DNSSEC Explained (with AWS Route53 Hosted Zone Example)

DNS name resolution is essential to modern connectivity. The ability for hosts to be able to quickly and reliably resolve DNS domain names (e.g. www.google.com) to their IP address equivalents (e.g. 216.58.204.68 or 2a00:1450:4009:827::2004) to connect and consume services ensures consistent and performant network flows. Due to the essential nature of DNS, DNSSEC is an addition … Read more

AWS Route53 – Creating and Using a Hosted Zone

AWS Route53 provides DNS Resolution (and DNS Registrar) services. You can use Route53 to register a domain, host the zone file and provide DNS resolution, alternatively, you can have the domain registered elsewhere, but then use Route53 to host the zone file and provide DNS resolution. There are some different options here, Route53 ties nicely … Read more

Storing Terraform State on AWS S3 Bucket (including AWS DynamoDB for State Locking)

Building upon the example Simple Terraform Docker Example (Ubuntu Linux), we’ll store our Terraform State in AWS S3 Bucket, rather than just locally on the machine running Docker. Yes, I know its not a very useful example, but it simply illustrates the mechanism and how it can be used for more useful and complex deployments. Storing … Read more

Prevent AWS CloudFront from Caching a File

Following on from my previous post: Static Website Hosting/Publishing Using AWS S3, AWS CloudFront, SSL Certificate And Custom FQDN, I had the need to ensure that a particular file was not cached by CloudFront and instead fetched each time. The particular example was that we wanted to use CloudFront, but in this case the website … Read more

Uploading Files to AWS S3 Using CLI

I’ll assume you have your AWS CLI configured so you are able to login to an AWS account. If you need any help on this see: https://geekmungus.co.uk/?p=1167. Here’s a bit of a cheat sheet on how to use AWS S3 via the CLI. Listing Buckets Upload One File Upload the file called “myfile.txt” into the … Read more

AWS SSO Login Picking the Wrong Browser

When you are trying to login to AWS using the CLI tool, you may find that the window opens a tab in the wrong browser, to get around this you can apply a “–no-browser” at the end of the sso login command, for example: Now instead of opening a browser automatically, you’ll get the code … Read more

Set Default Root Object for Statically Hosted Website on AWS CloudFront (AWS CloudFront Functions)

A standard AWS CloudFront distribution is set to automatically serve the index.html file of a website when a client requests the root of the site, e.g. https://www.geekmungus.co.uk and does not specify any specific file or file within a sub-directory. However in certain instances your clients may request a page as follows e.g: https://www.geekmungus.co.uk/studies within which an index.html … Read more

Static Website Hosting/Publishing using AWS S3, AWS CloudFront, SSL Certificate and Custom FQDN

Amazon CloudFront is a content delivery network operated by Amazon Web Services. Content delivery networks provide a globally-distributed network of proxy servers to cache content, such as web videos or other bulky media, more locally to consumers, to improve access speed for downloading the content (citation). Although AWS CloudFront can be used as a CDN (caching … Read more

Block Admin Page Using AWS WAF Example

If you are using the AWS Web Application Firewall (WAF) on your Application Load Balancer or other supported AWS entity, you probably don’t want any administrative interfaces of the web application presented directly to the Internet without some form of restriction; perhaps to a range of IPv4 addresses you want to restrict. Adding a rule … Read more