The Curious Engineer

All blogs / DevOps / SRE / infrastructure

cloudonaut

cloudonaut.io

All you need to know to build a highly available, scalable and cost efficient cloud infrastructure based on Amazon Web Services (AWS).

DevOps / SRE / infrastructureSecurity

’15’16’17’18’19’20’21’22’23’24’25’26
Posts
406 from 9 May 2015 to 1 Oct 2026
Posting
now and then (5 in the last year)
Kind
company blog
Feed
https://cloudonaut.io/feed/rss.xml

2026 4

  1. cloudonaut Monthly - September 2026: 42% growth after dropping our entry-level plan
  2. Replacing Kit (ConvertKit) with a serverless newsletter and CRM solution on AWS
  3. AWS European Sovereign Cloud (EUSC) – a field report
  4. How to Monitor and Auto Adjust AWS Service Quotas?

2025 11

  1. AWS CloudWatch Dashboard Cost Efficiency: Logs vs. Custom Metrics
  2. AWS Step Functions: How to Orchestrate Workflows Waiting for 3rd Parties
  3. Optimizing Amazon Linux 2023 for tiny EC2 instances: t3.nano, t3a.nano, or t4g.nano
  4. How to reduce your AWS Config bill for volatile workloads
  5. How to generate SDKs for a REST API powered by Amazon API Gateway
  6. Simplified AMI deletion: new feature streamlines cleanup
  7. Getting ISO 27001 certified as a 2-person company
  8. S3 Virus Scan and Malware Protection Step-by-Step Guide
  9. Reduce GitHub runner costs by leveraging EC2 spot instances
  10. 10th anniversary - our story
  11. How to move a DynamoDB table to another region or account?

2024 11

  1. Optional DependsOn with CloudFormation: Metadata to the rescue
  2. Are you missing an AWS resource in Terraform? Try awscc provider!
  3. Review: Amazon GuardDuty Malware Protection for S3
  4. Deploying Self-Hosted Runners for GitHub Enterprise Server on AWS: A Guide to Efficient CI/CD
  5. How to write unit tests when using the AWS JavaScript SDK v3?
  6. Tidying up after failed Terraform tests
  7. How to monetize an API on AWS?
  8. Cleaning up AMIs
  9. How to reduce costs for GitHub Actions?
  10. KMS Key Policy Privilege Escalation
  11. Connect GitHub Actions with AWS VPC

2023 17

  1. Protect Amazon Connect from viruses and malware by scanning attachments
  2. Worldwide availability of EC2 instance types
  3. How to monitor container workloads running on ECS and Fargate?
  4. Using DynamoDB Entity Store for cleaner TypeScript code
  5. The Lambda monitoring blind spot
  6. A future-proof Terraform provider definition
  7. Migrating to AWS JavaScript SDK v3: Lessons Learned
  8. Self-hosted GitHub runners on AWS
  9. AWS Security Monitoring in 2023: Untangle the chaos
  10. Show Me Your Architecture Vol. 2: Platform Engineering on AWS
  11. Detecting connectivity anomalies with CloudWatch Internet Monitor
  12. Now available: Book Amazon Web Services in Action 3rd Edition
  13. How we built bucketAV powered by Sophos
  14. Fallback to on-demand EC2 instances if spot capacity is unavailable
  15. AWS Monitoring with EventBridge
  16. Builder's Diary Vol. 6: Serverless and DevOps - a match made in heaven
  17. How to filter S3 events by object size

