Category: Learning Levels

Domain governance in Amazon Route 53 can mean the difference between a routine account decommissioning and an unplanned outage. Picture this situation: your organization closes an Amazon Web Services (AWS) account, and five days later a customer-facing website becomes unreachable, email stops flowing, and SSL certificate validation fails. A domain that this account had registered […]

Selecting the right AWS private connectivity option is harder than it used to be. The choices now span AWS Direct Connect, AWS Direct Connect SiteLink, and AWS Interconnect (last mile and multicloud). Picking the wrong option can lead to over-provisioning, slow time to market, or rework. In this post, we present a decision framework for […]

When building extranet connections between external partners and your AWS infrastructure, an integration project can become a task that requires additional work hours, additional costs, and communication inconsistencies. This post describes a secure, scalable and resilient architecture pattern for a modern extranet architecture on AWS, that minimizes commonly issues faced by usual designs: overlapping address […]

Reviewing partner contracts by hand is slow and repetitive, so teams want an AI agent to do the first pass. In the example used throughout this post, a company called Example Corp reviews incoming partner agreements against its own standard operating procedures. A partner uploads an agreement, the agent checks it against those procedures, and […]

Learn how to build a serverless automation that monitors VPC IP utilization and expands CIDR capacity within minutes. This solution uses AWS Lambda, Step Functions, and IPAM to detect IP exhaustion risk and add secondary CIDRs with new subnets automatically. Three operating modes support environments with full IPAM management, IPAM for subnets only, or no IPAM at all. Deploy with a single SAM command and configure through VPC tags.

When an AWS Site-to-Site VPN connection degrades, you sift through hundreds of log entries, correlate Border Gateway Protocol (BGP) state transitions with Internet Key Exchange (IKE) phase changes and decide whether the cause is a prefix quota violation, an autonomous system (AS) path loop, or a hold timer expiry. That repetitive manual work prolongs recovery. […]

Network Load Balancer health checks confirm that a RADIUS server is reachable, not that it can authenticate a user, so a server with a failed identity store keeps receiving traffic. This post walks through an open-source reference solution that closes the gap with a single Amazon ECS witness that runs application-layer RADIUS probes and reconciles NLB target group membership directly.

For organizations operating multi-tenant environments, regulated environments, or multiple business units, maintaining strict network segmentation between SD-WAN and AWS is essential for meeting security, compliance, and operational requirements. This is Part 2 of the two-part series on extending SD-WAN segmentation into AWS Cloud WAN. In Part 1, the Generic Routing Encapsulation (GRE) based Connect attachment […]

For organizations operating multi-tenant environments, regulated environments, or multiple business units, maintaining strict network segmentation between SD-WAN and AWS is essential for meeting security, compliance, and operational requirements. Deploying SD-WAN virtual appliances and extending your segmentation through AWS Cloud WAN helps unify these segmented environments under a single, scalable global network. That said, segmentation is […]

Since the launch of Elastic Load Balancing (ELB) in 2009, Amazon Web Service (AWS) customers of all sizes, regardless of the size or the complexity of their technical requirements, have utilized ELB as a fundamental service. The service continues to evolve with more deployment options like Network Load Balancers, Application Load Balancers, and Gateway Load […]