Setup AWS “Instance Profile” for on-prem servers


I assume you already knew what the EC2 instance profile is. Basically, the instance profile defines the permissions that a EC instance has. As it is associated with an IAM role which has a bunch of IAM policies attached. And the AWS credential in the EC2 metadata is automatically rotated by the instance profile. In … Continue reading Setup AWS “Instance Profile” for on-prem servers →

When KMS key grant is created for Lambda execution role?


I was working on a new Lambda function a couple days ago. It took me a while to deploy it successfully via CloudFormation. It was all due to some required IAM policies were missed in the deployment role. So I had to delete the stack then create again for a couple of times. When I … Continue reading When KMS key grant is created for Lambda execution role? →

AWS Learning Resources


AWS has produced lots of good learning resources, but they are bits and pieces here and there. So I created a Github project to collect those resources. The collection list starts with some AWS offical resources. Later on I will add more from third-parties and individuals. Libraries AWS InfrastructureAWS HistoryAWS DocumentationAWS Learning LibraryAWS Whitepapers & … Continue reading AWS Learning Resources →