Wow, I had to post something about this after getting my AWS bill. I had an AWS setup NAT and recently changed to an EC2 NAT. I’ve been working with Lambda recently and I had a Lambda function I needed to utilize SQS as well as an RDS instance. Sounds easy, and it wasn’t exactly difficult, but there are definitely some caveats to consider. The big thing I learned was that Lambda functions will need NAT to access resources if…
I’ve been dealing with logging a lot recently. Mainly audit logging for security/governance reasons but also logging for performance and support. I probably put 2-3 months total into setting up logging to meet all our FedRAMP requirements. Even though we settled on Graylog I wouldn’t count ELK out for the count. Logging with Graylog I’m going to go over Graylog first since it’s the logging solution we ended up with. We’re using filebeats to forward files to Graylog over TLS….