In the AWS environment: Very simple AWS diagram This is exactly the architecture that cloud providers like AWS use for security and…
AWS
EKS PersistantVolumeClaim cannot be destroy solution terraform
If you are using Kubernetes version >= 1.31 PVC on AWS EKS, by default will add finalizer kubernetes.io/pvc-protection. This is a…
Accelerate China region browsing experience via AliYun Global Accelerator
Setup AliYun GA Setup HAProxy / Nginx to load subdomain HaProxy solution Nginx Solution
Kopia retention setup policy
Global policy Set customize snapshot Set Kopia maintenance References
asdf manage multiple version Terraform with GCP
Last update: 2022-08-03 We will use asdf as version manager with Terraform. Installation I will use Homebrew (Mac) + zsh…
CDK Bootstrap failed due to S3 bucket existed
Error: Lower version of bootstrap stack version Source from Stackoverflow: https://stackoverflow.com/questions/62972959/aws-cdk-error-bucket-policy-already-exists-on-bucket Due to Cloudformation doesn’t allow custom bucket handle by…
AWS CDK Wafv2 enable logging the Custom Resource way
Expectation We need to collect all WAF logs to S3 bucket. But Cloud Formation or AWS CDK cannot easily configure…
How AWS Lambda works with SSM Secure string
Env: VScode, Mbpr, aws-cdk:1.25.0, Typescript Implementation By default I hope I can inject SSM secure string to a Lambda, unfortunately,…
Allowing AWS Lambda reaching Internet via NAT and VPC
Here is the example show you that how to route AWS Lambda to internet through VPC and NAT