https://rhinodigits.com/blog/ Technische Notizen zu AWS, CloudFormation, Serverless und Containern. en https://rhinodigits.com/blog/kinesis-data-stream-as-lambda-trigger-in-aws-cloudformation/ https://rhinodigits.com/blog/kinesis-data-stream-as-lambda-trigger-in-aws-cloudformation/ Tue, 14 Jan 2020 07:11:00 GMT Amazon Web Services This AWS CloudFormation YAML template demonstrates how a Kinesis Data Stream stream can be implemented as Lambda Trigger in AWS CloudFormation. Simply deploy the following template via the AWS CloudFo https://rhinodigits.com/blog/implement-conditional-properties-in-aws-cloudformation/ https://rhinodigits.com/blog/implement-conditional-properties-in-aws-cloudformation/ Sun, 12 Jan 2020 23:01:00 GMT Amazon Web Services The following CloudFormation snippet shows how to use conditional properties in an CloudFormation template. The example configures one or two subnets in the VPCOptions section of an Elasticsearch doma https://rhinodigits.com/blog/retrieve-stackname-from-nested-stacks-in-aws-cloudformation/ https://rhinodigits.com/blog/retrieve-stackname-from-nested-stacks-in-aws-cloudformation/ Fri, 10 Jan 2020 17:31:00 GMT Amazon Web Services Using the intrinsic function Ref on a Stack created within another Stack only gives you the Id of the referenced Stack. If you want to get the StackName which is generated automatically you have to do https://rhinodigits.com/blog/macos-chrome-acceppt-self-signed-certificates-bypass-your-connection-is-not-private/ https://rhinodigits.com/blog/macos-chrome-acceppt-self-signed-certificates-bypass-your-connection-is-not-private/ Mon, 21 Oct 2019 09:23:00 GMT MacOS Everyone who works as a developer will sometimes face the problem that he has self-issued / self-signed certificates for his website / webserver / api in his development environment and these certific https://rhinodigits.com/blog/implement-metric-filter-to-profile-memory-usage-for-aws-lambda-functions-in-aws-cloudformation/ https://rhinodigits.com/blog/implement-metric-filter-to-profile-memory-usage-for-aws-lambda-functions-in-aws-cloudformation/ Mon, 24 Jun 2019 19:02:00 GMT Amazon Web Services Not long ago I came across the problem that I wanted to know in detail how much of the allocated memory my individual lambda functions consumes. Since memory consumption is not part of the standard La https://rhinodigits.com/blog/use-metric-math-in-cloudwatch-alarm-using-cloudformation/ https://rhinodigits.com/blog/use-metric-math-in-cloudwatch-alarm-using-cloudformation/ Wed, 06 Feb 2019 19:52:00 GMT Amazon Web Services Recently I had the following problem, a CloudWatch Alarm based on the Error-Metric of a critical Lambda Function occasionaly caused notifications. The reason for the notifications was quickly found th https://rhinodigits.com/blog/implement-kinesis-firehose-s3-delivery-preprocessed-by-lambda-in-aws-cloudformation/ https://rhinodigits.com/blog/implement-kinesis-firehose-s3-delivery-preprocessed-by-lambda-in-aws-cloudformation/ Wed, 06 Feb 2019 18:17:00 GMT Amazon Web ServicesSnippets Recently I have experimented a little with Kinesis Firehose. The result is this concise undocumented template which setup an Kinesis Firehose S3 Delivery Stream preprocessed by Lambda in AWS CloudForm https://rhinodigits.com/blog/aws-global-summits-2019/ https://rhinodigits.com/blog/aws-global-summits-2019/ Wed, 05 Dec 2018 21:01:00 GMT Amazon Web Services In 2019 again many local summits are planned by AWS. Because the official website ( https://aws.amazon.com/summits/ ) has not been updated yet. I'm offering here a small compilation of next year&# https://rhinodigits.com/blog/define-apigateway-lambda-and-dynamodb-using-aws-cdk/ https://rhinodigits.com/blog/define-apigateway-lambda-and-dynamodb-using-aws-cdk/ Sun, 02 Dec 2018 02:19:00 GMT Amazon Web ServicesAWS CDKSnippets AWS has released a developer preview of **AWS CDK** during re:Invent 2018. A detailed description and the release informations can be found here: [AWS CDK Developer Preview](https://aws.amazon.com/blo