While it's not called "I prefer speed over automatic rollbacks and validated propagation"-mode, with the improvements that have been deployed in the last few years, it's becoming harder and harder to say that CloudFormation is a slow way to deploy. www.linkedin.com/feed/update/...

AWS: Here are Lambda MicroVMs for isolated execution of user and AI-generated code @awsteele.com: Let me add SSH and Kubernetes support github.com/aidansteele/...

Next week (May 27) I'll be in Amsterdam to give a talk at the AWS Summit. I'll be presenting "That's allowed? Using IAM Roles Anywhere without AWS Private CA" in the Community Developer Zone at 11:30. Before and after you can find me at the Cloudar booth (G11). Looking forward to see people there!

Java developers and their weird requirements

☁️ 🇪🇺 The third edition of fwd:cloudsec Europe will take place on September 7-8 in London! The CFP has just opened, we're looking forward to your submissions! fwdcloudsec.org/conference/e...

AWS send us an email saying our t3.micro Managed RabbitMQ instance would go out of support in October 2026. The next available supported option is m7g.medium, which is more than 5 times as expensive. I've been on record about my problems with AMQ pricing, but still: 🤯 cc @awscloud.bsky.social

Tickets, scholarships, and sponsor info TBA, but interested sponsors can reach us at [email protected] fwd:cloudsec EU will be at the Park Plaza Victoria in London, UK on September 7 and 8. The Call for Sponsors is at: fwdcloudsec.org/assets/docs/...

We've locked in dates and venues for the North American (NA) and European (EU) fwd:cloudsec conferences this year! fwd:cloudsec NA will be in the Seattle, Washington area at the Meydenbauer Center in Bellevue on June 1 and 2. 🧵

Probably drowned in all the other announcements (if it was even announced at all), but I'm very happy to read this on the blog post met initial services for AWS's European Sovereign Cloud (aws.amazon.com/blogs/securi...) "Amazon CloudFront is expected to be available in by the end of 2026."

Had some real Australian food at Outback steakhouse!

I'm at #AWSreinvent this week (reach out if you're also here!), so you might see some replies to this with thoughts about keynote announcements (I don't think they count as spoilers)

If you are attending AWS re:Invent this year and are wondering which sessions you can still reserve a seat for now that the first rush is over; I made you a list of sessions I added to my short list that are not at capacity yet: reinvent-planner.cloud/sessions/sha...

Time to start practicing how to say "eusc-de-east-1"

Usually I'm the one called by work after hours, but today I'm watching my partner deal with "our -80 freezer is not cooling anymore" on a Friday evening. It starts surprisingly similar to "our server is running out of disk space"... but ends with a lot more people with protective gloves in one room

I'm biased, but +1.

I'm on my way home from a very inspiring week!

I just witnessed this perfectly geeky exchange at work: - I'm going to cache 404 errors for 30 seconds - What about 418 errors? - 3 to 4 minutes seems the most common time that people wait - How about we follow ISO 3103 and do 6 minutes exactly?

This is art: secretgeek.github.io/html_wysiwyg...

I did a fun thing and gave every Belgian access to my AWS Account (or: playing around with IAM Roles Anywhere) cloudar.be/awsblog/sign...

There's still time to apply for our scholarship which aims to give students or career changers a ticket and travel stipend to attend fwd:cloudsec Europe in Berlin, this September! Details here: fwdcloudsec.org/assets/docs/...

AWS documentation: "just trust me, bro" Jenkins documentation: 🚨🚨🚨

The CFP for fwd:cloudsec Europe is now open! We're looking for practitioner-focused cloud security content, and we encourage all practitioners to submit, whatever your role or level of experience. The CFP is open until July 11th. Read more: fwdcloudsec.org/conference/e...

Time to reset the "days since an AI-guessed configuration option blew up in someone's face" counter...

This is a very niche thing, but there is now a (not canonical) place with all the smithy models of all the AWS API supported by the AWS CLI: github.com/aws/api-mode... This does not include all available models, for that we still need @frichetten.com 's repo github.com/Frichetten/a...

We’re thrilled to announce that the second edition of fwd:cloudsec Europe will take place on September 15-16 in Berlin! fwdcloudsec.org/conference/e...

Besides hanging out on the internet, I also play in a symphonic windband. This weekend we (narrowly) placed first in the Flemish Open Windband Championship, securing a ticket to the European Championship for Wind Orchestras. www.vrt.be/vrtnws/nl/20...

Messages like this always warm my heart. Cloud security research is all about improving the safety and security of the platform to protect users.

Load management is all around us - from restaurants handling the lunch rush to cloud systems balancing millions of requests. Mike Haken’s latest Builders' Library article shows how the principles never change: detect early, adapt quickly, degrade gracefully. aws.amazon.com/builders-lib...

Three more days to write your Valentine cards!

Reading Knuth's "The Art of Computer Programming" fascicles as they came out was incredibly key to discovering the Shuffle Sharding pattern, but I don't think I've ever written about it before ... news.ycombinator.com/item?id=4297...

🚨 Last day to apply for the AWS Community Builders program! 🚨 ✅ Exclusive resources ✅ Mentorship from AWS experts ✅ A global community of passionate builders Don’t miss your chance to level up—applications close tonight, Jan 20! 👉 Apply now: go.aws/3CblHcy #AWSCommunity #AWS

👀

“How many keys do I need?“ is a post you might have missed after re:invent. It contains insights about criteria and strategies when it comes to using and managing KMS keys. https://aws.amazon.com/blogs/security/aws-kms-how-many-keys-do-i-need/ #aws #security

There is a huge advantage to this over blockenheimer: you can tell why you blocked them because it'll say what list has them blocked, and removal is automatic if the person unfollows instead of sticking forever (think: journalist who was following but switches to another way of monitoring)

Back for our yearly tradition of a re:invent keynote thread. Just like last-year I will only post when I have something extra to add, there's others to follow for play-by-play.

One of the small quality-of-life improvement specs I've been closely following for a bit now: httpwg.org/http-extensi... Sharing just cause I'm not sure how many folks have been paying attention to HTTP maybe getting a new verb soon 😍

I'll be at AWS #reinvent this year, looking forward to seeing a bunch of cloud-friends! LMK if you're there and like to meet up I will also be co-hosting two PeerTalk Meetups (new!), PTM115-R1 & PTM102-R1, so that's also a good way to run into me (register in the app, under PeerTalk > Meetups)!

Just released, but please do not use this - it does not give you a fully working CloudFront (no ACM) - It creates a bunch of infra in your account (not a service) - "ensures all requests are […] inspected by […] WAF" is misleading - Cache poisoning is possible / easy aws.amazon.com/about-aws/wh...

Seeing a "real" PRFAQ is a very interesting look behind the scenes. As far as I know this is the only (AWS) PRFAQ that has been shown publicly (although there have been other examples and at least one amazon.com one shown publicly)

These are some very cool new features. I've had some good experiences with finch on macos, these should make it possible to use in even more places