davethemaker

Category: Virtual Networking

  • AWS Management & Monitoring

    When first setting up my AWS account, it was stressed on the importance of creating a Budget alarm, and also alerts (usually receveiving an SNS or email) for when budget or other resource limits were passed. So, my understanding of CloudTrail and CloudWatch has been very limited, but as I have begun to learn about…

  • Migrating to RDS

    In this post, I’m going to reference a lab that I am working on- the scenario is we have a single EC2 instance running Linux OS, an Apache server, and an app with PHP (LAMP stack). The instance is doubling as a database server, which is not ideal because then we are responsible on patching,…

  • EC2 Instance Monitoring

    I’ve gotten to the point where spinning up an EC2 instance feels pretty comfortable, and it’s pretty easy to scale out to include additional instances as needed. Amidst that robust ability to create more and more, however, it’s important to be able to look at the performance of each instance – because these are finite…

  • Data Protection w/ Encryption (KMS)

    One of the critical components of ensuring that data remains confidential, and other critical aspects such as nonrepudiation and authentication, is through the use of encryption methodologies. In this post, I’m going to walk through configuring AWS Encryption using the CLI, creating an encryption key using KMS (which will be used to encrypt and decrypt…

  • Patches! Using the Patch Manager ( w/ AWS Systems Manager)

    One of tthe challenges of mitigating vulnerabilities and building a robust defense against potential threats against networked systems includes making sure that OS and app software is up to date and patched against known vulnerabilities and security risks. Especially if there are a lot of instances involved! It’s so easy to spin up new EC2…

  • Network Hardening Using Amazon Inspector and AWS Systems Manager

    During my graduate studies in Information Systems, I was introduced to cybersecurity and became really interested in it. Since then, I’ve been focusing on learning cloud services and IaC, but I’m interested in pulling the security aspect in as well. To that effect, I’m going to be using Amazon Inspector and AWS Systems Manager to…

  • Deploying Container with Fargate

    Building on my previous post where I created a docker container and pushed it to Docker Hub, I’m going to be using the AWS ECS service to deploy said container, and I’ll be using the Fargate service. In ECS, I create a cluster named ‘inspiring_pictures_container’, and am a little perplexed because I don’t see the…

  • From local to EC2: Docker Apache Web App

    I’ve been following a tutorial which describes how to use containers within the AWS environment- it’s well done (Cantrill) but it does require the user (me) to simply download a pre-packaged container-ready file as part of a Cloud Formation deployment. That works for the intention of the author – provide a good, birds-eye view of…

  • Not cookies..Baking an AMI!

    In a previous post I manually spun up an EC2 instance and then installed and configured an Apache server and MariaDB to run a WP instance. It was useful for learning purposes, and as a reference of the benefits of automation! In this post, I’m going to be baking an AMI image, that is, creating…

  • EC2 Architecture via AWS Console

    For better understanding building out AWS architecture, and to include my using an architectural diagram to guide my efforts (bear with me, this is my fledgling attempt so it’s a bit rough!). Here’s what I will be building out – a basic architecture supporting the spinning up of an EC2 instance: The steps I plan…