https://rhinodigits.com/blog/amazon-dynamodb-transactions-support/ https://rhinodigits.com/blog/amazon-dynamodb-transactions-support/ Wed, 28 Nov 2018 01:28:00 GMT Amazon Web ServicesAWS DynamoDB Somewhat unexpectedly but quite deservedly, Amazon Web Services (AWS) has released DynamoDB Transactions at this year's re:Invent. Until now there was only one "official" additional Java https://rhinodigits.com/blog/aws-cloudformation-yaml-json-skeleton/ https://rhinodigits.com/blog/aws-cloudformation-yaml-json-skeleton/ Tue, 27 Nov 2018 08:27:00 GMT Amazon Web ServicesAWS CloudFormationSnippets Two simple skeleton tempates which should be used to initialize when creating a new template from scratch. In general it is important that only the resources area is required and at least one resource https://rhinodigits.com/blog/authenticate-via-additional-iam-users-or-roles-in-aws-eks-kubernetes-cluster/ https://rhinodigits.com/blog/authenticate-via-additional-iam-users-or-roles-in-aws-eks-kubernetes-cluster/ Wed, 21 Nov 2018 19:01:00 GMT Amazon Web ServicesAWS EKSKubernetes Recently I had the following problem: I created an EKS cluster in an AWS account with the root user and could not access the cluster later with other IAM users (with all permissions on EKS) via *kubec https://rhinodigits.com/blog/aws-elasticsearch-call-to-authorization-engine-failed/ https://rhinodigits.com/blog/aws-elasticsearch-call-to-authorization-engine-failed/ Mon, 19 Nov 2018 22:01:00 GMT Amazon Web ServicesElasticSearch While updating some lambda functions to AWS ElasticSearch Service version 6.3 the following error occurred: StatusCodeError: 503 - { "Message": "Call to Authorization engine failed&quot https://rhinodigits.com/blog/drift-detection-now-available-in-aws-cloudformation/ https://rhinodigits.com/blog/drift-detection-now-available-in-aws-cloudformation/ Tue, 13 Nov 2018 23:21:00 GMT Amazon Web ServicesAWS CloudFormation Announced at reinvent 2017 in a CloudFormation Deep Dive session for "early 2018" - now (almost at the end of 2018) the time has come. AWS has added a new and long awaited feature to CloudFormation th https://rhinodigits.com/blog/implement-s3-bucket-lambda-triggers-in-aws-cloudformation/ https://rhinodigits.com/blog/implement-s3-bucket-lambda-triggers-in-aws-cloudformation/ Wed, 03 Oct 2018 13:21:00 GMT Amazon Web ServicesAWS CloudFormationSnippets Implement S3 Bucket Lambda triggers in AWS CloudFormation can be quite tricky because of very often circular dependencies or errors like "Unable to validate the following destination configuratio https://rhinodigits.com/blog/use-or-output-amazon-mq-endpoints-in-aws-cloudformation/ https://rhinodigits.com/blog/use-or-output-amazon-mq-endpoints-in-aws-cloudformation/ Sat, 29 Sep 2018 23:10:00 GMT Amazon Web ServicesSnippets Amazon MQ with ActiveMQ under the hood offers several different protocols, each with its own endpoint. Unfortunately, you can't reference or output them directly in AWS CloudFormation. To make thi https://rhinodigits.com/blog/output-amazon-api-gateway-domain-name-url-in-aws-cloudformation/ https://rhinodigits.com/blog/output-amazon-api-gateway-domain-name-url-in-aws-cloudformation/ Fri, 28 Sep 2018 21:18:00 GMT Amazon Web ServicesSnippets Unfortunately, it is currently not possible to output or use the domain name / URL of an Amazon API gateway via Fn::GetAtt in AWS CloudFormation. Therefore I provide the following CloudFormation snipp https://rhinodigits.com/blog/reserved-seating-for-aws-reinvent-2018-sessions-announced/ https://rhinodigits.com/blog/reserved-seating-for-aws-reinvent-2018-sessions-announced/ Sat, 22 Sep 2018 15:21:00 GMT Amazon Web Services AWS re:Invent 2018 is getting closer and closer and many will have wondered when session can be registered or reserved. Today the official re:Invent Twitter account announced that seats can be reserve https://rhinodigits.com/blog/sqs-queue-as-lambda-trigger-in-aws-cloudformation/ https://rhinodigits.com/blog/sqs-queue-as-lambda-trigger-in-aws-cloudformation/ Wed, 11 Jul 2018 19:21:00 GMT Amazon Web