2022 35

  1. Builder's Diary Vol. 5: ECS Anywhere
  2. Builder's Diary Vol. 4: Serverless Software Engineering
  3. Hot off the Cloud #007: AppSync JavaScript Resolvers + IAM MFA + CloudFront CD
  4. Mastodon on AWS: Host your own instance
  5. Builder's Diary Vol. 3: Infrastructure Pipeline with GitLab and Terraform Cloud
  6. Hot off the Cloud: October 2022
  7. Migrating CodePipeline to GitHub Actions to improve performance
  8. Builder's Diary Vol. 2: Serverless ETL with Airflow and Athena
  9. 🎧 AWS-to-go: Podcast series to get started with AWS
  10. Show Me Your Architecture Vol. 1: Scanning S3 buckets for malware
  11. Enhance EFS file system protection with TLS and IAM
  12. Step Functions pitfall: The execution reached the maximum number of history events (25000)
  13. Monitor VPC NAT gateways with CloudWatch metrics and alarms
  14. CloudFormation cfn-init pitfall: Auto scaling and throttling error rate exceeded
  15. Selling an AMI and a CloudFormation template as an alternative to SaaS
  16. Fargate vs. App Runner
  17. Authentication at the edge with Lambda@Edge and Cognito
  18. Builder's Diary Vol. 1: Successful Cloud Migrations
  19. ALB vs. NLB: Which AWS load balancer fits your needs?
  20. Review: App Runner - Simply containers on AWS!
  21. Building multi-architecture container images for AWS Graviton
  22. Deprecated Terraform provider template causes `Incompatible provider version` error
  23. Security Iceberg: AWS Security Hub the right way
  24. Automate CloudFormation StackSets with CloudFormation
  25. Review: Aurora Serverless v2
  26. Launching cloudonaut talent
  27. Amazon Web Services in Action 3rd Edition: Early Access
  28. Application Authentication and Authorization on AWS
  29. How to create a security group allowing traffic from CloudFront only?
  30. Sanction Russia: Block traffic using CloudFront Geo Restriction
  31. Enabling S3 Versioning is not a backup strategy
  32. AWS Security: Stephen Kuenzli and Andreas Wittig on IAM
  33. Connect to your EC2 instance using SSH the modern way
  34. How to set up Jenkins on AWS?
  35. Parental Leave (Michael)

2021 42

  1. 2021 in Review
  2. Video Hosting on AWS
  3. AWS Architect Mindset
  4. EBS Snapshot Pitfalls: Does your backup withstand reality?
  5. Celebrating five years of marbot
  6. Containers on AWS: ECS, EKS, and Fargate
  7. EC2 Checklist: 7 things to do after launching an instance
  8. The AWS Security Journey (2021)
  9. How to Replicate Your Data with DynamoDB Global Tables
  10. Multi-Region AWS Architectures
  11. Choosing the best way to scale EC2 instances on demand
  12. Calculate AWS Costs in Detail
  13. Getting Started with Free Templates for AWS CloudFormation
  14. Unboxing S3 Object Lambda
  15. How I use AWS Security Hub
  16. AWS Architecture Pattern for Scheduled & Serverless Batch Processing
  17. Real-world CodePipeline CI/CD examples
  18. Serving content only to logged-in users with CloudFront Signed Cookies
  19. Running containers on spot infrastructure
  20. Review: AWS Fault Injection Simulator (FIS) – Chaos as a Service?
  21. Programming your CDN: CloudFront and Lambda@Edge
  22. Defining IAM Policies with Terraform safely
  23. Managing application secrets: SSM Parameter Store vs. Secrets Manager
  24. What Architects Need to Know About Networking on AWS
  25. Cognito Under the Hood
  26. DNSSEC with Route 53: Protecting the core of the Internet
  27. Parental Leave (Andreas)
  28. A Deep Dive into AWS CloudTrail
  29. Serverless in the Enterprise
  30. Serverless Hybrid Cloud: Accessing an API Gateway via VPN or Direct Connect
  31. AWS Backup - Vault cannot be deleted? Use this script!
  32. All you need to know about encrypting S3 buckets
  33. CloudFormation Modules
  34. Does your VPC endpoint allow access to half of the Internet?
  35. AWS Client VPN: Connected with the Cloud
  36. 5 good reasons not to get AWS certified
  37. Unboxing Amazon Managed Service for Prometheus (AMP)
  38. Guest authors wanted!
  39. What's new about AWS SDK for JavaScript v3?
  40. Debugging a VPC: Security Groups, Network ACLs, and Routing Tables
  41. Cheap, Durable, Fast. How to choose an EBS volume type?
  42. How to Become an AWS Certified Solutions Architect

