Have you ever tried to create clients/SDKs for Java, TypeScript, ...? I had issues with the generated code not working or not even compiling.

2️⃣ Vulnerability management for source code and production systems

We learned a lot along the way. What are your experiences from 3rd party audits?

About 2 months ago, we started preparing for an ISO 27001 audit. During the preparation we identified two major areas where we needed to improve our procedures.

1️⃣ Access management and endpoint security which is especially challenging when working with freelancers

VPC Endpoints could be a great service, if AWS would offer them for free and not charge $7 per service, AZ, and month plus traffic. Ridiculous!

So far, I came across the following possibilities to backup and restore a DynamoDB table:

1️⃣ DynamoDB Backup
2️⃣ AWS Backup
3️⃣ S3 Export/Import
4️⃣ DynamoDB API (Scan, PutItem)

Compared to the CDK the cfn-modules are very simple to use. It's just a suite of CloudFormation templates that you stick together with nested stacks. npm is used to install and update the modules.

Check it out!
👉 github.com/cfn-modules/...

#awscommunity #cloudformation #AmazonWebServices

🧵(2/2)

Oh, I totally understand your point of view. My intention is to find out whether it is worth to built a solution on top of the building blocks that AWS provides. I'm investigating the options to become a vendor in that space. 😁

I did not have a deeper look into this yet. But it seems like SES provides a feature for list management already. See docs.aws.amazon.com/ses/latest/d... for details.

We also offer a product called bucketAV, which focuses on scanning files stored on S3.

There is indeed an AWS service that also scans S3 objects for malware: Amazon GuardDuty Malware Protection for S3. We've compared bucketAV with GuardDuty a few months ago: cloudonaut.io/review-amazo...

attachmentAV provides an API to scan files for viruses and malware. It's used by customers, who are not storing data on S3 or who want to scan the files before storing them on S3 (see attachmentav.com/solution/vir...).

We are thinking about moving away from @kit.com as well. Currently, our idea is to use SES and semplates.io instead. What are the must-have features from your point of view?