Author Archives: setevoy

AWS: Route53 Private Hosted Zones — hiding domains from the Internet
0 (0)

26 July 2021

Private Hosted Zone in AWS Route53 allows to limit access to DNS records of a domain, thus making it inaccessible for the DNS Enumeration (or DNS brute-force), when an attacker checks for available records in a domain to know endpoints list to check them for vulnerabilities. For such attacks, there is a lot of utilities… Read More: AWS: Route53 Private Hosted Zones — hiding domains from the… »

Loading

AWS: WAF WebACL logging and Logz.io integration
0 (0)

22 July 2021

In the first post – AWS: Web Application Firewall overview, configuration, and its monitoring – we spoke about its main components, created a WebACL and Rules for it, and did basic monitoring. Also, we’ve configured WebACL’s logs collection with AWS Kinesis, but now it’s time to see them Logz.io, as CloudWatch Logs isn’t available for… Read More: AWS: WAF WebACL logging and Logz.io integration0 (0) »

Loading

AWS: Web Application Firewall overview, configuration, and its monitoring
0 (0)

19 July 2021

AWS WAF (Web Application Firewall) is an AWS service for monitoring incoming traffic to secure a web application for suspicious activity like SQL injections. Can be attached to an AWS Application LoadBalancer, AWS CloudFront distribution, Amazon API Gateway, and AWS AppSync GraphQL API. In case of finding any request that sits WAF’s rules, it will… Read More: AWS: Web Application Firewall overview, configuration, and its monitoring0 (0) »

Loading

AWS: CloudTrail overview and integration with CloudWatch and Opsgenie
0 (0)

15 July 2021

AWS CloudTrail is a service for auditing AWS accounts events and is enabled by default. It saves all actions that were done by a user, IAM role, or an AWS service via AWS Console, AWS CLI, or AWS SDK. CloudTrail will write information about every API call, log in to the system, services events, and… Read More: AWS: CloudTrail overview and integration with CloudWatch and Opsgenie0 (0) »

Loading

AWS: Simple Email Service Bounce rate and monitoring with and Prometheus
0 (0)

14 July 2021

Recently, AWS blocked our AWS Simple Email Service because of its low bounce rate. This can be checked in the AWS SES > Reputation Dashboard, our account currently has Under review status: After we’ve connected AWS Tech Support, they enabled it back, but we must solve the issue asap, and have to monitor AWS SES… Read More: AWS: Simple Email Service Bounce rate and monitoring with and… »

Loading

Kubernetes: Deployment Strategies types, and Argo Rollouts
0 (0)

12 July 2021

One of the goals of the ArgoCD implementation in our project is to use new Deployment Strategies for our applications. In this post, we will observe deployment types in Kubernetes, how Deployment is working in Kubernetes and a quick example of the Argo Rollouts. Deployment Strategies and Kubernetes Let’s take a short overview of the… Read More: Kubernetes: Deployment Strategies types, and Argo Rollouts0 (0) »

Loading

DevOps IT Ring
0 (0)

8 June 2021

💥9 June, 17:00 — IT Ring “DevOps” | Online/Offline. 6 speakers will come together in one IT Ring to determine the real functions of DevOps specialists and discuss what their cooperation with programmers should be. Topics: 📌 “Who are DevOps: people or tools?” 📌 “The perfect Architect – DevOps or developer?” 📌 “If you have… Read More: DevOps IT Ring0 (0) »

Loading

DevSecOps Build-up from Cloud Builders
0 (0)

1 June 2021

Cloud Builders Community invites to join the DevSecOps Build-up to discuss the best DevSecOps practices with experts from Microsoft, Pulumi, Stand Out In Tech, and Intellias. Speakers lineup: Continuously Implementing DevSecOps in AWS, — Volodymyr Shynkar, Senior Lead DevOps Engineer at Intellias. Join the fireside chat in Cloud AMA (ask me anything) format with Matt… Read More: DevSecOps Build-up from Cloud Builders0 (0) »

Loading

ArgoCD: declarative Projects, Applications, and ArgoCD deploy from Jenkins
0 (0)

19 May 2021

An application, cluster, or repository can be created In ArgoCD from its WebUI, CLI, or by writing a Kubernetes manifest that then can be passed to kubectl to create resources. For example, Applications are Kubernetes CustomResources and described in Kubernetes CRD applications.argoproj.io: [simterm] $ kubectl get crd applications.argoproj.io NAME CREATED AT applications.argoproj.io 2020-11-27T15:55:29Z [/simterm] And… Read More: ArgoCD: declarative Projects, Applications, and ArgoCD deploy from Jenkins0 (0) »

Loading