Amazon Elastic Container Registry (ECR) is service aiming to provide a safe, reliable and scalable serverless infrastructure to host your Docker images. Over the past few years, I have advised leading companies on their transition to AWS and the maintenance of their existing workloads. The vast majority of these companies
I'm thrilled to announce the launch of Jeff, a MacOS application designed to keep you in the loop with the latest updates from AWS services. Whether you’re a developer, IT manager, or tech enthusiast, Jeff is your perfect companion to stay ahead in the fast-paced world of
Ollama is a tool that enables users to run advanced language models, such as Mistral or llama, - both ChatGPT competitors - on their local machines. Unlike traditional AI solutions that rely heavily on cloud-based infrastructure, Ollama empowers users to harness AI capabilities locally. This does not only reduces dependency
Inspired by « The Frugal Architect » from Amazon CTO Werner Vogels, this manifesto explain simple laws to create sustainable, scalable and human-friendly delivery processes on Gitlab. Law 1 - Use labels to categorise Merge Requests During the lifetime of a project, maintainers may handle dozens of merge requests, depending on the
Modern IT systems are built on top of dozens of software applications and programming languages. These systems often depend on third-party components, which help developers avoid reinventing the wheel. These components, mostly libraries or frameworks, have their own lifecycles, allowing for the addition of new features and the patching of
Over the years, I've built hundreds of Docker images for dozens of major companies in Europe & USA. Every time, the same question needs to be answered: "how can we test this image before using it?". Most of these companies answered this question by adding an
In a recent post, we've seen how your user naming convention can be applied to some of the dynamic secrets Vault can handle. In this article, we will see how companies can also set their password policy convention. Password policies not related to policies, which are used to
Grafana is the most popular monitoring open source tool. Trusted by hundreds of companies across the world, Grafana is available as a managed service on AWS since August 2021. In this article, we will configure in a minute a Grafana workspace and his applications. 🔐Amazon Managed Grafana requires IAM Identity
Our world is using more and more digital services every day. A vast majority of modern systems are relying on databases to store various kind of sensitive information, from health metrics to financial reports for example. One of the biggest challenge nowadays lies to the security of this data, and
In this quick tutorial, you will learn how to rotate an Hashicorp Vault root token within 2 minutes. Step 1 - Login to Vault As this operation request specific rights, let's connect to Vault using the CLI: ➜ ~ vault login Token (will be hidden): Success! You are now authenticated.
In previous course (Hashicorp Consul 102), we secure the communication between the 5 Consul servers of our cluster. In this course, we will learn how to use TLS to verify the authenticity of servers and clients. To better understand how this works in practice, let’s consider a hypothetical scenario
Containers based architectures are growing years after years, modernizing software delivery pipelines and and empowering his adopters to scale fast. Far away from this promise, the reality is different: many companies are still struggling to create a proper build workflow for their Docker images, and the rise of vulnerabilities impacting
In previous course (Hashicorp Consul 101), we created a cluster of 5 Consul servers. In this course, we will learn how to secure the communication between all the nodes (Server and clients) of this cluster, also known as gossip. To better understand how this works in practice, let’s consider
In this course, we'll cover the fundamentals of Hashicorp Consul, starting with how to set up a cluster. To better understand how this works in practice, let’s consider a hypothetical scenario with a company named Acme. We will use a docker-compose stack to quickly set up resources
Many companies are providing online services to their customers. This websites, applications and systems are critical assets acting like online storefront, available 24/7. Digital sales, a new challenge Like as a merchant carefully put his products in his physical storefront, similar attention to detail, high availability, and a seamless
Terraform is a powerful tool designed to track the state of resources. It integrate a myriad of plugins and providers, allowing users to interact with a vast ecosystem of services and APIs. Most of these providers are open-source, inviting contributions from anyone to introduce new services, add features, or resolve
AWS
AWS backup is a managed service acting as a hub to manage everything about the backups of your business critical assets. This service offer a wide range of features, such as: * Automated backup schedules and retention management * Centralized backup monitoring * Incremental backups * Cross-account management with AWS Organizations * Automated backup audits
AWS
AWS Database Migration Service, commonly abbreviated as "AWS DMS", is a service developed to streamline the transition of customers databases from on-premise systems to the AWS Cloud. Since its launch in general availability in 2016, this service has undergone numerous updates, with the most significant recent enhancement being
AWS
Each year, AWS Re:Invent revolutionizes the tech landscape by introducing a myriad of new features and services. This year's announcements, marked by groundbreaking innovations, are summarized here. 🤝Special thanks to Pierre-Yves Gillier - Solutions Architect at AWS - for his contribution to this article. Amazon Redshift Serverless
Hashicorp
In recent years, an increasing majority of S&P 500 companies have come to rely on public cloud infrastructure, a trend significantly accelerated by the COVID-19 pandemic in 2020. Migrating assets (data, workflows, etc.) to the public cloud presents a new challenge, requiring specific skills and experience to ensure
Hashicorp
The new Terraform version v1.6.0 introduce a test framework, named “Terraform test”. Here’s how to use it.
Hashicorp
After several months of development, Hashicorp unveiled Terraform version v1.6.0 on October 4, 2023. While this isn't a major release, it introduces a notable feature: the terraform test command. In reality, this goes beyond just a command; it's an entire framework. The dark age
AWS
Amazon Managed Service for Prometheus is a Prometheus-compatible service that monitors and provides alerts on containerized applications and infrastructure at scale. A few weeks ago, I faced a problem: how to monitor my applications running on AWS ECS and AWS Lambda in a resilient and efficient manner? I have some
Hashicorp
Terraform is an open-source infrastructure as code (IaC) tool that enables users to define and provision infrastructure resources across various cloud providers. With a declarative configuration language, Terraform allows users to describe their desired infrastructure state and automatically manages resource creation, modification, and destruction. Supporting multiple cloud platforms, it provides
AWS
In December 2020, AWS released a new feature for Lambda service : Lambda now support containers images. As Danilo Poccia explain, “if you’ve invested in container tooling for your development workflows, it’s not easy to use the same approach to build applications using Lambda.” Container image support is a
AWS
In 2011, Netflix initiated the migration of their infrastructures from a private cloud to the AWS cloud. During this transition, Netflix reevaluated their infrastructure design approach, aiming to shift from a development model that assumed no outages to one that prioritized outage-proof systems. This shift in mindset necessitated rigorous infrastructure