Transferring data between your Amazon Elastic Compute Cloud (EC2) instances and Amazon Simple Storage Service (S3) is a fundamental operation of any organization. Whether you’re archiving application logs, backing up important data, or moving processed… Transfer data from EC2 to S3 Bucket
When your application—say, running on an EC2 instance—needs to interact with your data in Amazon S3 buckets, then the secure, and best practice approach to access “s3” is using IAM Roles. These IAM Roles provide… Granting S3 Access to an EC2 instance with IAM Roles
Monitoring IAM activity is essential for maintaining a secure and compliant AWS environment. Whether you’re auditing permissions or cleaning up unused roles, knowing when a specific AWS action was last used can help you make… Track Last Used AWS IAM Actions for a particular role Using Boto3
AWS Config is a service that continuously monitors and records your AWS resource configurations and changes over time. It helps you: It’s especially useful for governance, risk management, and maintaining a clear view of your… Config Costs for each AWS account | Boto3 script
If you have a 100 Gigabit-per-second (Gbps) network link, but your S3 uploads max out at a fraction of that speed, here is the harsh truth: S3 is not the bottleneck. The service is engineered… Why Your S3 Uploads Aren’t Hitting 100 Gbps?
When managing massive amounts of data in Amazon S3, accidentally deleting the wrong object is a real risk. That’s where conditional deletes come in. This powerful S3 feature allows you to verify an object’s existence… Master Conditional Deletes in Amazon S3 to Prevent Accidental Data Loss
Sometimes it’s necessary to get the list of EC2 stopped instances across different AWS accounts to see how many instances have been stopped. There might be variety of reasons why we may need to see… Boto3 script for getting list of stopped instances in AWS Accounts
AWS doesn’t provide stats on list of terminated EC2 instances across a single account or across every accounts in an organization. To get the list of terminated instances, we may need to use boto3 script… Script to list Terminated EC2 instances in AWS
AWS has recently changed the way in which the models can be enabled and now all the accounts will have model access enabled by default without the need to request for it. Because of this… SCP for Blocking Claude Models in AWS BedRock
AWS Config Recordings and Rules act as guardrails, ensuring users’ actions align with the Cloud Governance team’s policies. While they are crucial for maintaining control, it’s vital to monitor them because each recording costs $0.003,… CloudWatch Dashboard for AWS Config Recordings
One of the most important things in AWS Access Keys. I have seen lot of organizations where users have created lot of keys and the governance team had a tough task in eliminating or reducing… SCP for Blocking AWS Access Key Creation except for certain roles