IngressNightmare — сразу несколько уязвимостей NGINX Controller for Kubernetes доступом к секретам всего и везде без авторизации:
https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities
◽️ Кто пострадал — обладатели NGINX Controller версий до 1.12.1/1.11.5. Для устранения нужно срочно обновиться на последнюю версию.
◽️ Кто не пострадал — пользователи EKS:
EKS does not provide or install the ingress-nginx controller and is not affected by these issues.
Официальный отчёт о уязвимости Kubernetes:
https://kubernetes.io/blog/2025/03/24/ingress-nginx-cve-2025-1974/
#Kubernetes #security
https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities
◽️ Кто пострадал — обладатели NGINX Controller версий до 1.12.1/1.11.5. Для устранения нужно срочно обновиться на последнюю версию.
◽️ Кто не пострадал — пользователи EKS:
EKS does not provide or install the ingress-nginx controller and is not affected by these issues.
Официальный отчёт о уязвимости Kubernetes:
https://kubernetes.io/blog/2025/03/24/ingress-nginx-cve-2025-1974/
#Kubernetes #security
wiz.io
CVE-2025-1974: The IngressNightmare in Kubernetes | Wiz Blog
Wiz Research uncovered RCE vulnerabilities (CVE-2025-1097, 1098, 24514, 1974) in Ingress NGINX for Kubernetes allowing cluster-wide secret access.
😁5👍2
We are excited to announce that on Friday, March 28, we are hosting an AWS Workshop: Amazon RDS for PostgreSQL, open to everyone!
With Amazon RDS, you can deploy scalable PostgreSQL instances in minutes with cost-efficient and resizable hardware capacity. Amazon RDS manages complex administrative tasks such as PostgreSQL software installation and upgrades, storage management, replication for high availability and read throughput, and backups for disaster recovery.
The workshop will be led by Sergey Pagin, an experienced AWS specialist and Lead Systems Engineer at EPAM Systems.
We will provide a dedicated training account for each participant who registers via the Google Form [https://forms.gle/L6Fp8md2XGwsK2DG8]. However, you can also use your personal AWS account.
⚠️ IMPORTANT: Please complete the registration form [https://forms.gle/L6Fp8md2XGwsK2DG8] by 21:00 UTC+1 on March 27.
🔗 Find out more details and register here:
https://wearecommunity.io/events/workshop-amazon-rds-for-postgresql
With Amazon RDS, you can deploy scalable PostgreSQL instances in minutes with cost-efficient and resizable hardware capacity. Amazon RDS manages complex administrative tasks such as PostgreSQL software installation and upgrades, storage management, replication for high availability and read throughput, and backups for disaster recovery.
The workshop will be led by Sergey Pagin, an experienced AWS specialist and Lead Systems Engineer at EPAM Systems.
We will provide a dedicated training account for each participant who registers via the Google Form [https://forms.gle/L6Fp8md2XGwsK2DG8]. However, you can also use your personal AWS account.
⚠️ IMPORTANT: Please complete the registration form [https://forms.gle/L6Fp8md2XGwsK2DG8] by 21:00 UTC+1 on March 27.
🔗 Find out more details and register here:
https://wearecommunity.io/events/workshop-amazon-rds-for-postgresql
👍9❤1💩1
Пишу тут про AI. Пишу в первую очередь для своих, во вторую для себя, чтобы в одном месте хранить материалы по теме.
Telegram
AIзбука
Ликбез (ликвидация безграмотности) по теме AI (Artificial Intelligence или ИИ — искусственный интеллект).
Предназначен для всех, но особенно для инженеров, потому что они особо тяжёлый случай.
Ссылка на канал: https://t.iss.one/AIzbuka
Контакт: @apple_rom
Предназначен для всех, но особенно для инженеров, потому что они особо тяжёлый случай.
