Blog
Guides, walkthroughs and AWS how-tos for asking your cloud questions in plain English.
-
Run Commands on EC2 With SSM SendCommand and AWS SDK v3
Run shell scripts on one instance or a tagged fleet with SendCommandCommand, wait for results, read the output and keep IAM scoped to the…
-
Run One-Off ECS Tasks With AWS SDK v3 (RunTask)
Start a Fargate task from Node.js with RunTaskCommand, wait for it to stop, read the container’s exit code and logs, and grant only the…
-
Find EC2 Instances Paying for Detailed Monitoring
A TypeScript report that finds EC2 instances with detailed monitoring, prices it as CloudWatch metrics and traces it back to Auto Scaling launch settings.
-
Find DynamoDB Tables Where TTL Is Not Enabled
A TypeScript report that lists DynamoDB tables without Time to Live, samples items for epoch-second attributes, prices storage and enables TTL on request.
-
Find Lambda Functions Paying for Extra Ephemeral Storage
A TypeScript report that lists functions with more than 512 MB of /tmp, prices the extra storage from CloudWatch and lowers it where usage…
-
Check ElastiCache Backup Retention and Automatic Backups
An AWS SDK v3 script that reports ElastiCache backup retention for replication groups, clusters and serverless caches and sets it on the caches you…
-
Find IAM SSH Public Keys and Service-Specific Credentials
An AWS SDK v3 script that lists IAM SSH public keys, service-specific credentials and signing certificates per user and deactivates one user’s on request.
-
Find KMS Keys With a Wildcard Key Policy Principal or Open Grants
A report-only AWS SDK v3 script that flags KMS key policies with a wildcard principal, other-account principals and grants to other accounts.
-
Describe Stale Security Groups: Find and Remove Stale Rules
A TypeScript AWS SDK v3 script that runs DescribeStaleSecurityGroups across all VPCs and revokes stale rules only in the security groups you name.
-
EFS Encryption at Rest Not Enabled? Find Unencrypted File Systems
A report-only AWS SDK v3 script that finds unencrypted EFS file systems, checks their KMS key and TLS policy, and shows the migration path.