2020 60

  1. 2020 in Review
  2. What's the CO² footprint of your architecture?
  3. Unboxing AWS DataSync
  4. re:Invent 2020: Recap of Werner Vogels's Keynote
  5. Next Generation Load Balancing: ALB with gRPC and HTTP/2
  6. 3½ ways to workaround missing CloudFormation support
  7. How to configure SAML for AWS SSO?
  8. A recap of the re:Invent 2020 Keynote with Andy Jassy
  9. Unusual AWS Architectures
  10. CodeBuild Report Groups 101
  11. Amazon EventBridge versus Amazon SNS: What's the difference?
  12. privacy policy
  13. Comparing API Gateways on AWS
  14. Transition to IMDSv2 on EC2 - Introduction, Preparation, Pitfalls
  15. Tracing an HTTP request
  16. Getting started with IPv6 on AWS
  17. How to enable CORS on API Gateway with Lambda proxy integration?
  18. Unboxing Amazon Timestream
  19. Caching on AWS 101
  20. Have you replaced IAM Users with AWS SSO yet?
  21. Amazon ECR vs. Docker Hub vs. GitHub Container Registry
  22. I'm losing trust in AWS. SNS is broken for 65 days.
  23. AWS needs a bug bounty program
  24. Record AWS API calls to improve IAM Policies
  25. NoSQL on AWS: Document-Oriented Databases
  26. Review: AWS App Mesh – A service mesh for EC2, ECS, and EKS
  27. Workaround: CodePipeline for GitHub Enterprise
  28. (Erratum) VPC Endpoint increases DynamoDB latency by 30%
  29. 10 Obstacles for Lift & Shift Architectures
  30. AWS Month in Review: July 2020
  31. How do you choose the best storage option on AWS?
  32. Run the AWS CLI v2 inside Docker
  33. Use multiple AWS accounts, but keep it simple!
  34. ECS Deployment Options - From rolling updates to blue-green and canary
  35. Resilient event-driven Serverless architectures: Isolate your dependencies
  36. Messaging on AWS
  37. Containers vs. Serverless: Thoughts About Your Cloud Strategy
  38. Review: API Gateway HTTP APIs - Cheaper and Faster REST APIs?
  39. End-user monitoring of your website with CloudWatch Synthetics
  40. Terraform, can you keep a secret?
  41. 5th Anniversary of cloudonaut
  42. Scaling Container Clusters on AWS: ECS and EKS
  43. Databases on AWS
  44. Anonymize CloudFront Access Logs
  45. Building with EC2: 10 Tips for the Successful Cloud Architect
  46. AWS Account Structure: Think twice before using AWS Organizations
  47. Top 14 Must-Haves for Your AWS Architecture Checklist
  48. CloudWatch Metrics & Alarms reloaded
  49. Seamless EC2 monitoring with the Unified CloudWatch Agent
  50. Advanced AWS Networking: Pitfalls That You Should Avoid
  51. How to analyze and reduce S3 storage usage?
  52. On the way to sustainable open source projects
  53. What's the best AWS Compute option for your project?
  54. GitHub Actions vs. AWS CodePipeline
  55. Review: Amazon Connect – A Programmable Telephone System
  56. Show your Tool: Parliament
  57. EC2 Instances 2.0 - Time to Update Your Toolbox
  58. How to secure your DevOps tools with ALB authentication?
  59. 10 Success Factors for Starting Your Cloud Journey
  60. AWS Cost Optimization 101

