer when you serve customers globally. Luckily there’s.. Global Accelerator Global Accelerator solves a few common DNS problems1 as it’s not relying on IP address caches. It has 2 static IPv4 addresses as a single entry-point for users to connect through and there’s no DNS configuration for you to maintain....

November 14, 2021 · 6 min

Behind the scenes, Lambda

Writing code and deploying it to AWS Lambda is as easy as baking a cake (depending on the type of cake). Lambda performs the heavy lifting for you, from provisioning to scaling. But where is the magic happening and how does it actually work under the hood? Lets find out together! Lambda is split into a control plane and data plane. Each plane is responsible for a specific set of activities in the service....

June 8, 2021 · 10 min