Use a Deny with no action { “Version”: “2012-10-17”, “Statement”: [ { “Effect”: “Allow”, “Principal”: { “AWS”: “arn:aws:iam::122610500691:user/john” }, “Action”: “s3:ListBucket”, “Resource”: “arn:aws:s3:::test.test-devops.kitboga.s3” }, { “Sid”: “DenyAllOtherActions”, “Effect”: “Deny”, “Principal”: { “AWS”: “arn:aws:iam::122610500691:user/john” }, “NotAction”: “s3:GetObject”, “Resource”: “arn:aws:s3:::test.test-devops.kitboga.s3/*” } ]} Bob is able to list objects in the bucket. Bob is able to get objects…
Category: aws
Auto Scaling termination policies
Sure! Here’s a clean version of the Auto Scaling Group (ASG) termination policies explanation without any icons: Default Termination Policy If you don’t specify a termination policy, AWS uses the default behavior: Custom Termination Policies You can define a list of termination policies, and AWS will evaluate them in the order you provide. Here are…
Notes Analytics
CloudWatch CloudWatch Contributor Insights helps you identify top contributors to patterns in your logs—like the users, IPs, or endpoints generating the most errors or traffic. How it works: You can analyze: Use cases: Benefits: Pricing: Based on number of log events analyzed. Let me know if you want help writing a rule or setting it…
Virtual Private Gateway (VGW)
Virtual Private Gateway (VGW) in AWS cannot connect multiple VPCs directly. It is designed to connect a single VPC to an on-premises network over a VPN connection or Direct Connect link. However, there are several ways to achieve connectivity between multiple VPCs, including using a Virtual Private Gateway as part of a larger solution. Here…
AWS SkillInfo Resources
Module 1 Common Serverless Use Cases and Patterns Scoping Applications and Services Modern Application Development and Event-Driven Design Module 2 Prinicipals and Identities Managing Multiple Accounts Module 3 Networking Fundamentals IP Addressing VPC Fundamentals VPC Traffic Security Module 4 High Performance Computing AWS Lambda Module 5 Storage Services Amazon S3 Shared File Systems Module 6…
Notes SAP-02 IV
Virtual Private Gateway (VGW) in AWS cannot connect multiple VPCs directly. It is designed to connect a single VPC to an on-premises network over a VPN connection or Direct Connect link. However, there are several ways to achieve connectivity between multiple VPCs, including using a Virtual Private Gateway as part of a larger solution. Here…
Direct Connect DX
You can use multiple connections to increase available bandwidth. A link aggregation group (LAG) is a logical interface that uses the Link Aggregation Control Protocol (LACP) to aggregate multiple connections at a single AWS Direct Connect endpoint, allowing you to treat them as a single, managed connection. LAGs streamline configuration because the LAG configuration applies…
Skill Builder Notes II
Nonrelational database types To learn more, expand each of the following seven categories. Key-value databases– Key-value databases logically store data in a single table. Within the table, the values are associated with a specific key and stored in the form of blob objects without a predefined schema. The values can be of nearly any type. Strengths…
Redis and Memcached
Redis vs Memcached: Feature Comparison Feature Redis Memcached Data Types Supports strings, hashes, lists, sets, sorted sets, streams, bitmaps, hyperloglogs Strings only Persistence Yes (RDB snapshots, AOF) No Replication Yes (with automatic failover) No High Availability Yes (Multi-AZ, automatic failover) No Cluster Mode Yes (native support) Partial (manual configuration) Pub/Sub Yes No TTL (Expiration) Yes,…