2019 51

  1. 2019: Review and Outlook
  2. Dockerizing Ruby on Rails
  3. Combine CloudWatch metrics for Auto Scaling or to reduce costs
  4. All you need to know about AWS re:Invent in 2019
  5. How to dockerize your Node.js Express application for AWS Fargate?
  6. Show your Tool: Jenkins Pipeline Step Plugin for AWS
  7. Checklist: Is your application ready for a container cluster?
  8. Reduce your AWS bill with Savings Plans
  9. ETL with a Glue Python Shell Job: Load data from S3 to Redshift
  10. How to dockerize your Python Django application for AWS Fargate?
  11. re:Invent Roulette
  12. Review: AWS Global Accelerator - Improving Latency and Design for Failure
  13. Resilient task scheduling with ECS Fargate
  14. How we run our blog cloudonaut.io
  15. Show your Tool: awsume
  16. How to avoid S3 data leaks?
  17. Prevent CloudFormation Change Sets from piling up
  18. Rapid CI/CD with CodeBuild to deploy PHP and Docker
  19. How to create a customized CloudWatch Dashboard with CloudFormation
  20. Review: Amazon Aurora Serverless - A cloud-native and production-ready relational database?
  21. How to sell pay per use SaaS to AWS customers in the AWS Marketplace
  22. Avoid the 60 minutes timeout when using the AWS CLI with IAM roles
  23. We have a podcast!
  24. EC2 Instance Connect is an insecure default!
  25. Verify SNS messages delivered via HTTP(S) in Node.js
  26. Review: AWS Backup - A centralized place for managing backups?
  27. Calling AppSync GraphQL from Lambda
  28. Dockerizing legacy applications with confd
  29. How to dockerize your PHP application for AWS Fargate?
  30. Analyze CloudWatch Logs like a pro
  31. School's Out For Summer
  32. AWS CloudTrail: your audit log is incomplete
  33. EFS with TLS behind a proxy
  34. AWS SSM is a trojan horse: fix it now!
  35. More than 25 SSL certificates with ECS
  36. Cronjob at the edge with AWS IoT
  37. Download YouTube videos with AWS Lambda and store them on S3
  38. 6 new ways to reduce your AWS bill with little effort
  39. Monitoring EC2 Network Utilization
  40. Own your analytics data: Replacing Google Analytics with Amazon QuickSight
  41. 6 unknown CloudFormation features you should know about
  42. Goodbye SSH, use AWS Session Manager instead
  43. Three ways to run Docker on AWS
  44. Fargate networking 101
  45. Beginner-friendly mobile backend based on AWS AppSync
  46. A brief history of AWS architectures
  47. ECS vs. Fargate: What's the difference?
  48. Serverless WebSocket API: API Gateway, Kinesis, Lambda
  49. Cost savings with DynamoDB On-Demand: Lessons learned
  50. AWS SLA: Are you able to keep your availability promise?
  51. Fargate is ready for prime time, and we share our CloudFormation templates

2018 37

  1. 2018 in Review
  2. How to become an AWS expert
  3. Eat your own dog food: how AWS leverages Serverless
  4. The somewhat different AWS re:Invent recap
  5. My mental model of AWS
  6. Meet us at re:Invent (Update)
  7. Three simple rules to avoid data leaking from S3
  8. Customized rate limiting for API Gateway by path parameter, query parameter, and more
  9. EC2 Network Performance of t3
  10. Hot off the press: Amazon Web Services in Action Second Edition
  11. Comparing Serverless offerings from Alibaba Cloud and AWS
  12. A neglected serverless data store: Cloud Directory
  13. DevOps on AWS Radio
  14. Encrypting sensitive data stored on S3
  15. Restricting Access to EC2 Instances Based on Tags
  16. Analyzing CloudTrail with Athena
  17. Dead man's switch with CloudWatch
  18. Rich Social Sharing with single page applications hosted on S3 and delivered via CloudFront
  19. Rapid CloudFormation: cfn-modules
  20. EKS vs. ECS: orchestrating containers on AWS
  21. Cleaning up an S3 bucket with the help of Athena
  22. Cloud adaption strategy: event-based data synchronization
  23. Sharing data volumes between machines: EFS
  24. Behind the scenes of the EC2 network performance benchmark
  25. Evolutionary Serverless Architecture: JeffConfg Hamburg 2018 talk
  26. Serverless pattern: accessing public and private resources
  27. Configure your CloudFormation managed infrastructure with Parameter Store and CodePipeline
  28. Burst credits of t2 EC2 instances need monitoring
  29. New CloudFormation Templates - Store your state
  30. Tweaking RDS database performance and ElastiCache
  31. Introducing AWS Lambda
  32. Monitoring a critical part of your infrastructure: Amazon Elasticsearch domain
  33. Monitoring a critical part of your infrastructure: Amazon Relational Database Service (RDS)
  34. Monitoring a critical part of your infrastructure: Amazon ElastiCache memcached cluster
  35. Migrating to Amazon Linux 2
  36. AWS Monitoring Primer
  37. EC2 Network Performance Cheat Sheet

