https://cloudposse.com logo
Join Slack
Powered by
# aws
  • q
    seeking advice: What types of use of AWS in personal projects would make an early career candidate stand out? Trying to figure out which features/services I should use to satisfy meaningfully this frequent bullet in backend / fullstack / platform intern job descriptions • "Experience with / Exposure to ... cloud platforms (AWS, GCP, Azure)." sometimes they'll mention s3, dynamodb, cloudwatch etc. My most immediate goal is to deploy a MERN app, I'm getting an initial version up on Vercel/Railway to have something to show while I learn, but want the AWS experience. I've had LLMs tell me S3 + Cloudfront and AppRunner would be solid, or it might be too managed. Perhaps Elastic Beanstalk or ECS Fargate is better. It kind of loops around that, with some saying Beanstalk is old fashioned. Thought I'd ask some humans! What gives a strong signal? (i briefly (1 year) did sales/marketing in devops and now am transitioning into SWE, finishing a cs degree and applying to internships mostly. So a lot of cloud/devops terms are familiar at high level but haven't really used any cloud providers personally)
    b
    p
    • 3
    • 11
  • p
    Hello! I'm excited to share github.com/sqlxpert/aws-rcp-s3-require-intelligent-tiering , a resource control policy (RCP) that enforces the initial storage class for objects uploaded to S3 buckets with a particular bucket tag. (I am a fan of Intelligent Tiering and that's the likely application, but you can change the storage class and the tag.) It uses new AWS features, including S3 attribute-based access control (ABAC), introduced in November, 2025. There's also an optional service control policy (SCP) to prevent non-exempt IAM roles from enrolling and disenrolling buckets. There is a CloudFormation template as well as a native Terraform module. Multiple installations are supported, for different storage classes and tags. I hope it's useful, and I hope I'm earning my keep (unpaid 😆) as a new AWS Community Builder!
    🚀 3
    👍 3
    g
    • 2
    • 1
  • r
    With this feature, you can predictably name and create general purpose buckets in your own account regional namespace by appending your account’s unique suffix in your requested bucket name. For example, I can create the bucket mybucket-123456789012-us-east-1-an in my account regional namespace. mybucket is the bucket name prefix that I specified, then I add my account regional suffix to the requested bucket name: -123456789012-us-east-1-an. If another account tries to create buckets using my account’s suffix, their requests will be automatically rejected.
    https://aws.amazon.com/blogs/aws/introducing-account-regional-namespaces-for-amazon-s3-general-purpose-buckets/
    👍 1
    e
    l
    • 3
    • 3
  • a
    Nice breakdown of S3 storage classes. One thing I’ve noticed is that costs usually don’t come from storage alone but from access patterns and scaling over time. That’s where most teams struggle.
  • a
    spent way too long this week comparing EKS vs GKE vs AKS costs. the control plane thing, $73/month per cluster for EKS and GKE, $0 for AKS, i knew about it but never did the actual math. 40 clusters = $35k/year before any workloads exist. that's a headcount. wrote it all up : spot pricing, cross-AZ charges, storage, observability. the cross-AZ stuff on EKS especially. $0.01/GB doesn't sound like much until you realize how much pod-to-pod traffic crosses zones in a normal cluster. https://dev.to/muskan_8abedcc7e12/eks-vs-gke-vs-aks-a-finops-cost-comparison-in-2026-2m12
    👀 1
  • j
    Setting up AWS Organization for centralized management https://www.ordisi.us/posts/2026_2_aws_org/
    p
    • 2
    • 12
  • c
    Not an April fools joke, but AppRunner is being sunset for new clients after April 30 2026 - https://docs.aws.amazon.com/apprunner/latest/dg/apprunner-availability-change.html. Was anyone using it here? Feels like I was the only one, but it was quite nice and cheap!
    👀 1
    m
    • 2
    • 5
  • m
  • j
    Hey y'all, I created a practical guide for getting started with AWS Identity Center https://www.ordisi.us/posts/2026_3_aws_identity_center/
    🙌🏽 1
  • g
    Cross posting from the 
    terraform
    channel: https://sweetops.slack.com/archives/CB6GHNLG0/p1776719006895159
  • j
    if we have to give 1k inputs at a time how we will give to the server and in that first it should read every 100 inputs first then go after another 100 what answer we need to give?
    e
    • 2
    • 3
  • m
    Has anyone gone down the road of offering an image factory of AWS AMIs? I’m currently building out Packer automation to provide hardened images to my organization, but curious if anyone has ran into problems at scale with the approach.
    e
    a
    c
    • 4
    • 14
  • m
    Wanted to provide a follow up after we discussed creating an ImageFactory for AWS AMIs. Ended up combining a mixture of Packer and Terratest to build, scan, and then share the AMIs out to other accounts. Did a little write up on it if anyone needs the pattern in the future: https://rosesecurity.dev/2026/05/20/building-an-image-factory.html
    👍 2
    👍🏾 1
    p
    • 2
    • 1
  • p
    A post turned up on my LinkedIn feed this morning about the 
    tag_policy_compliance
    provider argument introduced in Terraform AWS provider v6.22.0 (2025-11-20). I knew about tag policies in AWS Organizations (note: this is a different policy type than an SCP) but I'd missed the new Terraform feature. Once you've defined tag policies, adding 
    tag_policy_compliance = "warning"
    to your provider configuration produces warnings at plan time. 
    tag_policy_compliance = "error"
    makes it stick. Who is using this already? LinkedIn | AWS blog | AWS sample Terraform code | Terraform AWS provider documentation
    e
    • 2
    • 4
  • a
    Can someone guide me how other teams are handelling this, I am doing a cleanup in my org, initially i thought the cleanup would be straightforward, find AWS resources with no traffic or active usage, validate them, and remove what is no longer needed. But once I got into it, it was not that simple. Some vpc's had no network traffic for long time, but still had active resources attached. A few resources did not have proper tags, so figuring out who owned them became difficult. Mainly i am worried if something still depends on it.
    e
    b
    m
    • 4
    • 7
  • m
    Curious how everyone is handling deprecated Lambda runtime upgrades at scale? We have a few hundred functions running across multiple AWS accounts and looking for some creative approaches
    💡 2
    m
    e
    • 3
    • 18
  • y
    Hello, Here’s a quick overview on my experiments with infra-as-code here. I’ve started using ACK/KRO/FluxCD/Helm to deploy Kube applications that need AWS resources: • KRO (https://kro.run) allows you to define a resource graph. • ACK (https://github.com/aws-controllers-k8s/community) lets you manage AWS resources from Kube. Advantages: • It's a natural integration with ArgoCD/Flux. • Declared as YAML (no more yaml/json/hcl mix) in Git and applied directly to the cluster. • Developers only need to interact with the Kubernetes (already the case). They do not need to learn Terraform or manage Terraform state files. • With KRO, I can define custom, simplified APIs for developers, hiding the underlying complexity of cloud resources and Helm deployments behind a single custom resource. • No more *he "*Two-State*"* problem (tfstate and Kubernetes state). It’s really promising. I hesitated to use Helm provider in Atmos, but that would mean granting extensive AWS permissions, and I would then lose Kube’s reconciliation loop and the ability to manipulate objects from Kube.
    🙂 1
    e
    m
    • 3
    • 12
  • m
    Curious if anyone is doing self-service AWS accounts without control tower? Looking into creating a service catalog to make self-service provisioning easier for teams, but curious how others approach this when managing the resources in IaC
    m
    • 2
    • 3
  • n
    Anyone need an AWS audit to reduce monthly bills around 20 to 40 percent
  • s
    This message was deleted.
    b
    • 2
    • 2
  • m
    Whelp! Another AWS CLI bites the dust! 🪦 😅 Not too long ago I was extolling the benefits of using Rain, an AWS CLI for CloudFormation. I’ve made it a foundation of my workflows when I’m using pure CFN to deploy and manage resources on AWS. I was running 
    brew doctor
    today and saw the following:
    Copy code
    Warning: Some installed formulae are deprecated or disabled.
You should find replacements for the following formulae:
    And lo and behold, 
    rain
    was in the list. Sure enough, the repo says:
    Copy code
    This repository was archived by the owner on Jul 29, 2026. It is now read-only.
    ---
    Copy code
    Warning

