Blog
Guides, walkthroughs and AWS how-tos for asking your cloud questions in plain English.
-
Find S3 Buckets That Still Use ACLs and Disable Them
A TypeScript AWS SDK v3 script that reports each bucket’s Object Ownership setting and ACL grants, and sets Bucket owner enforced only where it’s…
-
DynamoDB Update Item With AWS SDK v3: Conditions and Counters
UpdateCommand in TypeScript: update expressions, conditions and ConditionalCheckFailedException, atomic counters, version-based locking, ReturnValues and TransactWrite.
-
Publish CloudWatch Custom Metrics With AWS SDK v3 PutMetricData
PutMetricDataCommand end to end in TypeScript: buffering, Values/Counts batches, dimensions that don’t explode your bill, EMF for Lambda, alarms, IAM and limits.
-
Check Savings Plans Coverage and Utilization
A read-only TypeScript script that reports Savings Plans coverage, uncovered On-Demand spend by service and utilization from the Cost Explorer API.
-
Find Idle ElastiCache Clusters
A read-only TypeScript script that finds ElastiCache clusters and serverless caches with no reads or writes in 14 days, with node prices to size…
-
Find EC2 Instances With Public IP Addresses
A read-only TypeScript script that lists EC2 instances with public IPv4 or IPv6 addresses, the subnet setting behind them and any world-open ports.
-
Find S3 Buckets Whose Policy Doesn’t Require HTTPS
A TypeScript AWS SDK v3 script that finds S3 buckets accepting plain HTTP and, with –apply, adds a Deny on aws:SecureTransport to the existing…
-
Find EKS Clusters With a Public API Endpoint
A read-only TypeScript AWS SDK v3 script that lists every EKS cluster whose Kubernetes API server endpoint is reachable from the internet, and from…
-
Find Plaintext Secrets in ECS Task Definitions
A TypeScript AWS SDK v3 script that finds plaintext passwords and keys in ECS container environment variables and maps secret references to execution roles.
-
Find Secrets in Lambda Environment Variables
A TypeScript AWS SDK v3 script that finds access keys, tokens and passwords in Lambda environment variables without ever printing a secret value.
