AppSync GraphQL Task Manager — Notes
Cognito-authenticated AppSync GraphQL API with DynamoDB, JavaScript resolvers, user-scoped task access, and Admins group authorization.
Cognito-authenticated AppSync GraphQL API with DynamoDB, JavaScript resolvers, user-scoped task access, and Admins group authorization.
WebSocket route keys ($connect, $disconnect, $default), MOCK integration setup, CLI inspection commands, and Lambda handler patterns for custom routes.
Lab walkthrough notes for RDS audit logs, CloudWatch export, EventBridge rules and pipes, FIFO SQS pipelines, AWS Backup, and related IAM policies.
Python Lambda handler patterns, deployment packages, virtual environments, layers, and packaging notes for boto3 and third-party dependencies.
Runbook for securing REST and HTTP APIs with Cognito User Pools (JWT authorizer) and Identity Pools (IAM/SigV4), including OAuth grants, trust policies, and scopes.
Velocity Template Language (VTL) examples for API Gateway proxy integrations with DynamoDB—PutItem, GetItem, and custom JSON responses.
Install Argo CD on EKS, expose the server with a LoadBalancer, retrieve the admin password, and log in from the CLI.
EventBridge rules, event patterns, input transformers, archive/replay, pipes, scheduler, and DLQs.
End-to-end Lambda deployment pipeline using CodeCommit, CodeBuild, CodePipeline, and CodeDeploy canary traffic shifting.
Curated Well-Architected, prescriptive guidance, workshops, and hands-on lab templates for EKS, networking, and data.
Quick-reference kubectl, eksctl, ECR, FSx, EBS, and VPC Flow Logs commands for EKS day-2 operations.
End-to-end GitOps from CodeCommit through CodePipeline to Argo CD on EKS.
Quick-reference patterns for CodePipeline, CodeBuild, and CodeDeploy setups.
Operational runbooks for Amazon RDS day-2 checks, Redshift COPY loads from S3, and Athena tables for VPC Flow Logs forensics.
BuildSpec, AppSpec, and task definition patterns for ECS blue/green deployments and Lambda pipelines with Amazon ECR.
Notes on egress-only VPC routing with AWS Transit Gateway.
Expose services on EKS via the AWS Load Balancer Controller and ALB Ingress.
Repository hardening for EKS workloads—scan on push, immutable production tags, and lifecycle policies for cost control.
EKS Notes
Initial EKS cluster setup including IAM roles, nodes, CNI, and ECR.
Copy-paste trust, identity, resource, boundary, SCP, session, and VPC endpoint policies with a rapid troubleshooting checklist.
Common IAM policy condition keys and copy-paste examples for S3 encryption, date/time, tags, IP, MFA, region, and other scenarios.
Install Karpenter on an existing EKS cluster for node autoscaling.
KeyCloak Cognito Auth
Reference videos and AWS resources for Kinesis Data Streams, producer/consumer patterns, and Kinesis Data Analytics.
Minimal YAML samples for common Kubernetes resources on EKS.
EKS version guidance, access entries, Pod Identity vs IRSA, and day-2 cluster operations for Amazon EKS.
Install and configure Kyverno policy engine on Amazon EKS.
EventBridge, SQS, DynamoDB, and RDS event pipeline patterns.
Set up Grafana and Prometheus on EKS with CloudWatch observability.
Runbook for Network Firewall, Transit Gateway hub-and-spoke, VPC Lattice, and centralized inspection routing patterns.
Phase-by-phase migration from in-cluster PostgreSQL to RDS, Secrets Manager, SQS, SNS, and DynamoDB on Amazon EKS.
Copy-paste EKS, IRSA, RDS, SQS, ingress, and add-on commands for the OrderFlow migration project.
Wire Prometheus Alertmanager to SNS and SQS on EKS.
Run Prometheus on EKS with persistent volumes via the AWS EBS CSI driver.
11-phase walkthrough building an event-driven order pipeline with SAM, Lambda, HTTP API, EventBridge, SQS, and DynamoDB.
SAM build, deploy, local invoke, scaling policy, and CodeDeploy commands for the serverless order-events project.
Complete microservices lab on EKS—VPC, Flask backend, ALB ingress patterns, autoscaling, Prometheus, Grafana, GitOps, and secrets.
VPC Transit Gateway
Deploy a lab VPC with public and private subnets using CloudFormation.
How virtual CPUs map to physical cores on Intel, AMD, and Graviton instances—and how vCPU limits affect EC2 capacity.
No posts match your filters.