2017 39

  1. 2017 in Review
  2. Evolution of the EC2 Network Performance: m3, m4, and m5
  3. AWS re:Invent 2017 themes
  4. Join our re:Invent follow-up group
  5. EC2 network performance demystified: m3 and m4
  6. Meet me at AWS re:Invent and have breakfast with me
  7. Your Lambda function might execute twice. Be prepared!
  8. Send CloudWatch Alarms to Slack with AWS Lambda
  9. Passwordless database authentication for AWS Lambda
  10. Engaging your users with AWS Step Functions
  11. A simple way to manage log messages from containers: CloudWatch Logs
  12. Amazon Web Services in Action Second Edition is in the works
  13. A non-technical way to reduce your AWS bill within 5 minutes
  14. The Cloud Switch: IoT Button, Lambda, and CloudFormation
  15. CloudFormation vs Terraform in 2022
  16. CloudWatch is neglected: Why is the control room empty?
  17. Maintaining an Open Source library of production-ready CloudFormation templates
  18. Move to the Next Level of Load Balancing on AWS
  19. Lessons learned: Serverless Chatbot architecture for marbot
  20. ECS vs. Kubernetes: same same but different
  21. Amazon Elasticsearch Service revised
  22. AWS Security Primer
  23. AWS Velocity Series: Summary
  24. New CloudFormation Template - Operational Alerts and new Docs
  25. AWS Velocity Series: Serverless app
  26. AWS Velocity Series: Containerized ECS based app CI/CD pipeline
  27. AWS Velocity Series: Containerized ECS based app infrastructure
  28. Painlessly create or update a CloudFormation stack in an idempotent way
  29. AWS Velocity Series: EC2 based app CI/CD pipeline
  30. AWS Velocity Series: EC2 based app infrastructure
  31. DZone Cloud Guide including Serverless Architectures on AWS
  32. New CloudFormation Templates - ECS Cluster & Service, legacy VPC wrapper, automated tests
  33. AWS Velocity Series: Running your application
  34. AWS Velocity Series: CI/CD Pipeline as Code
  35. Free ebook: Exploring Cloud Computing
  36. AWS Velocity Series: Local development environment
  37. AWS Velocity Series: Set the assembly line up
  38. AWS Velocity Series
  39. Book review: The DevOps Handbook

