- 152
- 103 709
AWS Bites
Ireland
เข้าร่วมเมื่อ 3 ก.ย. 2021
AWS Bites is the weekly show where we answer questions about AWS. This show is brought to you be Eoin Shanaghy and Luciano Mammino, certified AWS experts.
#aws #podcast #cloud
#aws #podcast #cloud
135. Serverless is making a comeback where you least expect it
In this episode, we discuss the pros and cons of using serverless architecture in enterprise companies. We cover topics like cost, complexity, security, ability to evolve architecture, and more. Overall, we find that serverless can provide benefits like reduced operational costs, improved developer productivity, and increased focus on core business logic for larger companies.
AWS Bites is brought to you by fourTheorem. If you are looking for a partner to architect, develop and modernise on AWS, give fourTheorem a call. Check out fourtheorem.com.
🔖 Chapters:
00:00 Introduction
00:52 Definition and traits of serverless architecture
02:21 Addressing some common criticisms of serverless
10:27 Economic benefits of serverless for enterprises
15:20 Security benefits of serverless
17:21 Ability to evolve architecture with serverless
18:29 Pragmatic hybrid approaches combining serverless and traditional architecture
In this episode, we mentioned the following resources:
- Yan Cui - “Even simple serverless applications have complex architecture diagrams”, so what? - theburningmonk.com/2020/11/even-simple-serverless-applications-have-complex-architecture-diagrams-so-what/
- Dark Matter Developers: The Unseen 99% - www.hanselman.com/blog/dark-matter-developers-the-unseen-99
- Deloitte - Determining the Total Cost of Ownership of Serverless Technologies when compared to Traditional Cloud - pages.awscloud.com/rs/112-TZM-766/images/AWS_MAD_Deloitte_TCO_paper.pdf
- Generating Value Through IT Agility and Business Scalability with AWS Serverless Platform (Gated Link) - pages.awscloud.com/Gated_IDC_Generating_Value_Through_IT_Agility.html
You can listen to AWS Bites wherever you get your podcasts:
- Apple Podcasts: podcasts.apple.com/us/podcast/aws-bites/id1585489017
- Spotify: open.spotify.com/show/3Lh7PzqBFV6yt5WsTAmO5q
- Google: podcasts.google.com/feed/aHR0cHM6Ly9hbmNob3IuZm0vcy82YTMzMTJhMC9wb2RjYXN0L3Jzcw==
- Breaker: www.breaker.audio/aws-bites
- RSS: anchor.fm/s/6a3312a0/podcast/rss
Do you have any AWS questions you would like us to address?
Leave a comment here or connect with us on X, formerly Twitter:
- eoins
- loige
AWS Bites is brought to you by fourTheorem. If you are looking for a partner to architect, develop and modernise on AWS, give fourTheorem a call. Check out fourtheorem.com.
🔖 Chapters:
00:00 Introduction
00:52 Definition and traits of serverless architecture
02:21 Addressing some common criticisms of serverless
10:27 Economic benefits of serverless for enterprises
15:20 Security benefits of serverless
17:21 Ability to evolve architecture with serverless
18:29 Pragmatic hybrid approaches combining serverless and traditional architecture
In this episode, we mentioned the following resources:
- Yan Cui - “Even simple serverless applications have complex architecture diagrams”, so what? - theburningmonk.com/2020/11/even-simple-serverless-applications-have-complex-architecture-diagrams-so-what/
- Dark Matter Developers: The Unseen 99% - www.hanselman.com/blog/dark-matter-developers-the-unseen-99
- Deloitte - Determining the Total Cost of Ownership of Serverless Technologies when compared to Traditional Cloud - pages.awscloud.com/rs/112-TZM-766/images/AWS_MAD_Deloitte_TCO_paper.pdf
- Generating Value Through IT Agility and Business Scalability with AWS Serverless Platform (Gated Link) - pages.awscloud.com/Gated_IDC_Generating_Value_Through_IT_Agility.html
You can listen to AWS Bites wherever you get your podcasts:
- Apple Podcasts: podcasts.apple.com/us/podcast/aws-bites/id1585489017
- Spotify: open.spotify.com/show/3Lh7PzqBFV6yt5WsTAmO5q
- Google: podcasts.google.com/feed/aHR0cHM6Ly9hbmNob3IuZm0vcy82YTMzMTJhMC9wb2RjYXN0L3Jzcw==
- Breaker: www.breaker.audio/aws-bites
- RSS: anchor.fm/s/6a3312a0/podcast/rss
Do you have any AWS questions you would like us to address?
