Author | Lightnews

Vlad Ionescu (he/him) @vladionescu.me · 24d

As a complete aside, it have been nice for AWS to also maintain, update, and enhance the github.com/bottlerocket... 🙃

GitHub - bottlerocket-os/bottlerocket-ecs-updater: A service to automatically manage Bottlerocket updates in an Amazon ECS cluster.

A service to automatically manage Bottlerocket updates in an Amazon ECS cluster. - bottlerocket-os/bottlerocket-ecs-updater

github.com

Vlad Ionescu (he/him) @vladionescu.me · 24d

Are the images used that different from the official Bottlerocket ECS AMIs at docs.aws.amazon.com/AmazonECS/la... ?

They would have to automate the AMI rollout which, assuming folks aren't using pet EC2s, is not *that* complex. It's not easy but it's not "13% of EC2 spend" levels of complex either

1 1

Reposted by Vlad Ionescu (he/him)

Ben Bridts @benbridts.be · Jun 26

I did a fun thing and gave every Belgian access to my AWS Account (or: playing around with IAM Roles Anywhere)
cloudar.be/awsblog/sign...

Sign in with your eID: Using AWS IAM Roles Anywhere with a SmartCard Reader

Using temporary credentials to access resources, has long been a best practice and is usually straight-forward if the person or machine that is starting the action is already known in AWS (either by u...

cloudar.be

1 6

Vlad Ionescu (he/him) @vladionescu.me · Jun 19

Wooo welcome to Bucharest 🎉👋🎉

2

Vlad Ionescu (he/him) @vladionescu.me · Jun 14

(I felt that I had to reply to this since I was a big fan of AVP's potential aaaaaand then I totally dissapeared from social media)

1

Vlad Ionescu (he/him) @vladionescu.me · Jun 14

AVP isn't a product that AWS takes seriously so I'd suggest also taking a look at Oso 😅

1

Vlad Ionescu (he/him) @vladionescu.me · May 3

Woooo 🎉🤗🎉

5

Reposted by Vlad Ionescu (he/him)

Clemens Vasters 🇪🇺🇩🇪 @clemens.vasters.com · Apr 30

"To further cement the nexus between Microsoft and Europe, going forward our European datacenter operations and their boards will be overseen by a European board of directors that consists exclusively of European nationals and operates under European law."

blogs.microsoft.com/on-the-issue...

Microsoft announces new European digital commitments - Microsoft On the Issues

As a multinational company, Microsoft believes in trans-Atlantic ties that promote mutual economic growth and prosperity.

blogs.microsoft.com

4 15

Vlad Ionescu (he/him) @vladionescu.me · Apr 26

*hugs*

This was also (one of the reasons) I was driven away from social media / dramatically reduced my public web presence too. The tech community is wildly toxic but the open-source fanatics are... a particular level of abhorrent

1 1

Vlad Ionescu (he/him) @vladionescu.me · Mar 13

Lol, I would argue that before moats they need an actual product first (you know, something that's not a short-lived feature arbitrage)

1

Vlad Ionescu (he/him) @vladionescu.me · Jan 14

Hey @rmondello.com, if I remember correctly you were collecting feedback for Passwords. Is that still a thing?

If yes, I have 1.5 feature requests targeting power-users.
If no, no worries! Passwords is still a heck of a lot more awesome than I expected and I will still fully migrate to it ❣️

7

Vlad Ionescu (he/him) @vladionescu.me · Nov 18

It was all custom — some using GitHub Actions, some using custom tools.

7

Vlad Ionescu (he/him) @vladionescu.me · Nov 18

Still, this is not trivial to implement and, worse, this requires a serious company and serious developers (not only software engineers but product, testing, sales, support, etc).

That's surprisingly rare so... yeah, it'll remain a super-high-performing thing that few people talk about :(

8

Vlad Ionescu (he/him) @vladionescu.me · Nov 18

A few teams measured this and the metrics after 6 months were *mindblowingly* better!

One exception: on-boarding slowed a bit :lolsob: It was so hard getting new devs in and having them get used to "no, seriously, if checks are green we ship whatever to prod and it's fine! We have intense checks!"

1 2

Vlad Ionescu (he/him) @vladionescu.me · Nov 18

My answer: not enough tooling.

I worked with a bunch of teams that did post-PR code reviews (if the code is under a feature flag => PR is automatically approved, merged, and deployed to prod) but the setup required was non-trivial 😞

Everybody (including compliance) was super-happy with it tho!

2 6

Vlad Ionescu (he/him) @vladionescu.me · Oct 22

🙋

1

Vlad Ionescu (he/him) @vladionescu.me · Sep 17

They fixed it, with impressive speed: the docs are now a lot clearer and even the changelog has been updated with additional details ❣️

AWS received feedback and they took super-prompt action to address it — awesome job AWS!

1 4

Vlad Ionescu (he/him) @vladionescu.me · Sep 16

I was annoyed I was missing it but now I am properly devastated I won't be there 😭

1

Vlad Ionescu (he/him) @vladionescu.me · Sep 16

They have everything: from high-scale stuff (how delivery works at Tazz) to fast prototyping (prototype to prod in ~6 months with both tech and non-tech drama) to executive strategy, and so much more.

There's even a preview for re:Invent 2024!

1 1

Vlad Ionescu (he/him) @vladionescu.me · Sep 16

Holy heck does the the agenda for AWS Community Day Romania look awesome 🤯

I mean I was expecting it to be *good* but I wan't expecting it to be *this good*. It's amazing!

aws-community.ro#agenda

AWS Community Day Romania

aws-community.ro

1 3

Vlad Ionescu (he/him) @vladionescu.me · Sep 15

Fix is coming, as per the attached conversation with an AWS WAF PM.

1 2

Vlad Ionescu (he/him) @vladionescu.me · Sep 14

AWS WAF Bot Control moving bots from "un-verified" to "verified" means that bots that were previously blocked by default will now just get... counted.

Totally unexpected and not at all clear, right?
Don't you think this deserved a warning in the docs/announcement?

14/14

1 1

Vlad Ionescu (he/him) @vladionescu.me · Sep 14

Folks can of course change the default actions but we all know the power of defaults.

See Internet Explorer, Apple, Google, Chrome, and all the new cases on this topic 🫠

13/14

1

Vlad Ionescu (he/him) @vladionescu.me · Sep 14

By default, un-verified bots are a BLOCK.

If AWS WAF Bot Control doesn't know how to check the bot is indeed who it's saying it is, that means that it could be an attacker pretending to be a bot, so it is blocked by default.

12/14

1 1

Vlad Ionescu (he/him) @vladionescu.me · Sep 14

By default, verified bots are a COUNT.

AWS WAF Bot Control is able to guarantee this is indeed the bot it's saying it is, so the request is neither blocked nor allowed.

11/14

1 1