May 14, 2016

Using AWS IoT button - Simple Example

Amazon did a limited release of the programmable Dash button and unsurprisingly it got sold out within a day. It’s stated in amazon.com that “We don’t know when or if this item will be back in stock.”, hence you might need to wait to get one. I take this opportunity to write a post about how I used the AWS IoT button that I received in AWS re:Invent 2015 to show case AWS IoT to the team. Read more

May 5, 2016

Automated Blue/Green deployment using Lambda and CloudFormation

Blue/Green deployment is a well-known method to deploy an application without any downtime. Performing DNS switch is one of the very common techniques to achieve this. Using DNS switch has a minor issue with DNS caching which might take some time for DNS change to be propagated. Apart from DNS switch, AWS gives us two different options to switch the stacks. One is to have single ELB and swap it across auto-scaling group and another is switching the launch configuration of the auto-scaling group. Check the following presentation on various methods to achieve blue/green deployment in AWS. Read more

March 6, 2016

Cracking AWS Solution Architect Professional Certification

If you had noticed, there has been a gap of few weeks since my last post. I went off the radar to prepare for AWS Certified Solution Architect Professional exam. Lots of learning and completed it successfully. I can’t provide any details on the questions since I have signed a NDA. But I shall provide some suggestions based on my experience. Read through the blue print and understand the weight-age for different sections. I took this Linux Academy course. It was helpful to refresh all the topics and useful on services which I didn’t use regularly. Quiz provided by Linux Academy was okay. I tried Cloud Academy quiz and it had lots of typo and didn’t cover all the sections. Reading the product documentation, FAQs, whitepapers & case studies were useful. Most of the questions had multiple requirements which covers more than 3 AWS services. Hence while answering we need to make sure that the selected answer is best suitable for all the requirements. Some of the questions on outdated (which is expected) referring to old reservation model. But they did a good job in avoiding feature specific questions which might change. Certain AWS services like Direct Connect, Storage Gateway, CloudFront, IAM, S3 were prominent. Knowledge on storage concepts like RAID, iSCSI connections used in Storage Gateway, etc will be useful. Deep knowledge on Networking especially VPC, VPN, Routing, etc would help. Good understanding of Web Identity federation, SAML based federation, Custom identity broker & SSO to Management console is needed. Knowledge on media streaming, download/upload options, performance and cost benefits using CloudFront would be required. You might already know that the questions & answers are lengthy. Many questions have at least two correct answers and identifying the best answer was really tricky. 72 questions in 170 minutes looks achievable and I had 25 minutes to spare after reviewing all the questions which I marked for review. Don’t miss to take the practice exam (it costs $40) and it will help you to understand your area of strength and weakness. Take a practice exam after you complete your preparation and before booking the exam. Based on the result you shall book or study deeply on the sections that you need more attention. Don’t take the practice exam multiple times since the questions will be same during all the attempts of practice exam (you shall find this detail in fine prints when you try to re-book for practice exam). I would say all the effort and money that you spend on this certification is worth it. Read more

December 20, 2015

Sending response back to CFN custom resource from python Lambda function

CloudFormation uses a pre-signed S3 URL to receive the response back from the custom resources managed by it. There are few blue prints available for Node.js Lambda custom resources but nothing available for python yet. Hence I created this simple function which shall be used to send the response back to CFN custom resource by performing PUT request to the pre-signed S3 URL. import json import requests def lambda_handler(event, context): responseStatus = 'SUCCESS' responseData = {} if event['RequestType'] == 'Delete': sendResponse(event, context, responseStatus, responseData) responseData = {'Success': 'Test Passed.'} sendResponse(event, context, responseStatus, responseData) def sendResponse(event, context, responseStatus, responseData): responseBody = {'Status': responseStatus, 'Reason': 'See the details in CloudWatch Log Stream: ' + context.log_stream_name, 'PhysicalResourceId': context.log_stream_name, 'StackId': event['StackId'], 'RequestId': event['RequestId'], 'LogicalResourceId': event['LogicalResourceId'], 'Data': responseData} print 'RESPONSE BODY:n' + json.dumps(responseBody) try: req = requests.put(event['ResponseURL'], data=json.dumps(responseBody)) if req.status_code != 200: print req.text raise Exception('Recieved non 200 response while sending response to CFN.') return except requests.exceptions.RequestException as e: print e raise if __name__ == '__main__': lambda_handler('event', 'handler') I’m using json module to form the response body, json module is available by default in the Lambda container. Whereas the requests module which I use to perform the http PUT request needs to be packaged along with the python script. Read more

December 7, 2015

Continuous Integration - Manage shared resources across accounts automatically

I prefer creating the base AMI using packer; RDS snapshot using a Jenkins job which get triggered whenever there is a change in the database schema in the SCM. In case of installers, binaries, etc. it would be best to store them in a single S3 bucket. In all the above mentioned scenarios I prefer to share those resources to a 3rd party AWS account and remove the share when not needed. Automating this would be easy to handle add/remove permissions, hence I decided to hold the sharing details in a JSON file in the SCM. Changes to that file will trigger a Jenkins job which will invoke a Lambda function which in turn will share the resources based on the values in the JSON file. Read more

© Prakash P 2015 - 2023

Powered by Hugo & Kiss.