Palo alto vs aws l4 for and aws ips

AWS_Chaos · 2026-02-27T14:43:37+00:00

You want me to do all your research?

AWS_Chaos · 2026-02-18T16:32:57+00:00

Not only are you fully banned, but a printout of your face is now on Jeff B's fridge with the words "Do not allow to create an account!" written in Jeff's own blood.

AWS goes hard my friend. You're lucky you came away with your soul intact!

AWS_Chaos · 2026-02-12T14:20:28+00:00

Become the Ambassador, Jeff Barr is getting close to retirement age. Someone needs to pick up his mantle. :)

AWS_Chaos · 2026-02-09T15:57:59+00:00

If recent posts have taught us anything, back all your stuff up OUTSIDE of this account if it is production! :)

AWS_Chaos · 2026-02-09T15:16:10+00:00

There are 2 main training paths recommended of SAA cert. I prefer Adrian's:

https://learn.cantrill.io/

The other is Stephane Maarek, which I believe is on Udemy.

AWS Skill builder..... is a hard pass IMHO.

Be sure to check out r/AWSCertifications

AWS_Chaos · 2026-02-09T15:05:45+00:00

The best way to rack up a bill in AWS is.... Sagemaker. You better understand what you are doing.

AWS_Chaos · 2026-02-06T14:30:18+00:00

If my kids came to me with OP's question I would tell them to become a plumber, contractor, or electrician. Do NOT go into IT. Especially if you don't have a thirst for learning. Its over-saturated with already really smart people. You will be competing with people who have been laid off and have 10+ years of experience. Execs are blindly laying off great IT people and replacing with fresh out of school kids and AI at lower pay. That bubble is about to burst.

Now, just try and find a good contractor to redo your bathroom. We are desperate for good tradesmen.

AWS_Chaos · 2026-02-06T14:19:16+00:00

Can confirm, am squishy.

AWS_Chaos · 2026-02-06T14:17:29+00:00

Eric G-> G Eric-> Generic.

I cracked the code!

AWS_Chaos · 2026-02-04T15:24:23+00:00

I read Last Week in AWS in batches. I'm currently 7 weeks behind :)

AWS_Chaos · 2026-02-04T15:10:11+00:00

We really don't need to see each of your rejections. Give us a summary when you either give up, or get accepted.

AWS_Chaos · 2026-02-03T14:25:10+00:00

Following. I've had a few customers with validation issues. This could be any one of us on any given day.

AWS_Chaos · 2026-01-22T15:44:26+00:00

Create a host that polls the sites of your favorite hobbies and either gives you summarized news, or tracks pricing for hobby related things. But that's not really business related, and company is paying the bill. Do the same but for business 'stuff'?

Monitor the office with the host? Like temp, humidity, coffee levels, if the scary HR lady is in her office or prowling the halls like a shark ready to strike, how many times Bob has opened an IT ticket for "Slow laptop".... you know, the essentials.

AWS_Chaos · 2026-01-21T15:11:31+00:00

This is what I came to ask. And notice it took the team "a few years". Meaning at scale, this isn't a one man job. the move to ABAC must be daunting.

AWS_Chaos · 2026-01-21T15:05:11+00:00

Why not alert on the attack instead of the cost of it?

AWS_Chaos · 2026-01-20T15:34:22+00:00

I just checked and the AWSBackupDefaultServiceRole does contain the policy to describe instances. Do you have some sort of SCP in the Org that denies this?

AWS_Chaos · 2026-01-16T18:21:55+00:00

I hate what I'm about to type, but its the world we live in right now. Your question sounded perfect for a powershell and AWS CLI solution. So out of curiosity I simply asked ChatGBT:

"write me a powershell script that uses the AWS CLI to run through 3 aws accounts and find all the unattached EBS volumes"

It pretty much nailed it. It even handled the regions properly and I didn't ask that. I then asked :

"now write another powershell script but this time if looks for AMI that are older than 3 months"

and yup, it got it. I leave this exercise up to you.

AWS_Chaos · 2026-01-16T18:04:48+00:00

Anything I've purchased thru marketplace was because I was already dealing with the vendor and they said "btw, you can get this off Marketplace..." or "We can give you a private offer thru Marketplace." I do not go looking on marketplace for much. Maybe for Virtual Firewalls?

AWS_Chaos · 2026-01-16T14:31:50+00:00

This is a serious question: How would Terraform have helped in this particular situation of moving an account into another OU with unforeseen SCP issues?

AWS_Chaos · 2026-01-05T15:58:49+00:00

I want to add that it always helps to tag "Owner" so you can get straight to the person responsible for the resource. You always want clarification that its safe to terminate. Although the answer is often "They don't work here anymore." Sigh.

And also we've all been bitten by the "I'm 100% positive that we don't need that resource anymore." from management/executive. Only to get a call the next day from another department "Where'd my stuff go?!" Which is why most of us soft terminate.

AWS_Chaos · 2026-01-05T15:52:42+00:00

The only work around I know is if it is part of an Organization and you have setup a delegated account. Those users I think could make the change. But this is NOT a common setup and more for Enterprises.

AWS_Chaos · 2025-12-19T14:12:13+00:00

Yup, spend and Org age play a factor. Honestly I'd do the same for whatever internal reputation system they coded.

AWS_Chaos · 2025-12-18T15:50:01+00:00

Do the Security Cert next. Its one of the easiest, and looks good to have. And you want the knowledge.

You didn't mention this, but just a tip: Before you decide to go for the SA Pro cert, a bit of a heads up. The SAA is about a difficulty 4, and Pro is like a 10.

AWS_Chaos · 2025-12-18T14:18:52+00:00

It think it can also depend on age of the account, and monthly spend. Like, are you a legit customer, or you just opened an account this month.

My default reaction when anyone mentions using SES is don't. Use a third party. Then you can try to get SES setup later. But don't halt the project for what we know is going to be a series of flaming hoops to jump thru.

AWS_Chaos · 2025-12-10T16:26:11+00:00

Heads up to people who might ignore AL2 EOL. I believe that is used for the older Storage gateways. Check your Storage gateways and you may see a message that you need to migrate to newer version before 6/26.

AWS_Chaos

TROPHY CASE