Leave a comment here or connect with us on X, formerly Twitter:
- eoins
- loige
มุมมอง: 189
วีดีโอ
134. Eliminate the IAM User
มุมมอง 27621 วันที่ผ่านมา
In this episode, we discuss why IAM users and long-lived credentials are dangerous and should be avoided. We share war stories of compromised credentials and overprivileged access. We then explore solutions like centralizing IAM users, using tools like AWS Vault for temporary credentials, integrating with AWS SSO, and fully eliminating IAM users when possible. 💰 SPONSORS 💰 AWS Bites is brought ...
133. Building Businesses in the Cloud with Fiona McKenna
มุมมอง 205หลายเดือนก่อน
In this special episode of AWS Bites, Eoin is joined by Fiona McKenna, co-founder and CFO of fourTheorem, to discuss startup advice, hiring and growing teams, creating an environment for success, and managing cloud costs. They cover important themes around people, culture, leadership, and finance from Fiona's extensive experience in the tech industry. 💰 SPONSORS 💰 AWS Bites is sponsored by four...
132. GitHub Action Runners on AWS
มุมมอง 375หลายเดือนก่อน
We give an overview of GitHub Action Runners and discussed the benefits of using self-hosted runners on AWS. We covered options including EC2 and CodeBuild for running GitHub Actions, compared pricing across solutions, and shared our hands-on experience setting things up. Overall, using AWS services can provide more control, lower latency, and cost optimization compared to GitHub hosted runners...
131. What do you do about CloudFormation Drift?
มุมมอง 1732 หลายเดือนก่อน
In this episode, we discuss the concept of CloudFormation drift, what causes it, how to detect it, and strategies for resolving it. We explain that drift happens when the actual state of resources diverges from what is defined in the CloudFormation templates. Common causes include manual changes, third party tools, mixing IaC solutions, and automation. We then cover built-in drift detection in ...
130. Growing in Tech with Farrah Campbell
มุมมอง 2342 หลายเดือนก่อน
In this episode, we had the pleasure to interview Farrah Campbell, head of modern compute community at AWS, prolific speaker, and former AWS Hero. We discussed Farrah's career journey from healthcare into tech, tips on public speaking, dealing with imposter syndrome, the pace of innovation in the cloud, and predictions for the future. Farrah shared personal stories and advice for getting starte...
129. Lambda Provisioned Concurrency
มุมมอง 3313 หลายเดือนก่อน
In this episode, we discuss AWS Lambda provisioned concurrency. We start with a recap of Lambda cold starts and the different concurrency control options. We then explain how provisioned concurrency works to initialize execution environments in advance to avoid cold starts. We cover how to enable it, pricing details, common issues like over/under-provisioning, and alternatives like self-warming...
128. Writing a book about Rust & Lambda
มุมมอง 3363 หลายเดือนก่อน
In this episode, we discuss Luciano's new book project on using Rust to write AWS Lambda functions. We start with a recap on why Rust is a good fit for Lambda, including performance, efficiency, safety, and low cold start times. Luciano provides details on the book's progress so far, the intended audience, and the current published chapters covering Lambda internals, getting started with Rust L...
127. Which Load Balancer should you use?
มุมมอง 4044 หลายเดือนก่อน
An overview of load balancers, explaining how they distribute traffic across multiple servers and provide high availability. We discuss layer 4 and layer 7 load balancers, detailing their pros and cons. We then focus on AWS load balancers, covering network load balancers and application load balancers in depth, including their features, use cases, and pricing models. We conclude by mentioning s...
