Clean Up Unused AWS Resources — EBS Volumes, EIPs, Old AMIs with Cost Report
Resource Cost Overview Resource Approx. Cost When it wastes money EBS gp3 volume $0.08/GB/month When not attached to any instance Elastic IP …
Jan 20, 2025
Read more
Python AWS Scripting
20 articles
Production-Grade Python Scripts for AWS — Best Practices & Patterns
The 8 Production Best Practices # Practice Why it matters 1 Structured JSON logging CloudWatch Logs Insights can query JSON fields 2 …
Jan 20, 2025
Read more
boto3 Retry Decorator with Exponential Backoff for ThrottlingException
Problem Statement Your compliance script calls describe_instances in a loop across 50 regions and 20 accounts. After 30 seconds, you start …
Jan 20, 2025
Read more
Generic boto3 Pagination Utility — Handle All Paginated AWS APIs
Problem Statement You write ec2.describe_instances() and it works in dev with 5 instances. In production with 1,200 instances, it silently …
Jan 20, 2025
Read more
Multi-Account Security Report — Assume Roles Across All Org Accounts
Problem Statement Your organization has 30 AWS accounts across dev, staging, and production environments. Your security team must verify …
Jan 20, 2025
Read more
Trigger CodePipeline & Send Slack Notifications at Each Stage
Problem Statement Your team deploys every day. Developers have to keep the CodePipeline console tab open to watch the deployment. When …
Jan 20, 2025
Read more
CloudTrail Root Account Monitor — Alert on Root API Usage via Lambda
Problem Statement The AWS root account bypasses all IAM policies and has unrestricted access to everything in the account — including …
Jan 20, 2025
Read more
ECS Rolling Deployment with Automatic Rollback on Health Check Failure
Problem Statement Your ECS deployment script just updates the service and walks away. When the new container fails to start (bad image, …
Jan 20, 2025
Read more
Security Group Audit — Find Unrestricted Inbound Rules (0.0.0.0/0)
Problem Statement A developer accidentally added 0.0.0.0/0 to a Security Group to “quickly test” SSH access. They forgot to …
Jan 20, 2025
Read more
EC2 Cost Analysis & Savings Plan Recommendations with Cost Explorer
Problem Statement Your AWS bill jumped 40% last month. Engineering lead asks: “What are we spending on EC2, and what can we do about …
Jan 20, 2025
Read more
RDS Snapshot Before Deployment & Point-in-Time Restore
Problem Statement Your team deployed a schema migration that introduced a breaking change. The code rollback was instant, but the database …
Jan 20, 2025
Read more
Create CloudWatch Alarms for All EC2 Instances (CPU, Memory, Disk)
Problem Statement Your team gets paged at 3 AM when an EC2 instance runs out of disk space — but only after the application has already …
Jan 20, 2025
Read more
Deploy Lambda Function with Version Publishing & Alias Traffic Shifting
Problem Statement Your team deploys Lambda functions by hand through the AWS Console — which means no audit trail, no rollback plan, and …
Jan 20, 2025
Read more
Generate Least-Privilege IAM Policy from CloudTrail Logs
Problem Statement Your application role has PowerUserAccess (5,000+ allowed actions), but in 30 days of production usage it only calls 12 …
Jan 20, 2025
Read more
IAM Access Key Rotation — Auto-Rotate Keys Older than 90 Days
Problem Statement CIS AWS Benchmark 1.14 requires IAM access keys to be rotated every 90 days. Long-lived keys are a top attack vector — if …
Jan 20, 2025
Read more
S3 Bucket Security Audit — Public Access, Versioning & Encryption
Problem Statement A misconfigured S3 bucket was the #1 cause of cloud data breaches in 2023. Common mistakes: public access not blocked, no …
Jan 20, 2025
Read more
Sync Local Directory to S3 with KMS Encryption & Manifest
Problem Statement Your application generates data files that must be backed up to S3. AWS policy mandates all data be encrypted with a …
Jan 20, 2025
Read more
Find Untagged Long-Running EC2 Instances & Alert via SES
Problem Statement Your organization mandates every EC2 instance must carry a Project tag (for billing allocation). Engineers spin up dev …
Jan 20, 2025
Read more
EBS Snapshot Manager — Auto Backup & Retention Cleanup
Problem Statement Your team’s EC2 instances hold critical application data on EBS volumes. Without automated snapshots, a failed …
Jan 20, 2025
Read more
Auto Stop/Start EC2 Instances Using Schedule Tags with Python
Problem Statement Your team has 20 dev/staging EC2 instances that run 24/7 but are only used during business hours (8 AM – 8 PM). Each …
Jan 20, 2025
Read more