Bug in KMS: encryption key that cannot be deleted
Recently, I noticed a weird KMS key on an AWS account - what was weird about it, was the fact that it wasn’t marked as AWS-managed key, but no-one (not even root) could delete or modify the key!
Blog
Notes from the work
Notes from our work with AWS, DevOps and security: news and new features, fixes for common problems, and how we solved real client issues.
Read more →
Creating Elasticsearch Domain did not stabilize - can't create AWS Elasticsearch 5.1 with CloudFormation
Recently AWS announced support for Elasticsearch 5.1 in their Elasticsearch Service. Today, I tried to upgrade an existing CloudFormation stack, previously using Elasticsearch 2.3, to the new version and, after a very long wait, CloudFormation rolled back the stack with the following error: “Creating Elasticsearch Domain did not stabilize”. Here’s what I did to solve it.
How to tag Redshift clusters (and others) in one place in AWS Console
Management page of Redshift in AWS Console does not currently allow you to add or modify tags on your clusters. That doesn’t mean that Redshift resources cannot be tagged - almost everything from clusters to parameters groups can be tagged through the Tag Editor.
Bypassing CloudTrail and CloudWatch monitoring of AWS API
Since AWS released CloudWatch Logs and allowed for automated streaming of CloudTrail events into CloudWatch, monitoring API usage with CloudWatch metrics and alerts has become increasingly popular. It’s incredibly easy to set up and add custom alerts on almost any API event. But is it actually going to notify you when an unauthorized person gains access?
Adding more nodes to Redshift cluster doesn't always mean you get more space
AWS Redshift is a big data storage (“data warehousing”) solution for analytics. Based on PostgreSQL 8, it can combine up to 128 largest nodes, giving you 2 petabytes for your data. Well, almost. You don’t get ALL that for your data.
Let's talk
Start with a free second opinion: 30 minutes with our founder. No account access needed, and you keep a short written note of what we covered.
Schedule a meeting: our calendar
Email: contact@mysteriouscode.com