Ссылка на канал: https://t.iss.one/AIzbuka
Контакт: @apple_rom
🔥8👍7
EKS Terraform demo
https://github.com/setheliot/eks_demo/
Deploys:
▪️ EKS cluster using EC2 nodes
▪️ DynamoDB table
▪️ EBS volume used as attached storage for the Kubernetes cluster (a PersistentVolume)
▪️ Demo "guestbook" application, deployed via containers
▪️ ALB to access the app
#EKS #Terraform
https://github.com/setheliot/eks_demo/
Deploys:
▪️ EKS cluster using EC2 nodes
▪️ DynamoDB table
▪️ EBS volume used as attached storage for the Kubernetes cluster (a PersistentVolume)
▪️ Demo "guestbook" application, deployed via containers
▪️ ALB to access the app
#EKS #Terraform
👍5💊5
Forwarded from AWS Weekly (Max Skutin)
▪️ Amplify Hosting WAF Protection | GA
▪️ Amplify
▫️ samples to Deploy Storage Browser for S3
▫️ Shared Keychain support for Swift
▪️ Application Recovery Controller FIS recovery action for zonal autoshift
▪️ Bedrock Custom Model Import introduces real-time cost transparency
▪️ Bedrock Guardrails industry-leading image content filters | GA
▪️ Bedrock Knowledge Bases Opensearch Managed Cluster for vector storage
▪️ CloudFormation targeted resource scans in the IaC generator
▪️ CodeBuild custom cache keys for S3 caching
▪️ Connected Mobility Solution new features
▪️ Database Insights customization of its metrics dashboard
▪️ DataZone metadata rules for publishing
▪️ Dedicated Local Zones gp3 and io1 ebs volumes
▪️ DMS Schema Conversion IBM Db2 for z/OS to RDS for Db2 conversion
▪️ DynamoDB percentile statistics for request latency
▪️ DynamoDB Streams PrivateLink support
▪️ EC2 more bandwidth and jumbo frames to select destinations
▪️ EKS enforces upgrade insights checks as part of cluster upgrades
▪️ Elemental MediaConnect NDI® outputs
▪️ EventBridge Scheduler PrivateLink support
▪️ GameLift Servers next-gen EC2 instances
▪️ IAM dual-stack (IPv4 and IPv6) environments
▪️ Keyspaces Multi-Region support for User Defined Types (UDTs)
▪️ Lambda Ruby 3.4
▪️ Marketplace new seller experiences for ML products
▪️ Network Firewall pass action rule alerts and JA4 filtering
▪️ Network Manager support PrivateLink and IPv6
▪️ Open Source Corretto 24 | GA
▪️ Parallel Computing Service Terraform support
▪️ Polly New Korean voice
▪️ Q Business upgrades for Slack and Teams Integrations
▪️ Q in QuickSight Scenarios capability | GA
▪️ RDS for MySQL Innovation Release 9.2 in Preview Environment
▪️ RDS for SQL Server linked servers to Teradata databases
▪️ Route 53 Profiles IPv6 Service Endpoints
▪️ SageMaker HyperPod multi-head node support in Slurm
▪️ SageMaker metadata rules to enforce standards and improve data governance
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥2
Amazon Nova Act - new AI model trained to perform actions within a web browser:
https://labs.amazon.science/blog/nova-act
Amazon Nova Act SDK research preview is available from today:
https://nova.amazon.com
#Nova
https://labs.amazon.science/blog/nova-act
Amazon Nova Act SDK research preview is available from today:
https://nova.amazon.com
#Nova
Amazon
Amazon Nova
Try new AI capabilities with Amazon Nova foundation models. Build agents with the new agentic model Amazon Nova Act. Create and edit images with Amazon Nova Canvas. Engage in human-like voice conversations with Amazon Nova Sonic. Generate text and code, and…
🔥5👍4
EKS community Add-ons
https://aws.amazon.com/blogs/containers/announcing-amazon-eks-community-add-ons-catalog/
Теперь можно уменьшить набор стандартных чартов для установки и поставить их через эдд-оны:
metrics-server
kube-state-metrics
prometheus-node-exporter
cert-manager
external-dns
#EKS
https://aws.amazon.com/blogs/containers/announcing-amazon-eks-community-add-ons-catalog/
Теперь можно уменьшить набор стандартных чартов для установки и поставить их через эдд-оны:
metrics-server
kube-state-metrics
prometheus-node-exporter
cert-manager
external-dns
#EKS
🔥22👍12💩3❤2
🚀 Join our AWS Workshop: Amazon ECS Finhack on April 4! 🚀
The Amazon ECS Finhack workshop introduces a series of hands-on labs designed to help you understand key cost optimization levers for ECS container infrastructure.
