Logging in a multi-account AWS environment
Collecting and storing different types of logs are crucial for security and compliance, especially when we deal with such standards as HIPAA, PCI DSS and others. When we build a secure multi-account infrastructure with AWS Control Tower, we get a “Log Archive” account in the initial setup. There are many AWS services that can generate […]
Machine Learning services in AWS (part 2)
In the previous post we started an overview of Machine Learning and Artificial Intelligence services in AWS, including Amazon Sagemaker and Amazon Rekognition. In this one we will take a look at Amazon Polly, Amazon Translate, Amazon Transcribe, Amazon Comprehend and Amazon Textract. Amazon Polly Amazon Polly is a service that turns text into lifelike […]
Machine Learning services in AWS (part 1)
Machine Learning is everywhere. Even if not everywhere, the majority of people face it every day while surfing the internet, buying things online, watching videos, listening to music and many other activities. Machine learning is integrated in social media, ecommerce, healthcare, banking, manufacturing and other industries. It helps to enhance the customer service experience, personalize […]
More about AWS Landing Zone (Part 2)
Automat-it is moving forward with our Landing Zone solutions. The previous post demonstrated an IP management solution, Backup Policies and License Manager. This post describes some security and compliance topics as well as cost optimization, in particular we will take a look at Security Hub, Tag Policies, Resource groups and Budgets with alerts. AWS Security […]
More about AWS Landing Zone (Part 1)
Since AWS launched the Landing Zone capability in June 2018, Automat-it has invested in building secured and robust solutions around it. The first post about our Landing Zone solutions was published 1 year ago. Since then we added many interesting and useful solutions and AWS features, including: – IP address management – Backup policies – […]
How to deploy Helm charts to an EKS cluster through AWS CloudFormation
Problem statement There are several ways to create an EKS cluster in AWS: Web console or CLI EKSctl tool Terraform, CloudFormation or other IaC tools Third-party products In most cases an empty kubernetes cluster is not enough. We still may need an Ingress Controller, Cluster autoscaler, External DNS, Prometheus, etc. included in a default cluster […]
AWS infrastructure for a clickstream data analysis
Problem statement Analysing the user’s behaviour is very important for making right decisions in application development and maximising business value. AWS provides many services useful for data streaming, transformation and analysis. In this blog post I’m describing a Proof Of Concept project where I tried to simulate clickstream activity, ingest it to AWS, store, transform, […]
Testing AWS network performance
Updated: Oct 7, 2022 Problem statement Our customers often ask us about different aspects of network performance in AWS, how architecture or configurations can affect it, what to expect and how to optimize it. In this blog post I will explain basic components influencing a network performance, complete several tests and demonstrate outcomes. Basic components […]
AWS Control Tower and Landing Zone simplifies HIPAA Compliance
Problem statement Since the introduction of HIPAA in 1996, healthcare providers have invested in different solutions to secure sensitive patient data. These providers are increasingly turning to the cloud, which has quickly become a low-cost way to develop the complex infrastructure required to support their critical organizational activities. The most important items for HIPAA compliance […]