126. Bastion Containers
มุมมอง 2434 หลายเดือนก่อน
This episode discusses solutions for securely accessing private VPC resources for debugging and troubleshooting. We cover traditional approaches like bastion hosts and VPNs and newer solutions using containers and AWS services like Fargate, ECS, and SSM. We explain how to set up a Fargate task with a container image with the necessary tools, enable ECS integration with SSM, and use SSM to start...
125. A first look at CloudFront Hosting Toolkit
มุมมอง 3485 หลายเดือนก่อน
In this episode, we discuss the newly announced CloudFront Hosting Toolkit from AWS. We provide an overview of the tool, which aims to simplify deploying modern front-end applications to AWS while retaining infrastructure control. We discuss the current capabilities and limitations and share our hands-on experiences trying out the tool. We also talk about alternatives like Vercel and Amplify, a...
124. S3 Performance
มุมมอง 3335 หลายเดือนก่อน
In this episode, we discuss some tips and tricks for optimizing performance when working with Amazon S3 at scale. We start by giving an overview of how S3 works, highlighting the distributed nature of the service and how data is stored redundantly across multiple availability zones for durability. We then dive into specific tips like using multipart uploads and downloads, spreading the load acr...
123. What do you need to know about DynamoDB?
มุมมอง 5716 หลายเดือนก่อน
In this episode, we provide a comprehensive overview of DynamoDB, including how it compares to relational databases, when to use it, how to get started, writing and querying data, secondary indexes, and single table design. We share our experiences using DynamoDB and discuss the pros and cons compared to traditional SQL databases. 💰 SPONSORS 💰 AWS Bites is brought to you by fourTheorem. If you ...
122. Amazing Databases with Aurora
มุมมอง 3916 หลายเดือนก่อน
In this episode, we provide an overview of Amazon Aurora, a relational database solution on AWS. We discuss its unique capabilities like distinct storage architecture for better performance and faster recovery. We cover concepts like Aurora clusters, reader and writer instances, endpoints, and global databases. We also compare the serverless versions V1 and V2, noting that V2 is more enterprise...
121. 5 Ways to extend CloudFormation
มุมมอง 3157 หลายเดือนก่อน
In this episode, we discuss 5 different ways to extend CloudFormation capabilities beyond what it natively supports. We started with a quick recap of what CloudFormation is and why we might need to extend it. We then covered using custom scripts and templating engines, which can be effective but require extra maintenance. We recommended relying instead on tools like Serverless Framework, SAM, a...
