Recently AWS released Graviton 3 processes (at least in the US initially anyway) and it was time to take them for a run against our everyday performance test. There are a few things to keep in mind before we dig into these stats. First off, the stated performance improvements may not reflect significantly in ’everyday’ workloads, as it looks like there were efforts put into specific areas as follows: up to 2x better floating-point performance up to 2x faster crypto performance up to 3x better ML performance Compared to Graviton2. Read more

I’ve always been interested in Website Performance and more recently with Security and IPv6 Support of websites. I was recently inspired by a post by my good mate James Bromberger; Web security and the 2022 Australian Federal Election. Since James has already covered off Security (headers and encryption), as well as support for IPv6, CDNs and a raft of other information he was able to garner I thought it would be neat to continue and perform website performance testing against each of the parties sites that James had in his post and compare them. Read more

I often read or hear about people starting their AWS journey by setting up new AWS account and getting themselves into trouble when someone breaks in and runs up a huge bills. With that in mind I thought I would write a CloudFormation template with the services I recommend in a base setup and also describe some of the things I setup. Root MFA Once you’ve signed up with your “Root” user, setup MFA: Read more

Both of my children have been playing Minecraft for way too many years. Over time I’ve learnt bits and pieces, especially about running servers. As they have matured their requirements for servers have become more advanced and more often. So much so, I’ve been trying to get them to manage their own. Which has been a failure. The learning curve too steep. Which led me to build my own solution. Read more

In the last post I covered off how to create a REGIONAL WAF in CDK. In this post I’m going to create a CLOUDFRONT WAF. This is a little bit more involved. I’m going to assume that your application stack is not in us-east-1 and thus we’ll need to create another stack in us-east-1. This is going to use several of the tricks we discussed in an earlier post. Existing Let’s say you have an existing stack that has a CloudFront distribution in it. Read more