Prafull Kotecha

🚀 Enhancing AWS Operations 🚀 Working with #AWS, you should regularly perform these ten checks to ensure AWS operations are secure, efficient, and cost-effective. https://lnkd.in/g5NBSidn Here’s what you need to know: 🌟 MAIN POINTS:  1. 💰 Monitor Spending: Review AWS Cost Explorer monthly to track spending and usage across all AWS accounts.  2. 🛡️ Threat Detection: Enable and configure Amazon GuardDuty for intelligent threat detection and active monitoring.  3. 🗂️ Manage Logs: Set retention policies for Amazon CloudWatch Logs to control storage costs and mitigate data exposure risks.  4. 🔐 Access Control: Use IAM Access Analyzer to identify and remove unused IAM roles, reducing potential access risks.  5. 🚨 Alerting Mechanisms: Ensure Amazon EventBridge rules and Amazon SNS topics have valid targets for effective alerts.  6. ⚠️ Error Detection: Regularly check Lambda execution failures using CloudWatch Metrics and Log Insights.  7. 👁️ Unauthorized Access: Inspect CloudTrail logs monthly with CloudWatch Logs Insights to spot unauthorized access attempts.  8. 📊 Activity Analysis: Analyze "top talker" account activity using CloudTrail and CloudWatch Logs Insights.  9. 🗃️ S3 Management: Utilize S3 Storage Lens to manage S3 usage and costs, preventing data sprawl. 10. 📞 Contact Information: Keep AWS account contact information accurate for timely communication on account, billing, or security issues. Stay proactive and optimize your AWS operations today! 🌐🔒💡 #AWS #CloudComputing #CloudOps #Security #Automation #CostEfficiency

6

1 Comment

Another quality of life pre:invent release - this looks like it will streamline complex state machines. https://lnkd.in/enc2Qsgi

1

#terraform #emphemeral #resources are here in v1.10 ! “Ephemeral resources solve the long standing problem of secret values being persisted to the state file in plaintext.” Checkout this nice write up from Mattias. ⬇️⬇️⬇️⬇️⬇️⬇️⬇️⬇️ https://lnkd.in/g5Zwu9Fx

5

Adapting the Simple Sabotage Field Manual (https://lnkd.in/gJq3EzxZ) to modern enterprise IT and Security Architecture: "When possible, escalate all decisions to cross-functional working groups for 'collaboration and alignment.' Ensure these groups include representatives from multiple teams such as security, operations, development, compliance, and legal, and aim for meetings that require full attendance. Additionally, suggest extensive documentation and input from all teams before any decision can be finalized. Use collaborative tools like email threads, project management platforms, and shared documents to track all feedback and changes." Leads to: ❌ Decision-making delays ❌ Overwhelming coordination ❌ Document overload ❌ Loss of accountability ❌ Increased complexity ❌ Silos and mismanagement Instead: ✅ Empower small, cross-functional teams: Grant nimble teams the authority to make the call; Emphasize standardization, not uniformity; Permit deviation from the team's decision only with supporting evidence. ✅ Define clear accountability and ownership over action: Acknowledge that we can't guarantee results; Assign accountability to a single point of contact for gathering input, making informed decisions, and driving execution; Delegate authority to complement accountability. ✅ Streamline communication and tools: Rely on concise, direct communication channels; Use tools that reduce the manual overhead of managing and tracking daily work. ✅ Set strict timelines for feedback and action: Hold managers accountable to communicate their concerns with supporting details early enough to adjust; Expect imperfection and build timelines based on critical path. ✅ Record and communicate decisions: Maintain transparency by documenting decisions and making them available, understandable, and actionable; This is especially critical with standardized architecture patterns and architecture decisions. ✅ Prioritize action over endless collaboration: Require justification for delaying action after a clear majority is reached; Leaders must actively prevent becoming locked in group-based analysis paralysis. ✅ Adopt small, rapid iteration: We are what we repeatedly do, and big goals are accomplished through consistency of habit; small iterations allow for more repetitions and make improvements at each iteration more realistic.

