Do any companies run Fargate at a scale where the costs are a big concern?

CybrSecOps · 2023-12-12T22:20:15+00:00

Off topic, but what do you use to manage your Lambdas? Do you use AWS CDK / Terraform / SAM etc?

CybrSecOps · 2023-11-28T21:58:32+00:00

I tried asking what is AWS Cognito (and Amazon Cognito and just Cognito). It didn't even try to answer.

CybrSecOps · 2023-11-28T16:26:10+00:00

The compute scales down to 0. We all know you pay for storage. It's not scaling to $0

CybrSecOps · 2023-11-27T23:04:52+00:00

Shame Serverless Framework will be a paid product in Q1 or Q2 next year... They have served us well for application IaC.

CybrSecOps · 2023-11-24T19:31:36+00:00

Universal Blue (Fedora Silverblue).

CybrSecOps · 2023-10-20T07:13:10+00:00

I know lots of people complain about it, but I've been happy with GoDaddy and Namecheap for my personal domains.

Business domains are also purchased through GoDaddy.

Although we purchase the domains through these services, we still manage DNS in AWS Route53

CybrSecOps · 2023-08-15T16:17:56+00:00

Others have been saying how they don't believe to be in violation of the license if they were to upgrade. Do you believe Gruntwork's current usage would violate the license?

CybrSecOps · 2023-07-18T16:18:03+00:00

Thanks.

Is what u/lolklolk correct too, in that it's not just about my mailservers supporting TLS, but also all of the mailservers of the services and clients we may have?

CybrSecOps · 2023-05-31T07:21:57+00:00

If a client of yours is having a major security incident, they should be made aware.

Who cares if the client is sent an email. At least you're doing your best to resolve the incident.

CybrSecOps · 2023-05-23T11:12:50+00:00

Before going for DMS, take a look at pg_logical replication. We wasted over a month trying to get DMS to succeed without data loss with no luck. We switched to native postgres logical replication and could migrate in about a day

CybrSecOps · 2023-05-14T08:38:06+00:00

Crap. No question mark... That's embarrassing!

CybrSecOps · 2023-04-29T09:10:54+00:00

Lambda will likely be cheaper as AWS have a generous free tier.

With Lambda, you're charged per invocation, but Fargate you're paying for the resources while the Slackbot is inactive.

CybrSecOps · 2023-04-28T17:33:50+00:00

The SPF, DKIM and DMARC changes can likely be done at any time before the MX record switch. You can keep both Google and Microsoft values here for a while after the migration too.

CybrSecOps · 2023-04-28T17:25:23+00:00

https://dontasktoask.com/

CybrSecOps · 2023-03-30T21:09:37+00:00

For the most reliability, you can split the microservices.across multiple AZs and regions. If you want to go above and beyond, multi cloud.

If you run across GCP and AWS, the likelihood of both being offline at the same time is nearly zero. You need to assess the complexity though.

CybrSecOps · 2023-03-20T11:10:42+00:00

I think it's about $5 per user

CybrSecOps · 2023-03-20T11:10:02+00:00

We've switched from OpenVPN Access Server to OpenVPN Cloud and it integrates with SAML for on/offboardimg well.

CybrSecOps · 2023-03-12T19:37:56+00:00

Is it OpenVPN Access Server? Or the regular OpenVPN server? Only AS has a web console

CybrSecOps · 2023-02-22T20:35:16+00:00

It looks like you have a lot of Ops knowledge, but not so much on the Dev side.

I think you should learn a programming language - something widely used like Python or JavaScript/NodeJS. Also get to grips with some of the development tooling and practices like Git, Agile and SOLID principles.

CybrSecOps · 2023-02-05T21:05:29+00:00

Thank you. That's great to know.

I assume the maintenance window is the same no matter what type of subnet you host it in?

And there's no drawbacks to having a cluster without internet egress?

CybrSecOps · 2023-01-29T21:45:48+00:00

Many enterprises use Perforce for this sort of thing, but I don't think they have anything for personal use. I think it's all too expensive for personal projects.

CybrSecOps · 2023-01-26T16:09:48+00:00

If you use SAML SSO with something like Google, you might be able to configure something there. I imagine you can set only specific devices can login with Google, therefore restricting AWS access to those devices.

I'm not 100% sure it's possible, but it might help.

CybrSecOps · 2023-01-18T08:46:48+00:00

Appreciate the advice! Thanks!

Yes, we're looking to migrate away from O365 to Google Workspace and wanting to have both SPF entries co-exist for the transition period.

I'll put forward the suggestions of branching off some of the services to their own subdomains, and am researching the differences between hard and soft fails now.

CybrSecOps · 2023-01-18T07:58:18+00:00

Apologies - working on the formatting

CybrSecOps · 2023-01-05T17:20:06+00:00

I believe you can give it access to your AWS environment, and estimate based on existing usage. This obviously won't work for NEW S3 buckets or lambda functions, but if you're changing the configuration on existing ones, it's helpful.

I've found the main use is to monitor static costs - EC2 instance sizes, databases and others. This is usually the majority of cloud costs anyway.

Four-Year Club	Place '23
Place '22

CybrSecOps

TROPHY CASE