jdog
  • Member for 3 years, 7 months
  • Last seen more than a month ago
How to see when an AWS IAM role was last used?
5 votes

Amazon CloudTrail tracks all API use In CloudTrail create a new trail You can configure each trail to send log events to CloudWatch: Edit the trail and choose to send Logs to CloudWatch. It will ...

View answer
How do you limit access to the production environment in the company you work for?
4 votes

You could embed database schema and data changes into source code control by using a concept called database migrations. These can then be executed on dev and staging environments as part of a ...

View answer
Any site to host my little utility script?
2 votes

Have you considered running this on AWS Lambda. It will probably forever free under free tier. There may be a couple of cents cost on API Gateway. Otherwise you can rent outdated servers for cents per ...

View answer
What makes a difference between high-cost cloud providers and low-cost ones?
2 votes

Aside from @Peter s great answer are you comparing Apples with Apples? Your comparison only works, if you compare a VPS as a "box" with another VPS, based on soimplistic criteria such as CPU clock ...

View answer
How to handle AWS Offsite or cross-account RDS (mysql) backups?
2 votes

On top of protecting your root account as best as you can, you should be able to reduce the risk of such resource deletion if you have more than 1 resource to protect. For example if all AWS ...

View answer
How do configuration management tools deal with someone messing up configuration files manually?
2 votes

For Ansible, it does not manage this for you and you have the following options. Config files that you depend on, but where default are fine you will have to add to your configuration. Files whose ...

View answer
Strategies to work around 30 sec timeout
Accepted answer
2 votes

A variation of method 2 is infinitely scalable: write the data to s3. from s3 trigger lambda to break s3 file into sqs queue events of good size from sqs queue trigger lambdas to insert sqs can be ...

View answer
Why are IaaS hosting services are usually fixed-priced and PaaS are usually dynamically-priced?
Accepted answer
2 votes

Fixed price tiered billing is an older billing model that suits a monthly billing cycle where usually the level of resources provided does not change over a month. Even if it is changed, this is ...

View answer
What is warm(ing) up?
2 votes

All container services and Function-As-a-Service services of the big cloud providers, such as Amazon ECS, Lambda and Azure cloud functions run on actual virtual machines of these providers. Normally ...

View answer
Do AWS backups of large empty volumes take longer than small ones?
Accepted answer
2 votes

Firstly I would argue that backup time does not matter, as it usually doesn't correlate with the restore time. In regards to restore time, snapshots restore on volumes almost instantly, as data ...

View answer
Is it possible to deploy RDS in multiple region in AWS with read and write replica
1 votes

You can look at Aurora Global Database for this. Based on this news announcement, you can also configure the setup, so you can write to your local db cluster and this is forwarded to your primary ...

View answer
private subnets in an Auto Scaling Group on aws?
Accepted answer
1 votes

There is a range of common scenarios when you want to use private subnets to be used in an auto scaling group: Your traffic is terminated by reaches your infrastructure on a Elastic Load Balancers ...

View answer
AWS Cloudwatch for unused accounts
1 votes

You can get all used User accounts with Cloudtrail, it would then be a text processing exercise to find the unused ones.

View answer
AWS RDS- Determine what Database Tables aren't interacted with?
1 votes

I don't think any database services "internal traffic" is available to AWS services directly. That being said, you should be able to dump all sql queries to a log file on S3 and also extract all ...

View answer
How to share RDS snapshots across account roles?
1 votes

To my knowledge there are only Tag based Iam policies available to limit access to resources for certain users or user groups. Because of this, you should simply be able to tag an RDS snapshot both ...

View answer
How to avoid a high number of requests for avoiding Amazon AWS EC2 instance AutoScalin?
Accepted answer
1 votes

First of all, the number of connections is not a common metric to use for autoscaling. Much more common is CPU utilization or possibly the amount of network traffic. If you are happy with the ...

View answer
How to make an AWS S3 bucket accessible over HTTP?
1 votes

In addition to Mlu answer, you can put Cloud front in front of the bucket and implement basic auth and probably listing/sorting with a Lambda@edge function.

View answer
Auto-scaling, how to securely get code from private repo
1 votes

If the repo is on AWS Codecommit, you should be able to access it via a role setup for each type of instance. See under IAM role here https://docs.aws.amazon.com/codecommit/latest/userguide/auth-and-...

View answer
Issue with custom domain SSL certification
1 votes

Can you obtain a secure certificate for someone else's domain or subdomain without their help - hopefully not. One of the core security pillars of a secure certificate is that it ensures that you are ...

View answer
Can a 5 US $ VPSE support VAD stack with 2 relatively-small CMSs?
Accepted answer
1 votes

In this scenario, the cpu cycles required to read from the database and render to PHP will all be handled by a single core, ie they will be handled one after the other. This will be about the slowest ...

View answer
VAD (Vagrant-Ansible-Docker) stack for Ubuntu and Apache
Accepted answer
1 votes

I think your research is leading you in the right direction, but I cannot see the value of Docker in here. I found managing LAMP environments with Ansible completely unproblematic and the scripts I ...

View answer
Digital Ocean vs AWS EC2 for Laravel based application
1 votes

There are a couple of additional considerations to take into account when you compare your service between AWS and Digital Ocean. If you know your service needs to be hosted on instances and you can ...

View answer
Tips for separating DevOps Git repos?
1 votes

My advice would be to not separate these repositories as it introduces unnecessary risks in terms of repositories not being available due to access control, availabilty or billing issues at some point ...

View answer
DNS hosting choices - how to programmatically update DNS settings
1 votes

Amazon web services provides such a service, called Route53. You can actually use REST calls, but it is much easier to use their command line tools or bindings for PHP, Python or JavaScript. Here ...

View answer
Using HTTPs in application vs reverse proxy
0 votes

There is no direct technical benefit. Some people argue that it takes some cpu load of the Web server. However there are equally articles that claim its only a very small percentage of cpu required to ...

View answer
One time database update process as part of applying a patch
Accepted answer
0 votes

This is usually called a migration, try yii2, Laravel or doctrine Mostly these frameworks will manage the schema in yml, XML or PHP and automatically calculate schema changes and apply them. For ...

View answer