AWS Cloud Operations Blog

Learn how the Flexibility of AWS Opens New Doors for Business Continuity

A guide for IT practitioners The “criticality” of technology that impacts our day to day lives is more pertinent and broader reaching than ever before. Nowadays, we’ve become accustomed to reliability and always on systems and can see the impact on our lives when things go wrong. Therefore, to meet customer expectations in the face […]

Migrating and automating patching at scale with AWS Application Migration Service

Since AWS Application Migration Service (AWS MGN) has been positioned as the recommended service for (rehost) migrations to AWS, we have seen an astounding speed of new feature releases, multiple enhancements, and continuous innovation aimed to address customer needs. AWS Application Migration Service (AWS MGN) is a highly automated move and improve (rehost) solution that […]

Approach to migrate Spring Cloud microservices applications to Amazon EKS

In this blog, we will look into how enterprises can approach migrating on-prem Spring Cloud microservices to Amazon Elastic Kubernetes Service (Amazon EKS). With managed service offerings from AWS, developers can eliminate the need to run and manage cross-cutting services like Service Registry, Config Server and API Gateway. By using AWS services, developers can focus on […]

Creating a near-realtime dashboard on Amazon CloudWatch for a Migration usecase

Monitoring performance metrics of AWS resources is crucial for any business use case running in cloud. AWS Well-Architected Framework best practices recommend customers to setup observability and monitoring for their infrastructure on AWS. But, as AWS usage for customer increases, it gets harder to observe and visualize the data and metrics at scale and identify […]

Centralizing configuration management using AWS Systems Manager

In this guest post, Kaitlyn Fedorak (Engineer) and contributors, Cody Olsen (Senior Engineer), Will Scott (Engineer), Samuel Raghunandan (Engineer), from Xero discuss their use of AWS Systems Manager Inventory and State Manager for configuration management of Amazon EC2 instances. Any team or company can leverage a similar design described in this post to save on […]

Improve your security posture with AWS Control Tower and AWS Security Hub integration

We are excited to announce the general availability (GA) of the integration between AWS Control Tower and AWS Security Hub. With this GA release, AWS Control Tower can detect control operations performed on the Security Hub detective controls from the Security Hub service. This includes the ability to detect if Security Hub controls enabled via […]

CfCt AWS SAM blog

Simplify infrastructure deployments using Customizations for AWS Control Tower and AWS Serverless Application Model

Customers want flexibility and simpler ways to manage their AWS accounts. There are several ways customers can choose to customize their AWS account deployments at scale with flexibility such as Account Factory Customization (AFC), a native solution within AWS Control Tower account factory, or Customizations for Control Tower (CfCT), which this blog focuses on. To […]

Generate User Access Privilege Reports with AWS Audit Manager

Customers adhere to compliance programs and certifications mandated by their business and industry regulations. A key component of achieving compliance is producing a user privilege and access report for their cloud infrastructure. Auditors use user privilege and access report to ensure permissions are locked down at a granular level. Access control mechanisms are imposed at […]

Automate updating approval cut off dates for Patch Manager Patch Baselines

Automate updating approval cut off dates for Patch Manager Patch Baselines

AWS Systems Manager Patch Manager helps AWS customers manage and automate the process of patching their Linux and Windows managed nodes in AWS and hybrid environments. It provides various options and allows greater control over which patches are approved or rejected during installation using patch baselines. One parameter of patch baseline approval rules is the Auto […]