Background IAM Role chaining is a method of granting temporary access to AWS resources by assuming multiple IAM roles in a sequence. This approach is useful when you have a scenario where one role needs to assume another role to access certain resources or perform specific actions. Typically cross-account. In…

Problem statement I was recently dealing with a problem where my API was taking a long time fetching credentials from Vault to connect to Amazon RDS. Vault is a pretty popular tool for managing secrets such as API keys, passwords, and security tokens. It is commonly used with other AWS services…

Background With any cloud service, it is important to secure your credentials to protect your data/service from unauthorized access. In this segment, I will demonstrate how to use Python to generate ephemeral credentials for authenticating to Amazon Redshift. And also explain why ephemeral credentials are safer than static credentials. What are Ephemeral Credentials? 🤔 Ephemeral credentials…

Background AWS comes with a ton of freedom and opportunities to build cool stuff. But we all know, with great freedom comes great responsibility. AWS offers a wide array of flexibility in terms of what security configuarations one can set up. …

In the previous two segments, I shared some best practices on how to design and build performant REST APIs. An API that is well-designed and built for performance behaves and functions well in response to evolving customer and business requirements. …

Background In my previous post, I shared some security best practices cloud engineers can adhere to when developing applications on AWS. The purpose of this post is to go into depth explaining the main AWS service behind all of those measures that makes security possible: Amazon Identity & Access Management (IAM).