119. The state of AWS 2024 (AnsWeRS community survey commentary)
มุมมอง 3658 หลายเดือนก่อน
119. The state of AWS 2024 (AnsWeRS community survey commentary)
118. The landing zone: Managing multiple AWS accounts
มุมมอง 5008 หลายเดือนก่อน
118. The landing zone: Managing multiple AWS accounts
117. What do EBS and a jellyfish have in common?
มุมมอง 1598 หลายเดือนก่อน
117. What do EBS and a jellyfish have in common?
116. What is RAM (Resource Access Manager)?
มุมมอง 3348 หลายเดือนก่อน
116. What is RAM (Resource Access Manager)?
115. What can you do with Permissions Boundaries?
มุมมอง 2229 หลายเดือนก่อน
115. What can you do with Permissions Boundaries?
114. What's up with LLRT, AWS' new Lambda Runtime?
มุมมอง 3859 หลายเดือนก่อน
114. What's up with LLRT, AWS' new Lambda Runtime?
113. How do you revoke leaked credentials?
มุมมอง 1559 หลายเดือนก่อน
113. How do you revoke leaked credentials?
112. What is a Service Control Policy (SCP)?
มุมมอง 6369 หลายเดือนก่อน
112. What is a Service Control Policy (SCP)?
111. How we run a Cloud Consulting business
มุมมอง 1K9 หลายเดือนก่อน
111. How we run a Cloud Consulting business
110. Why should you use Lambda for Machine Learning?
มุมมอง 36010 หลายเดือนก่อน
110. Why should you use Lambda for Machine Learning?
109. What is the AWS Project Development Kit (PDK)?
มุมมอง 60510 หลายเดือนก่อน
109. What is the AWS Project Development Kit (PDK)?
108. How to Solve Lambda Python Cold Starts
มุมมอง 44911 หลายเดือนก่อน
108. How to Solve Lambda Python Cold Starts
107. Expert opinions from re:Invent 2023
มุมมอง 33011 หลายเดือนก่อน
107. Expert opinions from re:Invent 2023
Good session. It was more interesting to watch if she used less 'u know'
A great talk guys! Thanks for sharing your thoughts.
No, you don't need all of this. You can run everything on $5 VPC and Lavarel 😂
😁 You sure can!
Great content. Thanks.
I really liked this deep dive video. keep it up.
This video is literally useless. Why not share the screen?
Very interesting, I didn't know Lambda can also be published and shared. It makes sense to reuse instead building for ourselves.
Gracias lucho y eoin por la info!
Thank you so much for this, super super valuable.
Great video. I really like the real-life example provided with identity being used to authorize the write to firehose. Would have been great if everything else was also backed with an example. Could you redo this video with more example scenarios
Oh the same mantra of: old monoliths bad, new microservices good but scary to software engineers, and GenAI taking over everyone’s work, making software engineers even more frightened, and the CFOs still not getting the Cloud pricing models, with Black Friday being just the spike and the rest of the time hardware sitting idle. You know, that playbook is outdated. There’s so much nuance that came out of the interactions with the Cloud infrastructure and pricing models that this video isn’t even trying to scratch the surface of. We’ve been running on AWS for over a decade, but not for the reasons stated in this interview.
Another great thumbnail 😁 Oh and the episode is good, too. img.th-cam.com/users/viRSV0VDBPRGU/maxresdefault.jpg
If you have kubernetes already running then you can also look at the kubernetes based GitHub runners along with KEDA for autoscaling. Beware of DIND limitations.
I just found you guys, I content was very useful. Please keep it up. You guys gained a new sub.
Another great episode of useful material, and another great TH-cam thumbnail. Someone is having a lot of fun with those.
I have been using Python with Cloudformation for few years and I have been pretty happy with the experience. Easier to write code, unit tests and ship libraries using SAM cli.
Awesome content! Thanks!
This combo always appeared natural, fast and cheap but there was not many sources on the topic.
Indeed! That's one of the reasons why we thought about writing a book. Hopefully it will become a good resource to get started with this powerful combo. Have you tried yourself to write some Lambda functions in Rust? I'd love to hear about your experience if you did!
What about Golang
was this before the AWS CDK?
We mention CDK in the episode but the topic is on comparing the two declarative options
How about free tiers, all new account have it’s own “free tier”?
Amazing! I do have a question though. Many people say that cloudwatch is one of the most expensive AWS services. I understand that cloud cost optimization can help... but many just go towards open source tools like OpenSearch (ElasticSearch) or Prometheus... because you don't have pay that much as cloudwatch..??? really don't understand what they are trying to say to be honest.
great episode!
for app config, if you have cold start lambdas you would pay cost per request received for each one one right? which is 0.0008, so if I have 40 lambdas, every time they are loaded will be 40*0.0008, let's say every 15 min my lambdas are loaded, so in 24 hrs will be 3 dolars, and one month, 90 dolars. I think it make senses to use app config if you have a very active application for all the lambdas
Thanks for covering this topic. It's good to learn about new options, otherwise I just keep using what I already know. I'm looking forward to seeing how CFHT evolves.
