Jeff Barr’s Post

I am a big fan of Amazon SQS. Queues in general play an important role in distributed systems design and end increasing scalability and resiliency. SQS is in so many customer architectures that I review, but we often don't focus on it during the discussions, because customers tell me "It just works". Now I'm happy to share that it "just works faster". This blog is a great example of the long term value you get from building with Serverless primitives. Without any code changes your systems just get faster, I love that.

Announcing a major update to the AWS Well-Architected Framework! I hope the new guidance and improvements to the clarity and flow of the Security Pillar help you and your teams to stay secure while innovating quickly. https://lnkd.in/gY5Gc5iC

In this post, we describe an innovative blueprint for harnessing AWS PrivateLink as a solution to enable private, cross-VPC, and cross-account access to the Amazon EKS Kubernetes API. The solution involves PrivateLink, EventBridge, Lambda functions, and a Route53 Private Hosted Zone built as part of the EKS Blueprint to present an effective way to ensure private access to EKS Kubernetes APIs, which enhances security and compliance for businesses leveraging microservices across multiple VPCs and accounts. #AWS #Amazon #EKS #Kubernetes #PrivateLink #Security #Compliance

📰🚨Introducing Amazon CloudFront VPC origins: Enhanced security and streamlined operations for your applications by Matheus Guimaraes 🚀 Exciting news! Amazon CloudFront now supports VPC origins, allowing secure content delivery from private subnets. This simplifies operations, enhances security, and eliminates the need for public IPs—boosting performance at no extra cost! #AWS #CloudFront #VPC 🚀 #AWSNews #AWS

Good control to have in case of any resource compromise or in a sealed environment 👍

This is huge new feature for CloudFront !!!! Amazon CloudFront has introduced enhanced security features for VPC origins, allowing users to securely connect CloudFront to resources in their VPCs. This includes private connectivity that restricts access to only authorized traffic, significantly improving data security. https://lnkd.in/gw-Z28Mx #AWS #CloudFront #VPC

AWS Fargate now allows you to use your own customer managed keys (CMKs) to encrypt ephemeral storage for Amazon ECS tasks, enhancing control and visibility in regulated environments via Maish Saidel-Keesing on Amazon Web Services (AWS) https://lnkd.in/dV_AJtpY #aws #awscloud

Learn how to configure Amazon SageMaker instances within a VPC to securely access AWS services, including Amazon Bedrock, without internet exposure. This post explores using AWS PrivateLink and EC2 security groups to enable isolated, yet functional AI development environments—ideal for protecting sensitive data while maintaining service connectivity. #AWS #Security #AIOps #CloudComputing #SecOps

This is really cool feature to block internet access ar VPC level. Especially for legacy projects where we can’t check all the security groups or Nacl.

Check out this new network security feature to further protect your regulated and sensitive data such as Federal Tax information (FTI) aligning to defense in depth security strategy. With this feature you can completely remove Internet access for VPCs and subnets hosting the FTI data with a simple configuration.