Eliminating resource wastage is a low-hanging fruit that contributes the most to your sustainability goals. A subsequent step is to maximize the utilization of provisioned resources by optimizing software design….
When operating workloads on AWS, most organizations do not invest in building a centralized observability platform that can help correlate performance metrics in a central place. Using Amazon CloudWatch, one….
The Security pillar of the Well-Architected Framework focuses on improving the security posture of your infrastructure and application workloads. In previous chapters, we discussed the concept of the AWS Shared….
CfCT is a deployment framework that integrates with your Control Tower service deployment. It needs to be installed in the management account, in the same region where Control Tower was….
A lot of integrations that previously had to be built out manually are now natively supported by many AWS services. While this greatly improves the development velocity, it also leads….
It’s worth repeating – no AWS solution, service, or framework is going to fulfill all your Landing Zone needs as-is. Every customer is different, and every use case requires in-depth….
AWS services such as AWS Security Hub, AWS CloudFormation, and AWS Config, among many others, can leverage an AWS Organizations feature known as Trusted Access to piggyback on organization service….
A Landing Zone is the concept of a pre-defined multi-account environment that allows you to securely onboard application workloads onto the cloud in an automated way. A good multi-account foundation….
Similar to software development life cycles, it’s important to test new Landing Zone features and changes in an isolated environment first, and then roll them out in the production AWS….
Therefore, my advice for companies who are just getting started with their AWS foundation would be to leverage the service for what it offers, and let it play its role….
