iiinova — where your digital self keeps evolving

Andreas Wittig @andreaswittig.bsky.social · 31/07/2025

📣 I've updated my blog post Worldwide availability of EC2 instance types. 1️⃣ Only 8 instance families are available in all commercial regions: c6g, i3en, i4i, m6g, m6gd, r6g, t3, t4g. 2️⃣ In some regions, not all instance types of an instance family are supported. cloudonaut.io/worldwide-av...

cloudonaut.io

Worldwide availability of EC2 instance types

The promise sounds tempting; with AWS, you can roll out your infrastructure in 28 regions worldwide. Indeed, it is an eye-ope...

000

Andreas Wittig @andreaswittig.bsky.social · 31/07/2025

Have you ever tried to create clients/SDKs for Java, TypeScript, ...? I had issues with the generated code not working or not even compiling.

010

Andreas Wittig @andreaswittig.bsky.social · 10/07/2025

❓I am faced with the challenge of creating SDKs for TypeScript, JavaScript, Java, Python, Ruby and Go to simplify access to a simple REST API. I'm currently looking at smithy, which AWS uses or plans to use for its SDKs. Has anyone used smithy or a different approach before?

100

Andreas Wittig @andreaswittig.bsky.social · 06/06/2025

🤯 "The default version of a launch template cannot be specified in AWS CloudFormation. The default version can be set in the Amazon EC2 console or ..." Why oh why? Because it would be too convenient to use the CloudFormation resource AWS::EC2::LaunchTemplate to do so? #awswishlist #awscommunity

000

Andreas Wittig @andreaswittig.bsky.social · 23/05/2025

🙀 Oh, this is an unexpected limitation of GitHub Actions: When pushing more than 3 tags at once, GitHub Actions does not trigger any workflows. #github #githubaction

000

Andreas Wittig @andreaswittig.bsky.social · 30/04/2025

🆕 AWS announced just-in-time node access for AWS Systems Manager. The announcement caught my attention, as I've been looking for a way to restrict and audit access to EC2 instances in a fine granular manner. But, AWS charges $10/month for every EC2 instances opted-in for the feature. 🤯

000

Andreas Wittig @andreaswittig.bsky.social · 10/04/2025

It's been a while. After a 6 months pause, we recorded another episode of the cloudonaut podcast. Michael shares what he learned about Amazon Linux 2023 on t3.nano and other small instance types. Andreas give insights into how to get ISO 27001 certified. podcast.cloudonaut.io/93-getting-i...

Andreas wearing a headset recording a podcast.

030

Andreas Wittig @andreaswittig.bsky.social · 04/04/2025

🚨 We are observing 404 errors when downloading the certificate to verify the signature of SNS messages. Anyone with the same problem?

000

Andreas Wittig @andreaswittig.bsky.social · 26/03/2025

🎉 We made it! Our Information Security Management System is ISO 27001 certified. Michael and I learned a lot along the way -a detailed blog post will follow- and are happy to show our commitment to the security of our customer's systems and data.

Andreas smiling and holding an ISO 27001 certification into the camera.

030

Andreas Wittig @andreaswittig.bsky.social · 19/03/2025

2️⃣ Vulnerability management for source code and production systems We learned a lot along the way. What are your experiences from 3rd party audits?

000

Andreas Wittig @andreaswittig.bsky.social · 19/03/2025

About 2 months ago, we started preparing for an ISO 27001 audit. During the preparation we identified two major areas where we needed to improve our procedures. 1️⃣ Access management and endpoint security which is especially challenging when working with freelancers

100

Andreas Wittig @andreaswittig.bsky.social · 19/03/2025

We handed over our policies, procedures, and evidence to an auditor for an ISO 27001 certification. And now I have exam nerves. There is no good reason for my fear, because we are well prepared. 🧵

100

Andreas Wittig @andreaswittig.bsky.social · 17/03/2025

VPC Endpoints could be a great service, if AWS would offer them for free and not charge $7 per service, AZ, and month plus traffic. Ridiculous!

media.tenor.com

a baby is looking out of a window wearing a hat .

Alt: A baby wearing a hat is looking throwing money out of a window.