ServicesAWS CloudFormationSnippets Recently AWS released that the Amazon Simple Queue Service (SQS) is now available as a supported event source for AWS Lambda Functions. You can read the related blog post here: https://aws.amazon.com/ https://rhinodigits.com/blog/aws-cloudformation-conditional-arrays/ https://rhinodigits.com/blog/aws-cloudformation-conditional-arrays/ Thu, 28 Jun 2018 21:11:00 GMT Amazon Web ServicesAWS CloudFormationSnippets Sometimes in CloudFormation a Parameter requires an array, and often an array of variable size is required, determined for example by input parameters. For instance AWS::AmazonMQ::Broker were you need https://rhinodigits.com/blog/aws-cloudformation-cidr-check-using-allowedpattern/ https://rhinodigits.com/blog/aws-cloudformation-cidr-check-using-allowedpattern/ Thu, 28 Jun 2018 13:27:00 GMT Amazon Web ServicesAWS CloudFormationSnippets https://rhinodigits.com/blog/use-github-source-in-aws-codebuild-project-using-aws-cloudformation/ https://rhinodigits.com/blog/use-github-source-in-aws-codebuild-project-using-aws-cloudformation/ Mon, 18 Jun 2018 18:15:00 GMT Amazon Web ServicesAWS CloudFormation I wanted to create an AWS CodeBuild project using AWS CloudFormation, which checks out its sources from GitHub and is triggered via GitHub Webhooks. From these sources, a Node.js application should be https://rhinodigits.com/blog/regex-aws-lambda-arn/ https://rhinodigits.com/blog/regex-aws-lambda-arn/ Wed, 13 Jun 2018 15:25:00 GMT Amazon Web ServicesSnippets A simple regex statement to verify an AWS Lambda Function ARN (Amazon Resource Name). arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a https://rhinodigits.com/blog/generate-passwords-in-aws-cloudformation-template/ https://rhinodigits.com/blog/generate-passwords-in-aws-cloudformation-template/ Wed, 03 Jan 2018 20:38:00 GMT Amazon Web ServicesAWS CloudFormation Sometimes its necessary to generate random passwords inside a CloudFormation template for instance to secure internet facing applications running on an EC2 or ECS instance. To achieve this you have th https://rhinodigits.com/blog/aws-global-summits-2018/ https://rhinodigits.com/blog/aws-global-summits-2018/ Tue, 02 Jan 2018 09:01:00 GMT Amazon Web Services With 100000+ total attendees 2017 in 28 summits over the year, AWS extended their reach. This year AWS is increasing the total amount of summits to 29. In AWS words AWS Global Summits are: ... free ev https://rhinodigits.com/blog/introduction-to-docker-what-is-docker/ https://rhinodigits.com/blog/introduction-to-docker-what-is-docker/ Mon, 10 Jul 2017 13:24:00 GMT Containers Great introduction and background stories about the success of docker. dotCloud founder and CTO Solomon Hykes recently stopped by Twitter HQ to show us Docker, an open source project designed to easil https://rhinodigits.com/blog/retrieve-the-hosted-zone-for-amazon-cloudfront-distribution/ https://rhinodigits.com/blog/retrieve-the-hosted-zone-for-amazon-cloudfront-distribution/ Thu, 25 May 2017 21:02:00 GMT Amazon Web Services Lately, I've been searching a long time to find out that the hosted zone id for Amazon CloudFront distribution is statically set to: Z2FDTNDATAQYW2 Source: Route 53 Template Snippets https://rhinodigits.com/blog/delete-a-release-tag-on-github/ https://rhinodigits.com/blog/delete-a-release-tag-on-github/ Wed, 05 Apr 2017 19:17:00 GMT Snippets Everyone knows how easy it is to create a release on GitHub but how can you revoke it? This can be implemented quite easily in just a few steps: git tag -d 1.0.0 git push origin :refs/tags/1.0.0 The f https://rhinodigits.com/blog/dynamodb-batchgetitem-from-global-secondary-index-or-local-secondary-index/ https://rhinodigits.com/blog/dynamodb-batchgetitem-from-global-secondary-index-or-local-secondary-index/ Sun, 12 Feb 2017 09:01:00 GMT Amazon Web ServicesAWS DynamoDb Unfortunately, BatchGetItem does currently not support operations on indexes. BatchGetItem can only read from the base table, and not from indexes (LSI, GSI). Therefore, you need to perform several qu