I'm a big fan of DynamoDB's scalability, especially since I've been at startups where SQL databases failed when our prototype took off and we suddenly had a surge of users. It nearly killed one startup. That said, if the access pattern becomes too complex, you need to combine DynamoDB with something else, like an SQL database. I attempted a "single table design" once. It was challenging enough that I locked myself in a conference room with whiteboards to map it all out. By the end of the day, I had it figured out and started writing it up. The next morning, my boss added a last-minute feature that required a new access pattern, causing the entire single table design to collapse like a house of cards. I haven't attempted such a design since. Now, when I use DynamoDB, it's for simple use cases with a primary key and sort key (like a timestamp). If it gets more complicated, I'll combine it with an SQL database that might have DynamoDB keys for the large datasets. I'd like to at some point work with a network database like Neo4J or AWS's Neptune, but haven't found a case for it yet. I might invent a personal project just so I can have a reason to try it out.
thank u.
This thumbnail is incredible
Eoin is really fast IRL! ⚡⚡
I don't know who needs to hear this but I have been using dynamodb as primary db in one project and it is total pain in the rear to design db (access patterns and data modeling) for application with a mobile application and dashboard. No matter how much effort you put in, there will be a point where your existing patterns won't be enough and there no easy way to support new ones.
In this episode, we mentioned that you could use a user email as a primary key in DynamoDB. This can work but from a compliance/security/privacy perspective it might a bit of a problem. So in these cases, if you don't have other unique identifiers for the user, you could use a hash of the user email instead (e.g. md5 or sha).
good video, I'm basically still lost though 😮💨
OpenAI could understand the speech of the Italia guy? Alora!!
Thanks for the mention 👍
the thing I appreciate a lot is the fact both of you always share the great resource that serves as a foundation of your speech, thanks for always sharing great content
Good one! :)
I got really good at CloudFormation. I wouldn't say I liked it, but felt it got the job done. Moving now to CDK (prefer Python) in the same language the project is using. Also: A show about DynamoDB single table design would be interesting to me.
Do you expect any drawbacks with CDK or is it all positive? Best of luck with the move!
Very informative episode. ADF (Amazon Deployment Framework) is another interesting framework for creating and managing accounts. It has drawbacks (like not using CKD v1 and being released slowly) but can be integrated with Control Tower and you can define and create pipelines in the CICD account.
Great addition, thanks! We haven't come across ADF in the wild but we'll definitely keep an eye on its progress.
Another great episode, as always. Thanks for sharing your knowledge. You mentioned using email aliases (using "plus" notation) to satisfy the distinct email address requirement for each account. It occurred to me that if the inbox to which all the aliases are associated were compromised, an attacker would have a list of every account in the org including each account's unique email address. Enabling MFA on every account is a no-brainer, and ideally the email inbox should have MFA enabled as well, but it does feel like putting all your eggs in one basket. Maintaining multiple distinct email inboxes is certainly a lot of work, but maybe it's worth it? Or is MFA sufficient protection?
Good question! Like you say, root account MFA is essential. I guess if the management account root email was compromised, you'd be in a similar situation anyway. I would go for the simplicity of email aliases. It's very difficult to do account creation automation (Account Factory) and enforce a unique primary email inbox for each account.
*Promosm* ❣️
Excellent explanation
Glad it was helpful!
Great walk through and totally agree with the recommendation. Thank you 👍
No problem 👍
Straight to the point and very good explanation. Thx for sharing
Thank you for the comment :)
Thank you. cleared my confusion on these two concepts.
That's great to hear! We should probably do more content about Cognito!
Hello Team, Could you please let me know how to calculate utterances in live streaming audio from transcribe. If this is possible?
Ty!
You are welcome!
Thanks for covering this topic. I knew SCPs were a thing, but never really grasped what problem they solved. As a result, I have not been using them in my organization. Now I understand. If you'll excuse me, I have some work to do ...
@SonOfSofaman - it's so good to read this! This is exactly why we made the episode ☺ Thank you for sharing!
Thanks for this great feedback - let us know how you got on....and if you have any more topics you'd like us to cover!