Sergei 🇺🇦 @sshvetsov

Ukrainian-born 🇺🇦 Canadian 🇨🇦, living in Indonesia 🇮🇩. Recovering BOFH with 20+ years of IT experience. The posts are my own. blog.shvetsov.com Indonesia Joined December 2007

Tweets

2K
Followers

122
Following

219
Likes

2K

Aidan W Steele @__steele

2 years ago

The AWS CLI (v2.12.0+) can be used to create a tunnel to connect to RDS DBs now, but I created a tool that tries to make it more convenient. 1. Create EIC endpoint 2. Download tool 3. Run `rdsconn p` 4. Run `psql -h 127.0.0.1 ...` github.com/aidansteele/rd…

7 41 214 35K 88

Sergei 🇺🇦 @sshvetsov

2 years ago

This is awesome and should have been the main announcement instead of AWS touting new way to use SSH.

Aidan W Steele @__steele

2 years ago

This is awesome and should have been the main announcement instead of AWS touting new way to use SSH.

9 8 78 18K 11

0 0 2 59 0

Aidan W Steele @__steele

2 years ago

@ben11kehoe @benbridts I've dug through the AWS CLI code and reimplemented it. This API *can* be used to connect to an RDS instance, I just queried my Aurora Postgres DB with it. So that's one reason to like this over Session Manager (zero EC2 instances required)

9 8 78 18K 11

Sergei 🇺🇦 @sshvetsov

2 years ago

#AWS #Config can finally exclude specific resource types from change tracking aws.amazon.com/about-aws/what…. Unfortunately, no #CloudFormation support, meaning customers are left to configure exclusions manually for each account and default and opted-in region in their organization.

1 0 0 74 0

Nick Smit @nickste

2 years ago

I'm excited to announce the Amazon EventBridge Event Bus latency improvements are now live in all AWS Regions 🚀! We're observing p50 of 90ms and p90 of 140ms - an 80% improvement in latency. 🧵 aws.amazon.com/about-aws/what…

12 83 309 76K 23

Aidan W Steele @__steele

2 years ago

Last batch of tickets for the best conference of the year goes on sale in a few days. I’ll be there!

fwd:cloudsec @fwdcloudsec

2 years ago

Last batch of tickets for the best conference of the year goes on sale in a few days. I’ll be there!

0 15 32 10K 1

2 4 12 4K 0

Olaf Conijn @OConijn

2 years ago

Calling all Security Hub and IaC geeks to join me at: github.com/org-formation/…

0 2 7 328 0

Aidan W Steele @__steele

2 years ago

To answer @QuinnyPig's question: I implemented something like this, and I want to implement it again. IMO, enriched VPC flow logs are an untapped source of extremely valuable data. I just don't have access to realistic training data and need help. Blog: awsteele.com/blog/2021/05/1…

6 10 51 9K 18

Download Image

Aidan W Steele @__steele

3 years ago

tl;dr you can now generate CloudWatch metrics via EMF simply by formatting the logs correctly - no need to screw around with request headers. This makes it much easier to use with ECS

What's New on AWS (Unofficial) @awswhatsnew

3 years ago

tl;dr you can now generate CloudWatch metrics via EMF simply by formatting the logs correctly - no need to screw around with request headers. This makes it much easier to use with ECS

0 6 15 8K 3

1 3 22 3K 3

Troy Hunt @troyhunt

13 years ago

Please RT! Help @LogMeIn understand the impact of allowing scammers to easily use their product: troyhunt.com/2012/06/how-lo…

3 138 17 0 0

Sergei 🇺🇦 @sshvetsov

3 years ago

Finally! I remember arguing with AWS reps about this 3 or so years back. What sucks is that this metric still isn't in CloudWatch by default.

Nick Matthews @nickpowpow

3 years ago

Finally! I remember arguing with AWS reps about this 3 or so years back. What sucks is that this metric still isn't in CloudWatch by default.

3 8 33 4K 4

0 0 1 55 0

Nick Matthews @nickpowpow

3 years ago

If you use both inbound and outbound security group rules in AWS, you only have a certain amount of connections you can maintain until new connections are rejected. Previously a technicality only in the docs, there is now a user facing metric: aws.amazon.com/about-aws/what…

3 8 33 4K 4

Scott Piper @0xdabbad00

3 years ago

This will be a little chaotic. Different IAM privileges depending on when your account was created and they are retiring some privileges.

What's New on AWS (Unofficial) @awswhatsnew

3 years ago

This will be a little chaotic. Different IAM privileges depending on when your account was created and they are retiring some privileges.

0 6 16 17K 8

2 6 29 7K 5

Sergei 🇺🇦 @sshvetsov

3 years ago

Nice. This makes slightly easier to justify #CloudWatchLogs ingestion costs.

Randall Hunt @jrhunt

3 years ago

Nice. This makes slightly easier to justify #CloudWatchLogs ingestion costs.

5 14 90 14K 6

0 0 0 52 0

Randall Hunt @jrhunt

3 years ago

aws.amazon.com/about-aws/what… AWS has updated the CloudWatch logs PutLogEvents requests per second quota from 5 to.... "lol, just try to take us down." It's a boss move to just entirely remove an RPS quota.