Using AWS accounts to isolate workloads has long been established as a good practice but it can often be unclear how to manage that process. AWS recently released Control Tower to make it easier for teams to manage their AWS accounts. But Control Tower has some limitations, for example it…

A few weeks ago The Scale Factory released s3audit, a command line tool for auditing the settings of AWS S3 buckets. Since its release s3audit has garnered a modest amount of interest from the wider AWS community. Following the release: The original Medium article announcing the release was featured in…

These days it can seem like we don’t have to wait very long for another data breach involving an insecure S3 bucket. Such data breaches generally involve private data being stored in an S3 bucket which allows public access. This year alone we’ve seen data breaches from Teletext Holidays, a…

You’ve heard all the reasons why you should migrate to Fargate, but what do you need to think about when doing a migration? You have two options for deploying a containerised application to AWS ECS. With the EC2 launch type you deploy your applications to a fleet of EC2 instances…

A common strategy when using CodePipeline is to upload files to an S3 bucket as part of the deployment process. This works great for a simple pipeline where the pipeline and the S3 bucket exist in the same account. But imagine a more complicated situation where you want to deploy…

Using multiple AWS accounts to provide separation of concerns within a system is a good practice which is increasingly being adopted. This shift has become easier with the introduction of new features which make managing a multi-account system easier. One of these features is Service Control Policies (SCPs), which makes…