AWS IAM Policy Conditions allow you to apply specific constraints or rules to control access in your AWS environment. These conditions can be used in IAM policies (Identity and Access Management) to refine permissions based on attributes, such as time of day, source IP, or the presence of tags, among others. Conditions help you to…
Category: aws
Notes
AppFlow AWS AppFlow is a fully managed integration service that allows you to securely transfer data between AWS services and SaaS applications like Salesforce, SAP, Slack, and ServiceNow—without writing custom code. It helps automate data ingestion, synchronization, and transformation, making it easier to manage workflows across different platforms. Key Features of AWS AppFlow 1. No-Code…
S3 Requester Pays
Requester’s Pays is an Amazon S3 feature that allows the requester (the user or application) to bear the costs associated with data transfer when accessing objects from a bucket. By default, the bucket owner incurs the costs of data retrieval and transfer, but with Requester’s Pays enabled, the requester is responsible for these costs. When…
Amazon EventBridge
Amazon EventBridge is a fully managed event bus service that makes it easier to connect applications using data from a variety of sources. It allows you to create event-driven applications by routing real-time events from your applications, integrated AWS services, and third-party SaaS apps to other AWS services for processing. Key Features of Amazon EventBridge:…
Cloudfront vs Global Accelerator
Amazon CloudFront and AWS Global Accelerator are both services provided by AWS that help optimize the delivery of content and applications, but they serve different purposes and have distinct use cases. Amazon CloudFront CloudFront is a Content Delivery Network (CDN) service that caches and delivers content (e.g., HTML, images, videos, API responses) from edge locations…
AWS CloudFront
AWS CloudFront is a fast, highly secure Content Delivery Network (CDN) service that delivers data, videos, applications, and APIs to users worldwide with low latency. It works by caching content in multiple edge locations globally to provide fast access to end users. Global Edge Network – Uses AWS’s network of edge locations and regional caches…
Network Interfaces
ENI Elastic Network Interfaces (ENIs), are virtual network interfaces that can be attached to EC2 instances in a Virtual Private Cloud (VPC). They allow instances to communicate within the AWS network and externally. ENA Elastic Network Adapter (ENA) is a high-performance network interface used in AWS for enhanced networking. ENA is designed to deliver high…
AWS PrivateLink Endpoints
AWS PrivateLink enables private connectivity between Virtual Private Clouds (VPCs) and AWS services, third-party SaaS applications, or on-premises environments without exposing traffic to the public internet. AWS provides the following types of VPC endpoints under PrivateLink: 1. Interface Endpoint An Interface Endpoint allows you to send TCP or UDP traffic to an endpoint service using…
AWS PrivateLink
Summary AWS PrivateLink is a highly available, scalable technology that you can use to privately connect your VPC to services and resources as if they were in your VPC. You do not need to use an internet gateway, NAT device, public IP address, AWS Direct Connect connection, or AWS Site-to-Site VPN connection to allow communication…
VPC Endpoints
A VPC endpoint enables customers to privately connect to supported AWS services and VPC endpoint services powered by AWS PrivateLink. Amazon VPC instances do not require public IP addresses to communicate with resources of the service. Traffic between an Amazon VPC and a service does not leave the Amazon network. VPC endpoints are virtual devices….