Rubrik Acquires Datos IO

There is news in the backup world today. Rubrik has acquired startup company Datos IO. Who is Datos IO? Datos IO was founded in 2014 and focuses on copy data management of distributed scale out databases purpose built for the cloud. The reason Datos IO is different from the common backup solutions we’re accustomed to seeing (Commvault, DataDomain, etc) is that they are building a solution from the ground up that tackles the problems of geo-dispersed scale out database which are becoming commonplace in the cloud world. Think about databases that scale multiple continents, and multiple clouds even. ...

February 6, 2018 · 3 min · eshanks

Add a New AWS Account to an Existing Organization from the CLI

AWS Organizations is a way for you to organize your accounts and have a hierarchy not only for bills to roll up to a single paying account, but also to setup a way to add new accounts programatically. For the purposes of this discussion, take a look at my AWS lab account structure. From the AWS Organizations Console we can see the account structure as well. I need to create a new account in a new OU under my master billing account. This can be accomplished through the console, but it can also be done through the AWS CLI, which is what I’ll do here. NOTE: This can be done through the API as well which can be really useful for automating the building of new accounts. ...

February 5, 2018 · 4 min · eshanks

Using Change Sets with Nested CloudFormation Stacks

In a previous post, we looked at how to use change sets with CloudFormation. This post covers how to use change sets with a nested CloudFormation Stack. If you’re not familiar with nested CloudFormation stacks, it is just what it sounds like. A root stack or top level stack will call subordinate or child stacks as part of the deployment. These nested stacks could be deployed as a standalone stack or they can be tied together by using the AWS::CloudFormation::Stack resource type. Nested stacks can be used to deploy entire environments from the individual stacks below it. In fact a root stack may not deploy any resources at all other than what comes from the nested stacks. An example of a commons stacking method might be to have a top level stack that deploys a VPC, while a nested stack is responsible for deploying subnets within that stack. You could keep chaining this together to deploy EC2 instances, S3 buckets or whatever you’d like. ...

January 29, 2018 · 4 min · eshanks

An Introduction to AWS CloudFormation Change Sets

If you’ve done any work in Amazon Web Services you probably know the importance of CloudFormation (CFn) as part of your Infrastructure as Code (IaC) strategy. CloudFormation provides a JSON or YAML formatted document which describes the AWS infrastructure that you want to deploy. If you need to re-deploy the same infrastructure across production and development environments, this is pretty easy since the configuration is in a template stored in your source control. ...

January 22, 2018 · 5 min · eshanks

In the Cloud World, It's Cheaper to Upgrade

If you’ve been in technology for a while, you’ve probably had to go through a hardware refresh cycle at some point. These cycles usually meant taking existing hardware, doing some capacity planning exercises and setting out to buy new hardware that is supported by the vendors. This process was usually lengthy and made CIOs break into a cold sweat just thinking about paying for more hardware, that’s probably just meant to keep the lights on. Whenever I first learned of a hardware refresh cycle, my first thoughts were “Boy, this sounds expensive!” ...

January 16, 2018 · 3 min · eshanks

Commit to Infrastructure As Code

Over recent years, Infrastructure as Code (IaC) has become sort of a utopian goal of many organizations looking to modernize their infrastructure. The benefits to IaC have been covered many times so I won’t go into too much detail, but the highlights include: Reproducibility of an environment Reduction in deployment time Linking infrastructure deployments with application deployments Source control for infrastructure items Reduction of misconfiguration The reasoning behind storing all of your infrastructure as code is valid and a worthy goal. The agility, stability, and deployment speeds achieved through IaC can prove to have substantial benefits to the business as a whole. ...

January 8, 2018 · 4 min · eshanks

New Opportunities in 2018

It’s the beginning of a whole new year. Hopefully you’ve gotten some time off recently to recharge your batteries a bit, before heading back to the grind. While you’re getting back into the ol’ routine, maybe this is a good time to consider whether or not that routine is still worthwhile? Are you Happy With Your Job? I t’s easy to get into a funk where you roll out of bed each day to do the same task or face the same challenges over and over again. Maybe there are things in your day to day grind that you hate, but do them anyway, because it’s part of your job. No big deal, everyone has these sorts of chores. I’m sure that nobody loves every single part of their job. But if you’ve gotten a break from work and you can’t bear to think about going back to that routine, maybe that should tell you something about your job. Are you really happy doing what you’re doing, or are you doing it because it’s a steady paycheck? Are you doing it because it’s what you know, and change is hard? Are you doing it because you feel like you have no other choice? ...

January 1, 2018 · 5 min · eshanks

Use Amazon CloudWatch Logs Metric Filters to Send Alerts

With all of the services that Amazon has to offer, it can sometimes be difficult to manage your cloud environment. Face it, you need to manage multiple regions, users, storage buckets, accounts, instances and the list just keeps going on. Well the fact that the environment can be so vast might make it difficult to notice if something nefarious is going on in your cloud. Think of it this way, if a new EC2 instance was deployed in one of your most used regions, you might see it and wonder what it was, but if that instance (or 50 instances) was deployed in a region that you never login to, would you notice that? ...

December 11, 2017 · 4 min · eshanks

AWS DeepLens - The Nuclear Weapon of Privacy

Today at AWS re:INVENT, Amazon had several new product announcements which is not uncommon for the company but one in-particular raised several eyebrows. Amazon has been working very hard to make machine learning much easier for people to use. Typically, understanding machine learning has taken great expertise and a relatively small number of people even attempted to learn these concepts just because of the complexity. That is all changing thanks to some of Amazon’s more recently announced services such as Amazon Sage Maker. ...

November 29, 2017 · 5 min · eshanks

Use AWS Config Managed Rules to Protect Your Accounts

If you’re an Amazon Web Services customer and you’re not using the built in AWS config rules, you should be. AWS Config is a service that shows you the configuration changes that have happened on your AWS accounts. Whether that’s changes to your user accounts, changes to networks, modifications to S3 buckets or plenty of other configurations. AWS Config will keep this audit log of your changes in a specified S3 bucket which could be used for all sorts of other solutions such as updating your ServiceNow configuration management database. See this post from ServiceNow on some details of the solution. ...

November 27, 2017 · 3 min · eshanks