2

Understanding problem space, transitioning to solution space in the light of DDD... nicely articulated... https://lnkd.in/gj54xF-P

7

1 Comment

Azure Functions are excellent for handling long-running and resource-intensive tasks. As a serverless computing platform from Microsoft Azure, it enables users to develop event-driven applications with ease. This platform offers on-demand infrastructure and resources, allowing users to focus on writing code in their preferred language rather than managing the underlying infrastructure. Watch my video below to learn how to integrate Copilot Studio with Azure Functions. #MicrosoftCopilot #CopilotStudio #Copilot #PowerPlatform #AI #PowerUser #Azure #Microsoft Microsoft Power Platform Community #GenAI #PVA

18

YouTube Video is out 👀 Watch Murali Sankar and I present on how #AmazonBedrock empowers organizations, particularly the financial services sector, to harness the full potential of #GenerativeAI without compromising on data protection or ethical standards with Angelbeat 😄

13

✍ Some good recommendations in this post from #aws:- - Federate your GitHub users and manage the lifecycle of identities through a directory. https://lnkd.in/gxJxiH_S 👥 - Limit administrative privileges of GitHub repositories, and restrict who is able to administer permissions, write to repositories, modify repository configurations, or install GitHub Apps. https://lnkd.in/gxmS9-C8 🛡️ - Limit control over GitHub Actions runner registration and group settings. https://lnkd.in/gba6yJMr 🏃‍♂️ - Limit control over GitHub workflows, and follow GitHub’s recommendations on using third-party actions. https://lnkd.in/gNrwiHA8 🔄 - Do not allow public repositories access to self-hosted runners. https://lnkd.in/g564YC-s 🚫 #githubactions #security #bestpractise https://lnkd.in/gNfyWRa5

3

The AWS Financial Services Attendee Guide is now available! Explore innovations in cloud migration, optimization strategies, and leveraging AWS services to drive transformation in financial services. #AWS #reinvent2024 #cloudtransformation #financialservices #FSI #AWSInnovation

4

Love this use case for gen.ai - get your infrastructure generated really quickly to get you up and running in no time from your architecture diagrams.

9

The Software Architect Elevator is worth it. Only $18 for the nine item bundle if you don't want to spring for the full set of 24 for only $25. ~$1/book is quite the bargain for investing in yourself, without actually being cheap about it. Highly recommend the Software Architect Elevator.

14

1 Comment

🚀 AWS CodePipeline now supports stage-level conditions, enhancing your release processes with quality and compliance checks before and after stages. Customize conditions via console, API, CLI, CloudFormation, or SDK to ensure robust and flexible deployments. 💻🔧🛡️ https://lnkd.in/gezgJ7Cw #AWS #DevOps #CloudComputing

6

All resources from my #reinvent sessions are available on github (links, slides, video, guides, workshops etc). SVS320 - Accelerating #Serverless Development with #Terraform on #aws (with the awesome Anton Babenko ☁🇺🇦) https://lnkd.in/g8_QUSwk SVS217 - Improving #throughput and #monitoring of serverless data #streaming workloads - https://lnkd.in/gX3ziupz One more session will be available in a few, that one was a bit special:)

49

Integrating Human and Bot Collaboration for Enhanced Productivity. Embracing Hybrid Intelligence for Web Meetings with iWeb Avatar(Personal BOT).

30

2 Comments

"How an empty S3 bucket can make your AWS bill explode" 😱 Maciej Poćwierz's post on medium ( https://lnkd.in/gZP8A-aS) triggered a quick change in #S3 #billing back in May. Recently, #Amazon S3 has completed that change, so #unauthorized #requests that customers did not initiate are #free of charge. https://lnkd.in/gfh7dJam #aws #amazonwebservices #whatsnewataws #awsjunkie #srccodes #awscommunity #amazons3 #storage #serverless

17

Not sure how closely you follow model releases from day to day, but a new model launched yesterday is one worth taking a look at. Highlights of the new Anthropic Claude 3.5 Sonnet model: 1/ available on Amazon Bedrock in us-east-1 2/ better benchmark performance than opus and GPT4o 3/ is priced the same as prior Claude 3 Sonnet model To better put that in perspective, consider the price per 1k input tokens to get close to similar level of intelligence on wednesday: - Opus : $0.015 (+400% more than 3.5 Sonnet) - GPT4o : $0.005 (+67% more than 3.5 Sonnet) - Claude 3.5 Sonnet: $0.003 Leading performance + prices that make it very attractive. Spend some time today looking at the reviews online, running your prompts through evaluations. If you do, let me know your reactions. #anthropic #genai #aws #bedrock #claude35

6

1 Comment

A very complete but curated list of awesome articles and resources to learn and practice software architecture, patterns and principles : https://lnkd.in/e6fxsazv #software #architecture #designpattern

17