The modules will cover:
✅ Cost Visibility – Understanding costs with container infrastructure
✅ Auto Scaling – Improving compute utilization with elasticity
✅ Compute Optimization – Optimizing compute costs with Spot and AWS Graviton
The workshop will be led by Aliaksandr Chernak, an experienced AWS specialist and Lead Systems Engineer at EPAM Systems.
We will provide a dedicated training account for each participant who registers via the Google Form [https://forms.gle/9RdYT9kmh6hzwMVn7]. However, you can also use your personal AWS account.
⚠️ IMPORTANT: Please complete the registration form [https://forms.gle/9RdYT9kmh6hzwMVn7] by 21:00 CET on April 3.
🔗 Find out more details and register here:
https://wearecommunity.io/events/amazon-ecs-finhack-workshop
The Amazon ECS Finhack workshop introduces a series of hands-on labs designed to help you understand key cost optimization levers for ECS container infrastructure.
The modules will cover:
✅ Cost Visibility – Understanding costs with container infrastructure
✅ Auto Scaling – Improving compute utilization with elasticity
✅ Compute Optimization – Optimizing compute costs with Spot and AWS Graviton
The workshop will be led by Aliaksandr Chernak, an experienced AWS specialist and Lead Systems Engineer at EPAM Systems.
We will provide a dedicated training account for each participant who registers via the Google Form [https://forms.gle/9RdYT9kmh6hzwMVn7]. However, you can also use your personal AWS account.
⚠️ IMPORTANT: Please complete the registration form [https://forms.gle/9RdYT9kmh6hzwMVn7] by 21:00 CET on April 3.
🔗 Find out more details and register here:
https://wearecommunity.io/events/amazon-ecs-finhack-workshop
❤2👍2👀2
KAI (Kubernetes AI) Scheduler from NVidia - dynamically allocate GPU resources to workloads:
https://github.com/NVIDIA/KAI-Scheduler
#Kubernetes
https://github.com/NVIDIA/KAI-Scheduler
#Kubernetes
GitHub
GitHub - NVIDIA/KAI-Scheduler: KAI Scheduler is an open source Kubernetes Native scheduler for AI workloads at large scale
KAI Scheduler is an open source Kubernetes Native scheduler for AI workloads at large scale - NVIDIA/KAI-Scheduler
👍11❤5🎉1
Forwarded from Christine Armiyants
Here are some ways you can work with MCP across AWS today:
🟠 Bedrock Agents now supports MCP tools through the new Inline Agents API ➡️ here
🟠 Learn how to run MCP servers and clients on AWS using open source MCP libraries ➡️ here
🟠 Get started with open-source AWS MCP servers for code assistants ➡️ here
More integrations are coming soon☺️
🟠 Bedrock Agents now supports MCP tools through the new Inline Agents API ➡️ here
🟠 Learn how to run MCP servers and clients on AWS using open source MCP libraries ➡️ here
🟠 Get started with open-source AWS MCP servers for code assistants ➡️ here
More integrations are coming soon☺️
🥱5👍1
VPC + BGP = VPC Route Server with dynamic routing inside VPC
https://docs.aws.amazon.com/vpc/latest/userguide/dynamic-routing-route-server.html
You can now dynamically update VPC and internet gateway route tables with your IPv4 or IPv6 routes.
Features include:
- Automatically update route tables with routes learned from BGP peers
- Propagation of the best available routes based on BGP attributes
- Dynamically update routes when network conditions change
- Failure endpoints using BFD
There are still some gaps like the support for route tables associated with virtual private gateways or propagation of routes into a transit gateway route table.
#VPC
https://docs.aws.amazon.com/vpc/latest/userguide/dynamic-routing-route-server.html
You can now dynamically update VPC and internet gateway route tables with your IPv4 or IPv6 routes.
Features include:
- Automatically update route tables with routes learned from BGP peers
- Propagation of the best available routes based on BGP attributes
- Dynamically update routes when network conditions change
- Failure endpoints using BFD
There are still some gaps like the support for route tables associated with virtual private gateways or propagation of routes into a transit gateway route table.
