AWS: Here are Lambda MicroVMs for isolated execution of user and AI-generated code @awsteele.com: Let me add SSH and Kubernetes support github.com/aidansteele/...

GitHub - aidansteele/microvm-fun: A sample repo showing Kubernetes running on a fleet of AWS Lambda MicroVMs, and the ability to SSH into MicroVMs

A sample repo showing Kubernetes running on a fleet of AWS Lambda MicroVMs, and the ability to SSH into MicroVMs - aidansteele/microvm-fun

github.com

For the life of me, I cannot figure out what “pin to show in Airbnb” means in the iOS messages app. Tapping the link loads the listing in the app. Long-pressing the message yields nothing relevant and tapping the CTA itself does nothing.

The CFP for the best cloud security conference on earth is now open! If you'd like your research to be presented alongside the cutting edge of the industry, this is your opportunity! fwdcloudsec.org/conference/n...

CFP | NA 2025 | fwd:cloudsec

fwd:cloudsec is a non-profit conference on cloud security. At this conference you can expect discussions about all the major cloud platforms, both attack and defense research, limitations of security...

fwdcloudsec.org

For some incomprehensible reason Instagram has added pregnant capybaras to my search screen. That’s clearly not the kind of content I came to instagram for 😂

How long should I wait before following up on some missing international mail? My passport was apparently in Dublin over two weeks ago. No updates on the Irish side and not trackable by Aus Post.

Back in 2022 I started a project I called vpcshark. Since then, AWS has launched three generations of EC2 instances without traffic mirroring support. So I figured I might as well open source it, might be useful to someone. github.com/aidansteele/...

GitHub - aidansteele/vpcshark: An open source Wireshark extcap to make ad hoc mirroring of AWS EC2 traffic easier

An open source Wireshark extcap to make ad hoc mirroring of AWS EC2 traffic easier - aidansteele/vpcshark

github.com

Sitting at the airport, on my way to re:invent for the first time in 5 years. If all goes smoothly I should be checking into my hotel in about 24 hours. See y’all soon.

It seems the AWS Lambda console and the Kinesis docs disagree on the set of required permissions for a x-acct enhanced-fanout subscriber. This[1] doc says one thing, this[2] says another and the console says a third. [1]: docs.aws.amazon.com/streams/late... [2]: docs.aws.amazon.com/streams/late...

I finally got around to automatically publishing new versions of my "unofficial AWS CodeBuild base image" project (and migrating to public ECR instead of Docker Hub). If you want custom images without the perf penalty, this is probably up your alley. gallery.ecr.aws/aidansteele/...

Today I learned that AWS Lambda will only perform automatic de-aggregation of KPL-formatted records when reading from an "enhanced fanout" Kinesis consumer. Apparently the Kinesis docs are unaware of this: they claim that functions need to de-aggregate KPL records themselves.

I’m home, sans luggage that missed my connecting flight. Qantas says it should arrive tomorrow. I’m not fussed as long as it arrives within the 166 hours until I depart for re:invent 🫠

Hypothetically, would anyone be interested in: 1. A Kinesis stream representing the Bluesky firehose 2. A set of Iceberg tables in S3 representing the serialised events from that firehose 3. An EventBridge bus so you can subscribe to a subset with whatever pattern you want? 4. Something else?

Liz Fong-Jones (方禮真)@lizthegrey.com · 2y ago

How many months until Amazon ATproto Kinesis Feed Service launches?

I’m in SF this week and Waymo is seriously impressive. There’s a billionaire/car company out there claiming that autonomous vehicles are right around the corner, but it feels like they’ve already arrived - in this city, at least.

I really like the call recording and transcription functionality added to iOS. I often forget verbal conversations, so it’s incredibly handy. I had a call with my sister and it nailed the (Aussie English) transcript. Tapping on a word to jump to that part of the recording is a nice touch.

New on Hacking the Cloud: The brilliant @awsteele.com shared a technique to retrieve an IAM principal's ARN from their unique identifier. hackingthe.cloud/aws/enumerat...

Enumerate a Principal ARN from an AWS Unique Identifier - Hacking The Cloud

How to convert an unique identifier to a principal ARN.

hackingthe.cloud

Sleepy boy.

"AWS role session tags for GitHub Actions" by @awsteele.com awsteele.com/blog/2023/10...

My sister has always been the more talented one in the family. She’s just proved it again with the launch of her new EP. Here it is on all the music streaming sites. songwhip.com/fjsteele/ter...

Developer commits are generally signed by username when pushed, automatically generated commits shouldn’t just breeze on through though. 🤖🔜🚪💻 https://buildkite.com/blog/securing-your-software-supply-chain-signed-git-commits-with-oidc-and-sigstore

Signed Git commits with Sigstore, Gitsign and OIDC - Buildkite Blog

Humans push commits which are usually signed with their username, bots pushing changes should also be signing their git commits too! Learn how to secure your software supply chain using Sigstore and G...

buildkite.com

Missy intervening at about 10AM, saying “that’s enough work for one day”

They don’t make it easy to get out of bed

Pups

Ah, but what kind of database?

Feature request: support for cross-account targets in AWS EventBridge Pipes 🥺 plz @nikpin.ski

Software is the only industry where the job interviews are 10x harder than the job.

Does anyone else struggle more posting on this place than the other place? Feels like there’s a higher threshold for minimum viable post 😅

Interesting stats from USAA in their re:Inforce talk on AWS data perimeters: 85% of cross-org calls are to S3, and 70% of those S3 calls are to buckets owned by AWS.

#1 use for the ultra-wide lens: taking photos of my dogs on my lap. Here are they with their new haircut.

I’ve had my Volvo XC40 twin motor for a week and can confirm: it’s great. I drove my VW Golf GTI yesterday and it already feels old-fashioned

Jonathan Kozolchyk@kozolchyk.com · 3y ago

Five days into driving an EV: I’m never going back to a ICE car.