Centralize VPC Interface Endpoints using Terraform

Introduction Amazon VPC endpoints enable you to access certain AWS services without the need to traverse the Internet or a VPN connection. VPC endpoints can be used to access a variety of AWS services. It will help you to improve security and performance. There are two types of VPC endpoints. Here I’ll quote the AWS documentation. Interface endpoints: An interface endpoint is a collection of one or more elastic network interfaces with a private IP address that serves as an entry point for traffic destined to a supported service....

January 2, 2023 · Lorenz Vanthillo

How I got my new bicycle thanks to AWS!

I bought my first bicycle in 2019. The pandemic had just started and during that period all team sports were stopped. The bicycle was already a few years old and I bought it for a few hundred euros. I really started to enjoy cycling and and I joined a small cycling team. During the summer of 2021, I started looking around for a new bike. It was time to trade my old one for a new one....

October 6, 2022 · Lorenz Vanthillo

How we use AWS Config and Security Hub for Cloud Governance

Introduction As a freelance Cloud & DevOps engineer I come into contact with different companies and different types of solutions. At one of my clients I’m part of the Cloud Governance team. The company has a lot of teams which all have their own AWS accounts. They follow the principle of YBIYRI (You Build It, You Run It). A team gets complete freedom to choose which IaC tool or programming language they will use to create their solutions....

August 17, 2022 · Lorenz Vanthillo

Automate tagging of vulnerable docker images in ECR

Amazon Elastic Container Registry is a fully-managed Docker container registry. It makes it easy for developers to store and manage Docker images inside their AWS environment. ECR supports two types of image scanning. Enhanced image scanning requires an integration with Amazon Inspector. It will scan your repositories continuously. Basic image scanning will use the Common Vulnerabilities and Exposures (CVEs) database (open-source Clair) to find vulnerabilities in your images. You can trigger scans on image push or manually....

June 19, 2022 · Lorenz Vanthillo

New ECR Pull Through Cache Repositories

Just before AWS Re:invent 2021, AWS announced Pull Through Cache Repositories for Amazon Elastic Container Registry. This new feature allows you to keep your ECR registry in sync with the upstream registry. It’s important to note that there is only support for upstream repositories hosted on Quay.io and ECR Public. The most popular registry Docker Hub isn’t supported but there is a way to work around this problem. Another recent announcement confirmed that Docker Official images are available on ECR Public....

December 12, 2021 · Lorenz Vanthillo