Field Notes: Cross-account deployments in an AWS Control Tower environment

By Dustin Ward

AWS FeedField Notes: Cross-account deployments in an AWS Control Tower environment AWS Control Tower helps customers put an orchestration layer on top of a multi-account strategy. When customers build applications, they often use separate accounts as part of a deployment pipeline so that they can validate changes before production. This best practice helps reduce blast…

AWS Identity and Access Management (IAM) now makes it easier for you to manage permissions for AWS services accessing your resources

By Dustin Ward

AWS FeedAWS Identity and Access Management (IAM) now makes it easier for you to manage permissions for AWS services accessing your resources AWS Identity and Access Management (IAM) now supports policy conditions to help manage permissions for AWS services that access your resources. Many AWS services require access to your internal resources to perform tasks, and…

Creating a custom Lambda authorizer using Open Policy Agent

By Dustin Ward

AWS FeedCreating a custom Lambda authorizer using Open Policy Agent Organizations have complex infrastructure and need common tooling to make decisions about the system as a whole. In such scenarios, policy-based decision making could be implemented using Open Policy Agent (OPA). OPA is an open source, general-purpose policy engine, which decouples policy decision-making from policy…