#VPC
👍15😱9🔥3
Intel vs AMD vs Graviton: Performance & Price
https://www.youtube.com/watch?v=kV6YizoFuPU
TL;DR:
▫️ Graviton is the best
▫️ AMD is the fastest
▫️ Intel is Intel
#cost_optimization
https://www.youtube.com/watch?v=kV6YizoFuPU
TL;DR:
▫️ Graviton is the best
▫️ AMD is the fastest
▫️ Intel is Intel
#cost_optimization
YouTube
Intel vs AMD vs Graviton: Performance & Price
👨💼📈 Mentorship/On-the-Job Support/Consulting - https://calendly.com/antonputra/youtube or [email protected]
=========
🤝 - LinkedIn - https://www.linkedin.com/in/anton-putra
🎙 - Twitter - https://twitter.com/antonvputra
📧 - Email - [email protected]
👨💻…
=========
🤝 - LinkedIn - https://www.linkedin.com/in/anton-putra
🎙 - Twitter - https://twitter.com/antonvputra
📧 - Email - [email protected]
👨💻…
😁23👍5🤮2🔥1
Начиная с Terraform AWS Provider v6.0.0 алиасы уже не нужны — можно указывать AWS Region непосредственно в ресурсах, используя лишь один провайдер.
#Terraform
#Terraform
👏42👍9🔥9❤6😍1👀1🦄1
We are happy to announce that on Friday, April 11, we are hosting an AWS Workshop: ECS Cats and Dogs, open to everyone!
During this practical AWS workshop, participants will:
▪️ Build & Deploy: Create a containerized web application with Docker and launch it on ECS using both EC2 and Fargate.
▪️ Manage & Automate: Learn to effectively manage images with ECR, create ECS Tasks and Services, and automate CI/CD workflow with AWS CodePipeline.
▪️ Observe & Scale: Implement CloudWatch logging and monitoring and configure Auto Scaling for optimal resource management.
▪️ Explore Copilot: Discover how to simplify Fargate deployments using Copilot.
We will provide a dedicated training account for each participant who registers via the Google Form.
However, you can also use your personal AWS account.
⚠️ IMPORTANT: Please complete the registration form [https://forms.gle/xXFrHQFMh5z5FQzW9] by 21:00 CET on April 10.
🔗 Find out more details and register here:
https://wearecommunity.io/events/ecs-cats-and-dogs
During this practical AWS workshop, participants will:
▪️ Build & Deploy: Create a containerized web application with Docker and launch it on ECS using both EC2 and Fargate.
▪️ Manage & Automate: Learn to effectively manage images with ECR, create ECS Tasks and Services, and automate CI/CD workflow with AWS CodePipeline.
▪️ Observe & Scale: Implement CloudWatch logging and monitoring and configure Auto Scaling for optimal resource management.
▪️ Explore Copilot: Discover how to simplify Fargate deployments using Copilot.
We will provide a dedicated training account for each participant who registers via the Google Form.
However, you can also use your personal AWS account.
⚠️ IMPORTANT: Please complete the registration form [https://forms.gle/xXFrHQFMh5z5FQzW9] by 21:00 CET on April 10.
🔗 Find out more details and register here:
https://wearecommunity.io/events/ecs-cats-and-dogs
👍3❤1
В RS School стартует "Хакерский кружок".
Первую встречу проведут Егор Мясников (Senior Solutions Architect @ AWS Munich) и Константин Периков (единственный 😱 Principal Software Engineer в EPAM).
На встрече Егор и Костя:
- поделятся своим взглядом на кибербезопасность и расскажут, почему эта тема особенно актуальна в 2025 году
- расскажут, как они прокачивали свои хакерские навыки (например https://tryhackme.com/hacktivities/)
- обсудят полезные платформы и с чего стоит начать путь в этичном хакинге
Чат кружка:
https://discord.gg/NtNvsHmXw8
Встреча пройдет в MS Teams завтра (10 апреля) в 16:00 CET
Регистрация на встречу https://wearecommunity.io/events/hacker-club-1
Первую встречу проведут Егор Мясников (Senior Solutions Architect @ AWS Munich) и Константин Периков (единственный 😱 Principal Software Engineer в EPAM).