2016 72

  1. 2016 in Review: Thank You!
  2. Delivery Pipeline as Code: AWS CloudFormation and AWS CodePipeline
  3. Designing asynchronous event systems with AWS IoT and Serverless Application Model (SAM)
  4. AWS Advent has started: Deploy your AWS Infrastructure Continuously
  5. DynamoDB pitfall: limited throughout due to hot partitions
  6. A pattern for Continuously Deployed, Immutable and Stateful applications on AWS
  7. My Opinion on Serverless
  8. WordPress on AWS: smooth and pain free
  9. AWS CloudFormation Update Evaluation - YAML, Cross-Stack References, Simplified Substitution
  10. New CloudFormation Template - Authentication Proxy using your GitHub Organization and YAML
  11. Serverless Slack Bot Hero Award
  12. Beyond the default: a Multi-VPC architecture
  13. Introducing the real-time data store: Kinesis Streams
  14. marbot, our submission to the AWS Serverless Chatbot Competition
  15. Connecting Kinesis Analytics with AWS IoT
  16. New CloudFormation Templates - VPC bastion host, Jenkins, Security AWS Config
  17. New Online Training - Navigating the AWS Management Console
  18. Getting started with AWS IoT and Tessel
  19. Pitfall: ACM Certificate with CloudFormation
  20. Reference API Gateway Models in CloudFormation
  21. Improve Security (Groups) using VPC Flow Logs & AWS Config
  22. Process-as-Code #c9d9
  23. AWS Weekly 2016-33
  24. Jenkins Templates for AWS CloudFormation
  25. Complete AWS IAM Reference
  26. AWS Weekly 2016-32
  27. Create a serverless RESTful API with the Serverless Framework powered by API Gateway, Lambda, and DynamoDB
  28. AWS Weekly 2016-31
  29. API Gateway Custom Authorization with Lambda, DynamoDB and CloudFormation
  30. AWS Weekly 2016-30
  31. Imprint
  32. Your AWS Account is a mess? Learn how to fix it!
  33. Create a serverless RESTful API with API Gateway, CloudFormation, Lambda, and DynamoDB
  34. AWS Weekly 2016-29
  35. DevOps and Security #c9d9
  36. AWS Weekly 2016-28
  37. Serverless Big Data pipeline on AWS
  38. AWS Weekly 2016-27
  39. Serverless: Invalidating a DynamoDB Cache
  40. AWS Weekly 2016-26
  41. The Life of a Serverless Microservice on AWS
  42. Setup Amazon EFS in 60 seconds
  43. AWS Weekly 2016-25
  44. Performance boost and cost savings for DynamoDB
  45. AWS Weekly 2016-24
  46. Using S3 for static web hosting
  47. 6 tips and tricks for AWS command-line ninjas
  48. AWS Monthly Review - May 2016
  49. Integrate SQS and Lambda: serverless architecture for asynchronous workloads
  50. Free ebook: Cloud Native Applications
  51. Pro bono: non-profit project wanted
  52. DIY AWS Security Review
  53. AWS Monthly Review - April 2016
  54. Avoid security credentials on GitHub
  55. Free ebook: Building and Deploying Applications on the Cloud
  56. Antivirus for S3 Buckets
  57. Manage AWS EC2 SSH access with IAM
  58. New Online Training - Automating AWS with CloudFormation
  59. New CloudFormation Templates - NAT Gateway, Static website, Security
  60. Event Driven Security Automation on AWS
  61. AWS Monthly Review - March 2016
  62. Security Templates for AWS CloudFormation
  63. Introducing the Object Store: S3
  64. Optional Parameter in CloudFormation
  65. Avoid Sharing Key Pairs for EC2
  66. AWS Weekly 2016-08
  67. Protect AWS SDK calls with Bulkheads and Circuit Breakers
  68. Discovering Machine Learning with Iris flower data set
  69. Rolling Update with AWS CloudFormation
  70. Static Website Templates for AWS CloudFormation
  71. VPC Templates for AWS CloudFormation
  72. AWS year in review

2015 25

  1. 5 AWS mistakes you should avoid
  2. Show your SaaS architecture: Time Series Guru
  3. Serverless image resizing at any scale
  4. A look at DynamoDB
  5. 3 simple ways of saving up to 90% of EC2 costs
  6. High availability is a no-brainer: EC2 auto-recovery
  7. Create a serverless RESTful API with API Gateway, Swagger, Lambda, and DynamoDB
  8. EC2 Templates for AWS CloudFormation
  9. WordPress on AWS: you are holding it wrong
  10. WordPress Templates for AWS CloudFormation
  11. Improve AWS security: protect your keys with ease
  12. CloudFormation vs Engineers: How to protect your CloudFormation managed AWS account from human intervention
  13. 5 announcements I missed at re:Invent
  14. Day 2 at the AWS re:Invent – what we learned
  15. Understanding Infrastructure as Code
  16. Day 1 at the AWS re:Invent – what we learned
  17. Amazon Web Services in Action is available
  18. Prevent outages with redundant EC2 instances
  19. Building blocks for highly available systems
  20. Monitor your AWS account to detect suspicious behavior in real time
  21. Your single AWS account is a serious risk
  22. Private subnets are broken on AWS
  23. Amazon Web Services in Action
  24. Interacting with AWS to turn system diagrams into reality
  25. What can you do with AWS?

Undated 2

  1. Start listening
  2. Start listening