To have a better observability in our system, the first step is to gather performance data. In this article, we will try to understand the four key telemetry data types which we rely on to gain insights into system performance. The acronym that encapsulates these data types is MELT, which…

In my previous article, we discussed interoperability standards currently being explored for a Multi-cloud environment. Interoperability Standards for Multi-cloud Environment As cloud computing has become a dominant model for distributed computing, with widespread adoption across industries…manmohan-bohara.medium.com In this article, we will discuss TOSCA one of the standards in detail. TOSCA stands for “Topology and Orchestration Specification for Cloud Applications." It is an open standard developed to describe and manage the deployment…

As cloud computing has become a dominant model for distributed computing, with widespread adoption across industries, multi-cloud has been proposed to mitigate various challenges due to the heterogeneity of various cloud providers such as security, privacy, trust, cost of cloud tenants, vendor lock-in etc. …

Do you remember, when you want to restrict access to your services/resources to certain IPs (Most of these IPs could be from your office network IPs, datacenter IPs, your overseas office IPs etc), You head to security group and realise that you have to add those IPs one by one…

When you are starting with AWS VPC and specially when you are working with an existing VPC setup, it’s difficult to differentiate between public and private subnets. As we know, the name is just a tag in AWS, and that doesn’t make sure what it says. …

Create a simple flask Rest API, containerise it using docker and deploy it as service in Elastic Container Service — AWS provides container services to deploy and run container applications. One of the services is Elastic Container Service i.e. ECS. In this article, we will see how to create a sample flask RestAPI, containerize it with docker and deploy this docker image to ECS. Before we start, lets define few…

Push CloudTrail events to a centralized AWS account using CloudWatch event bus and automatically tag resources on creation. — In my previous articles, I had been emphasizing on using a centralized auditor account to enforce best practices and governance in your organization. The auditor account can access resources in linked accounts by assuming IAM role. …

Detect and remove unused IAM credentials. — To increase the security of our AWS account, we need to remove IAM user credentials (that is, passwords and access keys) that are not needed anymore. Removing unused credentials is one of the best practices for IAM. …

Detect unintended IAM access, revoke unauthorized user’s IAM access and send notification to your slack channel. — In my previous articles, I covered programming basic IAM features. In this article, we will see how to detect unintended IAM access, revoke unauthorized user’s IAM access and send notification to your slack channel. First of all, we will create a slack app. As shown below, Go to https://api.slack.com/ —…