На встрече Егор и Костя:
- поделятся своим взглядом на кибербезопасность и расскажут, почему эта тема особенно актуальна в 2025 году
- расскажут, как они прокачивали свои хакерские навыки (например https://tryhackme.com/hacktivities/)
- обсудят полезные платформы и с чего стоит начать путь в этичном хакинге
Чат кружка:
https://discord.gg/NtNvsHmXw8
Встреча пройдет в MS Teams завтра (10 апреля) в 16:00 CET
Регистрация на встречу https://wearecommunity.io/events/hacker-club-1
👍8💩2
Когда в присланном письме есть ошибки — радуйтесь.
А не возмущайтесь безграмотности автора.
Ибо это писал живой человек.
Неспособный настроить Spell Check, но, всё же, человек.
#пятничное #AI
А не возмущайтесь безграмотности автора.
Ибо это писал живой человек.
Неспособный настроить Spell Check, но, всё же, человек.
#пятничное #AI
😁42💯9👍7❤5
Resource Groups + PrivateLink
You can use PrivateLink to create a private connection between your VPC and Resource Groups.
https://docs.aws.amazon.com/ARG/latest/userguide/vpc-interface-endpoints.html
You can access Resource Groups as if it were in your VPC, without the use of an internet gateway, NAT device, VPN connection, or Direct Connect.
Instances in your VPC don't need public IP addresses to access Resource Groups.
#ResourceGroup #VPC #PrivateLink
You can use PrivateLink to create a private connection between your VPC and Resource Groups.
https://docs.aws.amazon.com/ARG/latest/userguide/vpc-interface-endpoints.html
You can access Resource Groups as if it were in your VPC, without the use of an internet gateway, NAT device, VPN connection, or Direct Connect.
Instances in your VPC don't need public IP addresses to access Resource Groups.
#ResourceGroup #VPC #PrivateLink
Amazon
Access AWS Resource Groups using an interface endpoint (AWS PrivateLink) - AWS Resource Groups
You can use an AWS PrivateLink to create a private connection between your VPC and AWS Resource Groups.
👍2❤1
Уже 24 апреля пройдет вторая встреча "Хакерского кружка” 🥷
Хватит скучных рассказов — время увидеть настоящий хакерский драйв в действии! На новой встрече нашего этичного хакерского кружка мы окунемся в живые примеры задач с популярных платформ и соревнований. Разберём, как выявлять реальные уязвимости веб-приложений и научимся мыслить как пентестеры.
Приготовьтесь увидеть, как решаются задачи из CTF и где скрываются самые интересные ошибки безопасности в сети. Готовы прокачать своё кибер-видение и ощутить дух настоящего хакерского соревнования?
Встречу проведут:
▪️ Егор Мясников (Senior Solutions Architect @AWS Munich)
▪️ Константин Периков (единственный 😱 Principal Software Engineer в EPAM)
Чат кружка:
https://discord.com/invite/NtNvsHmXw8
Встреча пройдет в MS Teams 24 апреля в 17:00 CET.
Регистрация на встречу:
https://wearecommunity.io/events/hacker-club2
Хватит скучных рассказов — время увидеть настоящий хакерский драйв в действии! На новой встрече нашего этичного хакерского кружка мы окунемся в живые примеры задач с популярных платформ и соревнований. Разберём, как выявлять реальные уязвимости веб-приложений и научимся мыслить как пентестеры.
Приготовьтесь увидеть, как решаются задачи из CTF и где скрываются самые интересные ошибки безопасности в сети. Готовы прокачать своё кибер-видение и ощутить дух настоящего хакерского соревнования?
Встречу проведут:
▪️ Егор Мясников (Senior Solutions Architect @AWS Munich)
▪️ Константин Периков (единственный 😱 Principal Software Engineer в EPAM)
Чат кружка:
https://discord.com/invite/NtNvsHmXw8
Встреча пройдет в MS Teams 24 апреля в 17:00 CET.
Регистрация на встречу:
https://wearecommunity.io/events/hacker-club2
👍5