aws - CybAI news

04 Aug

Running Jobs in a Container via GitHub Actions Securely

stp2y0 CommentsNewsaws, cicd, coding, community, development, engineering, github, inclusive, software, tutorial

Like any modern CI/CD platform, GitHub allows users to run CI jobs in a container. This is great for running consistent and reproducible CI jobs as well as reducing the amount of setup steps that is required for the job to run (e.g., running actions/setup-python to install Python environment and installing necessary packages via pip) as those environments and dependencies can be baked into the container. In order to make use of this feature, in the GitHub yaml file, specify the container to run any steps in a job via jobs.<job_id>.container. This will tell GitHub to spin up a container…

03 Aug

Politica para forzar la configuracion de Multifactor de autenticación en usuarios IAM de AWS.

stp2y0 CommentsNewsaws, awssecurity, cloudsecurity, coding, community, development, engineering, inclusive, software

La autenticación multifactor (MFA) es una capa adicional de seguridad para tus cuentas de AWS. Implementar MFA ayuda a proteger tus recursos al requerir no solo una contraseña, sino también un segundo factor de autenticación, como un código de una aplicación de autenticación. En este post, mostraremos cómo forzar el uso de MFA en los usuarios de IAM de AWS mediante una política de IAM asi garantizar que todos los usuarios activen esta funcionalidad. Esta politica funciona independientemente de los permisos que tengan los usuarios, por ejemplo si un usuario solamente tiene un permiso de lectura en EC2 podra ingresar…

30 Jul

Enhanced Insight into Disaster Recovery Solutions on AWS

stp2y0 CommentsNewsarchitecture, aws, coding, community, database, development, engineering, inclusive, software

In today's digital age, it's more important than ever to protect our data. Just imagine waking up one day to find that your business has come to a standstill because all your important data is gone due to an unexpected disaster. It sounds scary, right? Well, this is something that happens to many companies. That's why having a good Disaster Recovery (DR) strategy is very crucial. AWS offers many tools and services to help businesses protect themselves against such disasters. This article will guide you through understanding and setting up effective DR solutions on AWS, ensuring that your business's critical…

22 Jul

Preventing Multiple Processing of SQS Messages

stp2y0 CommentsNewsaws, coding, community, development, engineering, inclusive, java, lambda, software, sqs

Introduction Amazon SQS (Simple Queue Service) is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. AWS Lambda can process messages from an SQS queue, making it a powerful combination for event-driven applications. Scenario Imagine an AWS architecure like this: Imagine a scenario where your Lambda function fails to tag an SQS message as successfully processed. By default, Lambda retries the message up to 4 times before ignoring it. This retry behavior can lead to exponential execution of your handler: First Lambda: Retries 4 times, potentially sending 4 messages to…

20 Jul

Getting the Actual Client IP When Using Application Load Balancer (ALB) in AWS Lambda

stp2y0 CommentsNewsaws, coding, community, development, engineering, inclusive, python, serverless, software, webdev

When I was new to AWS, I faced an interesting challenge while working on a task to digitally sign a document, which required the client's IP as part of the e-signature. Initially, I was thrilled when the implementation seemed to work perfectly the first time. However, my excitement was short-lived. During testing, I noticed that the same IP address was being returned, even when I accessed the application from different machines. It was then that I realized the IP address I was receiving was not the actual client IP but the IP of the load balancer. This discovery led me…

15 Jul

Use Guardrails to prevent hallucinations in generative AI applications

stp2y0 CommentsNewsai, aws, coding, community, development, engineering, inclusive, python, rag, software

With Contextual grounding check, you can prevent hallucinations by detecting irrelevant and ungrounded LLM responses. Guardrails for Amazon Bedrock enables you to implement safeguards for your generative AI applications based on your use cases and responsible AI policies. You can create multiple guardrails tailored to different use cases and apply them across multiple foundation models (FM), providing a consistent user experience and standardizing safety and privacy controls across generative AI applications. Until now, Guardrails supported four policies - denied topics, content filters, sensitive information filters, and word filters. The Contextual grounding check policy (the latest one added at the time…

13 Jul

Day 24 Task – 90daysofdevops : Complete Jenkins CI/CD Project

stp2y0 CommentsNewsaws, awschallenge, coding, community, development, devops, engineering, inclusive, jenkins, software

What is GitHub WebhookGitHub Webhooks are a feature of the GitHub platform that allow developers to receive notifications about events that occur in a GitHub repository. Webhooks are HTTP callbacks that are triggered by specific events in a repository, such as a new commit, pull request, or issue being created or updated. They provide a way to integrate external systems or services with GitHub and automate workflows based on repository activity. When an event occurs, GitHub sends a POST request to a specified URL (endpoint) configured by the developer, containing information about the event. Developers can secure their webhooks by…

10 Jul

Amazon Ramps Up Security to Head Off Project Nimbus Protests

stp2y0 CommentsRAG modelsamazon, aws, cloud computing, google, israel, protests

Amazon appeared to have significantly heightened security for its New York Amazon Web Services Summit on Wednesday, two weeks after a number of activists disrupted the Washington, DC, AWS Summit in protest against Project Nimbus, Amazon and Google’s $1.2 billion cloud computing contract with the Israeli government. The clampdown in New York quelled several activists’ plans to interrupt the keynote speech from Matt Wood, the vice president for AI products at AWS.Amazon allowed only approved individuals to attend the keynote speech. The activists, who had registered online to attend, all received emails ahead of the conference informing them that they…

07 Jul

Mastering AWS CloudTrail: The Omniscient Eye for Auditing and Logging Supremacy

stp2y0 CommentsNewsaws, cloudcomputing, cloudpractitioner, cloudskills, coding, community, development, engineering, inclusive, software

Today, we shall delve into the depths of AWS CloudTrail, a powerful auditing and logging service that stands as the omniscient guardian of our AWS environments. With its far-reaching visibility and meticulous record-keeping capabilities, CloudTrail empowers us to maintain an unwavering vigil over our cloud infrastructure, detecting anomalies, tracing activities, and preserving invaluable forensic evidence. Brace yourselves, my friends, for this expedition shall not only unveil the inner workings of CloudTrail but also equip you with the strategies and tactics to wield its prowess with mastery, fortifying your cloud defences and ascending to new heights of auditing and logging supremacy.…

05 Jul

Learn AI The Best Way Bite Size

stp2y0 CommentsNewsai, anthropic, aws, bedrock, coding, community, development, engineering, inclusive, software

Learn AI From My Own Product Development Experience.If You Do That The Entire Silicon Valley Will Open For You. I will post technical articles here and will give you everything you need. I will share my entire git repo with you. Prerequiste: Python Proficiency. I can give you a free book in the future. I am too busy for that now. What you will learn. Prompt Engineering - The real Deep Dive not any Kindle book vodoo " Learn 100 prompts that will make you rich" You have seen such hypes all over. If it is that simple, trust me…