Blog

Securing Load Balancers: A Tale of Two CloudFront Approaches

Securing Load Balancers: A Tale of Two CloudFront Approaches

10 February 2025 | Jesse Millman

As web applications grow in complexity, securing communication between CloudFront and origin servers remains a critical concern. Today, we explore two approaches to this challenge: custom header validation vs Amazon's newly announced CloudFront VPC origins feature. We'll see how this new approach dramatically simplifies origin security while improving your infrastructure's security posture.

A Grad's Review of re:Invent 2024

A Grad's Review of re:Invent 2024

30 January 2025 | Sophie Giraudo

My 3 top highlights from attending re:Invent 2024 thanks to the AWS All Builders Welcome Grant.

Aurora DSQL: The Future of Serverless Relational Data

Aurora DSQL: The Future of Serverless Relational Data

22 January 2025 | Jesse Millman

Amazon's newest database offering, Aurora DSQL, makes it easier than ever to build highly performant global applications that need consistent data everywhere. Unlike previous solutions that required complex trade offs between performance and reliability, DSQL lets you write and read data from any location while keeping everything in sync automatically.

Snowflake DevOps - first impressions and comparison with schemachange

Snowflake DevOps - first impressions and comparison with schemachange

13 January 2025 | Maciej Tarsa

An evaluation of Snowflake DevOps tools for managing lifecycle of Snowflake resources compared with schemachange

Getting Dynamic with Snowflake

Getting Dynamic with Snowflake

18 November 2024 | Ben Dang

Exploring Snowflake's Dynamic Tables feature

How a Simple Configuration Almost Compromised Our Application.

How a Simple Configuration Almost Compromised Our Application.

5 November 2024 | Caio Kaihara

Discover how a single misconfiguration in Amazon CloudFront led to a security vulnerability, exposing user data to potential risk, and the steps we took to resolve it.

AppSync Events - Serverless WebSockets on AWS

AppSync Events - Serverless WebSockets on AWS

4 November 2024 | Jesse Millman

Websockets used to be a nightmare, but no longer! Dive into the new AppSync Event API

UXCamp Boorloo: 2024 Recap

UXCamp Boorloo: 2024 Recap

24 October 2024 | Mechanical Rock

A recap of the 2024 UXCamp Boorloo, a conference for UX professionals

Deploying MWAA with CloudFormation Part 2

Deploying MWAA with CloudFormation Part 2

16 September 2024 | Maciej Tarsa

Experience and hurdles of deploying Amazon Workflows for Apache Airflow (MWAA) with CloudFormation

Leaking Credentials!

Leaking Credentials!

14 August 2024 | Bret Waldow

AWS credentials can be leaked! Here are some ways to stop this or deal with it.