⚠️ This project is deprecated

Rain is no longer actively maintained and has been deprecated. We are no longer accepting feature requests, and issues and pull requests may not be reviewed or merged. The repository will remain available in an archived, read-only state so that existing users can continue to reference the source and prior releases.

Existing binaries and releases will continue to be available on the releases page, but no new releases, bug fixes, or security patches are planned.

We recommend migrating to actively supported alternatives such as the AWS CLI for CloudFormation operations, the AWS CDK for authoring reusable infrastructure components such as modules, cfn-lint for template validation, and cfn-guard for policy checks.

Thank you to everyone who contributed to and used Rain over the years.
    So, i guess its time to fork 
    rain
    or vibe code a wrapper around the AWS CLI for CFN! 🤔 🤷🏾‍♂️
    e
    p
    • 3
    • 14
  • m
    Have you seen and/or used the new login experience? Considering using the Google or GitHub logins… 🤔
    🤨 4
    e
    • 2
    • 1
  • m
    Happy bday EC2. After S3, it might be the next oldest service in the stack. 🥳 https://aws.amazon.com/blogs/aws/happy-20th-birthday-amazon-ec2/
    🙌 1
    e
    s
    t
    • 4
    • 3
  • j
    👴🏽
    😭 1
    🤣 9
    🙏 1
  • j
    one more blog about 
    fck-nat
    ordisi.us/posts/2026_6_aws_lower_vpc
  • l
    Hello everyone, I'm new to the DevOps and cloud world and was wondering, what are the best AWS certifications to aim for?
    e
    m
    +2
    • 5
    • 7
  • s
    This message was deleted.
    a
    e
    • 3
    • 2
  • o
    Hey Guys. What's your take on floci: https://floci.io/aws/ I've used it a bit for quick labs/tests, but I'm wondering how you guys use it. Do most people use this/localstack or just use a dev aws account?
    j
    e
    • 3
    • 19
  • o
    Hey guys, so I’m in this spot with my career. I left my previous workplace because I wasn’t learning enough + it wasn’t the right fit. This was my first job after college. Since then I’ve been freelancing and just learning about DevOps by building my own projects. Now I’m looking at getting back into it. It’s been a year. I kind of left my resume/LinkedIn showing that I was still at my previous place (I changed it recently again lol). So the problem I’m facing, if I’m not overthinking this, is: should I leave it the way it was with the extra year of experience and try to get roles with that + the experience I’ve gained from projects/labs? Or do I revert it to what it actually is and maybe add something like a career break (which is what is on my LinkedIn right now)? I’m worried that I might be missing out on entry-level roles/programs, and might struggle if I’m able to get something more reflective of that year. What are your thoughts on this?
    e
    • 2
    • 3
  • r
    I am a beginner in the networking field and now want to broaden my career into DevOps. My question is: what does this field actually require, and how do I build a professional project that will actually make my resume or portfolio stand out?
    e
    • 2
    • 4