Mohd Muneer Uddin’s Post

Illuminating Your Network: A Deep Dive into AWS VPC Flow Logs

Amazon CloudWatch ⏰ Amazon CloudWatch is a monitoring and observability service provided by Amazon Web Services (AWS). It allows you to collect and track metrics, monitor log files, set alarms, and automatically react to changes in your AWS resources. CloudWatch provides insights into the performance and operational health of your AWS infrastructure and applications, enabling you to troubleshoot issues, optimize resource utilization, and ensure the reliability of your systems. Here I have added the architecture that I'm using in my cloud environment to monitor the EC2 resources.👇 📌 CloudWatch infrastructure enables monitoring of multiple EC2 instances for health status, disk utilization, and CPU utilization via predefined and custom metrics. 📌 Threshold limits are established, triggering alarms when exceeded (denoted as "In Alarm"), prompting notifications through Amazon SNS, typically emails. 📌 For optimized email formatting received from SNS, A Lambda function periodically checks alarm statuses every 10 minutes, ensuring timely notifications via SNS emails. #aws #monitoring #cloudengineer #cloudcomputing #amazon #amazonjobs #linkedin #awsdevops #cloudarchitecture #cloudinfrastructure #security #cloudengineering

Gatekeeper: Enforcing security policy on your Kubernetes clusters. Microsoft Defender for Containers secures Kubernetes clusters deployed in Azure, AWS, GCP, or on-premises using sensor data, audit logs and security events, control plane configuration information, and Azure Policy enforcement.  In this blog, we'll take a look at Azure Policy for Kubernetes and explore the Gatekeeper engine that is responsible for policy enforcement on the cluster.   Each Kubernetes environment is architected differently, but Azure Policy is enforced the same way across Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS) in AWS,... #techcommunity #azure #microsoft https://lnkd.in/gnpq6Vv2

Hey there! Im here again to talk about a pretty significant change that AWS has made to its pricing for AWS Public IPv4 Addresses. Starting from February 1st, 2024, AWS as implemented a new billing charge of $0.005 per hour for each public IPv4 address you use. Now, what does this mean exactly? Well, it applies to any public IPv4 address that's in use – whether it's one provided by Amazon or an Elastic IP – and it's assigned to resources within your VPC, Amazon Global Accelerator, or AWS Site-to-Site VPN tunnel. But here's the good news: if you're using AWS on a free trial account, you'll still get 750 hours of free usage for public IPv4 addresses. Just wanted to give you a heads up about this change, especially if you're into AWS or working in DevOps. #AWS #AmazonWebServices #CloudComputing #DevOps #Cloud #InfrastructureAsCode #Serverless #CI/CD #Automation #SRE (Site Reliability Engineering) #Containerization #Kubernetes #Microservices #CloudArchitecture #CloudSecurity

I purchased TryHackMe Attacking and Defending Amazon Web Services (AWS) Learning Path. Learning Objectives: In this room, you will learn how IAM handles credentials for authentication to AWS APIs #cloudlearning #cloudcertification  

It's already February, and as many of you are likely aware, AWS has recently implemented a new billing policy for IPv4 addresses. This means you're now being charged for every IPv4 address in use (not just Elastic IPs). If you haven't had a chance to review your IPv4 inventory yet, I've put together a handy tutorial on consolidating all your IPv4 addresses in one location using Amazon VPC IP Address Manager. 🔗 Discover the guide here: https://lnkd.in/dJtb64pM I'm curious – how has this shift affected your organization? How have you adapted to these changes? #AWS #IPv4 #CloudCostOptimization #TechCommunity

What's new at AWS 📢 ✳ #AWSResourceAccessManager now supports AWS PrivateLink to create and manage organization resource shares from within customers Amazon VPC without traversing the public internet. ✳ It enables to centrally create a resource and then share that resource using AWS RAM to reduce the operational overhead of managing resources in a multi-account environment. ✳ PrivateLink enables additional isolation and security to this resource share is additional security to AWS RAM ✳ What is RAM: 〽 It helps to share the resources securely across Single or multiple AWS accounts, within organization or organizational units (OUs) and with IAM roles and users for supported resource types. 〽 Business can decide to stop sharing a resource by removing it from the resource share or by deleting the resource share. 〽 Importantly, sharing resources will not incur any charges. 〽 Some of the supported resource types: ➖ Amazon Aurora ➖ AWS Backup ➖ AWS CodeBuild ➖ Amazon EC2 ➖ AWS Resource Explorer ➖ AWS Resource Groups ➖ Amazon Route 53 ➖ Amazon S3 ➖ Amazon VPC 📌 Explore more about AWS RAM: https://lnkd.in/dKdUZSaF #aws #awscloud #ram #whatsnew #privatelink #cloudarchitect #learning

🌟 Hello Fam! 🌟 Welcome to Day 3 of our AWS Cloud Journey 🚀 Today, we're diving into "Network Models & Protocols | Parts of URL | TCP/IP Model" 🌐. Here's what we're covering: 1. URL (Uniform Resource Locator) 🌍 2. Protocol & Domain 🌐 3. HTTP Protocol 📄 4. HTTPS Protocol 🔒 5. Internet Protocol (IP) 📡 6. TCP/IP Model 🛠️ 7. Difference between TCP & IP ⚖️ 8. Difference between TCP & UDP🔍 📖 Check out the PDF below, dive into these concepts, and share your thoughts in the comments! 💬 Happy Learning! 🌟📚 Amazon Web Services (AWS) Vikas Nehra Gauri Yadav Reyaz Shaik

AWS introduces customizable IPv6 lease times in Amazon VPC DHCPv6 settings, offering greater flexibility and control for businesses on Amazon Web Services (AWS) https://lnkd.in/dphT3vA2 #aws #awscloud

One of the new #awstraining on Amazon EKS allows to refresh/gain knowledge on the basic objectives of #kubernetes, as well as different services/tools, required for its production-ready implementation, including the following aspects for containerized workloads, running in #awscloud: - deployment and automation (Helm, GitHub Actions) - networking (CNI plugin, CoreDNS) - security (Network policies, IRSA, k8s entities as security boundaries) - observability (ADOT, AMP, AMG) - cost optimization and scaling (Karpenter, Kubecost, EC2 purchase options, and rightsizing) https://lnkd.in/ddVR9B8i