3 ms·
The further up the stack you go, the worse it gets - but, honestly, Cognito and API Gateway are no worse than mid-tier. The really nightmarish ones are the lik
by roryirvine 2mo ago
The further up the stack you go, the worse it gets - but, honestly, Cognito and API Gateway are no worse than mid-tier.
The really nightmarish ones are the likes of CodeStar, AppRunner, Directory Service, CodeCatalyst, and 90% of anything under the Systems Manager heading. Things that tend to be glued together from multiple lower-level services with a sprinkling of vendor lock-in on top.
- icedchai 2mo agoI found "Systems Manager Session Manager" (terrible name!) useful a few times for getting around network restrictions. You set up a EC2 VM, which doesn't have to be in a public subnet, then use "session manager" to forward ports to other instances / services using the AWS CLI. It is possible for that stuff to be blocked with IAM but often it's overlooked since IAM is confusing enough as it is.