000

Andreas Wittig @andreaswittig.bsky.social · 10/01/2025

So far, I came across the following possibilities to backup and restore a DynamoDB table: 1️⃣ DynamoDB Backup 2️⃣ AWS Backup 3️⃣ S3 Export/Import 4️⃣ DynamoDB API (Scan, PutItem)

120

Andreas Wittig @andreaswittig.bsky.social · 10/01/2025

What's your preferred method to move data between DynamoDB tables? For example, when moving DynamoDB tables to another account. Bonus points for methods, that work with IaC tools like Terraform. #AmazonWebServices #awscommunity #dynamodb

110

Reposted by Andreas Wittig

Mathias Lafeldt @mathias.blog · 20/12/2024

Feedback from one of my freelance clients: "this PR is a christmas miracle" 🤩

021

Reposted by Andreas Wittig

zoph @zoph.me · 20/12/2024

Just published a deep dive into the sneaky ways AWS costs creep up on you 🕵️‍♂️ Found out that companies wasted $157B on cloud services last year. Most had no idea they were leaving money on the table. Check out full story on how these costs add up and what you can do about it: unusd.cloud/blog/post-5

unusd.cloud

Low signals: These small amounts that are draining your AWS budget

Chasing idle AWS assets

011

Andreas Wittig @andreaswittig.bsky.social · 20/12/2024

❓To all small software companies: are you ISO 27001 certified? If so, which tools and providers would you recommend? We are investigating our options to achieve an ISO 27001 certification in 2025 for attachmentAV and other products.

001

Andreas Wittig @andreaswittig.bsky.social · 19/12/2024

Compared to the CDK the cfn-modules are very simple to use. It's just a suite of CloudFormation templates that you stick together with nested stacks. npm is used to install and update the modules. Check it out! 👉 github.com/cfn-modules/... #awscommunity #cloudformation #AmazonWebServices 🧵(2/2)

lnkd.in

This link will take you to a page that’s not on LinkedIn

000

Andreas Wittig @andreaswittig.bsky.social · 19/12/2024

During the past weeks, I spent some time modernizing a suite of CloudFormation templates called cfn-modules, that we used heavily for our consulting gigs. ✅ Migrated CI/CD from CodeBuild to GitHub Actions ✅ Migrated Lambda functions to Node.js 22 ✅ Updated Amazon Linux AMIs ✅ ... 🧵 (1/2)

120

Andreas Wittig @andreaswittig.bsky.social · 13/12/2024

Oh, I totally understand your point of view. My intention is to find out whether it is worth to built a solution on top of the building blocks that AWS provides. I'm investigating the options to become a vendor in that space. 😁

110

Andreas Wittig @andreaswittig.bsky.social · 13/12/2024

I did not have a deeper look into this yet. But it seems like SES provides a feature for list management already. See docs.aws.amazon.com/ses/latest/d... for details.

docs.aws.amazon.com

Using list management - Amazon Simple Email ServiceUsing list management - Amazon Simple Email Service

Provides information about creating and managing contact lists.

010

Andreas Wittig @andreaswittig.bsky.social · 13/12/2024

We also offer a product called bucketAV, which focuses on scanning files stored on S3. There is indeed an AWS service that also scans S3 objects for malware: Amazon GuardDuty Malware Protection for S3. We've compared bucketAV with GuardDuty a few months ago: cloudonaut.io/review-amazo...

cloudonaut.io

Review: Amazon GuardDuty Malware Protection for S3

Learn how AWS GuardDuty protects your cloud infrastructure from viruses, malware, and other cyber threats. Discover best practices for implementing GuardDuty to enhance your AWS security posture and d

001

Andreas Wittig @andreaswittig.bsky.social · 13/12/2024

attachmentAV provides an API to scan files for viruses and malware. It's used by customers, who are not storing data on S3 or who want to scan the files before storing them on S3 (see attachmentav.com/solution/vir...).

attachmentav.com

Virus and Malware Scan API Self-hosted on AWS

Scan files for viruses, worms, trojans, ransomware and other kinds of malware by sending them to the attachmentAV API powered by Sophos. SaaS or self-hosted on AWS.

100

Andreas Wittig @andreaswittig.bsky.social · 13/12/2024

We are thinking about moving away from @kit.com as well. Currently, our idea is to use SES and semplates.io instead. What are the must-have features from your point of view?

210

Andreas Wittig @andreaswittig.bsky.social · 13/12/2024

🎉 We are launching a new product today: attachmentAV Virus and Malware Scan API (Self-hosted on AWS) 🛡️ Protect your workloads from viruses and malware 🦠 Integrate virus scanning by calling a REST API ☁️ Deploy the API to your AWS account 👉 Now available on the AWS Marketplace. Spread the news!

New: attachmentAV Virus and Malware Scan API
Now available on AWS Marketplace

120

Andreas Wittig @andreaswittig.bsky.social · 11/12/2024

👎 The code completion does not work very well. It comes up with totally wrong suggestions often. 👎 For both code completion and generation the response times are quite high. ❓Are you using local LLMs for programming? Or are you fine with LLMs running in the cloud? 🧵 (3/3)

000

Andreas Wittig @andreaswittig.bsky.social · 11/12/2024

Here are my observations so far: 👍 Getting started with ollama and Continue is straight forward. 👍 Rewriting small parts of code works quite well. 👍 Letting the AI explain parts of the code is useful from time to time. 🧵 (2/3)

100

Andreas Wittig @andreaswittig.bsky.social · 11/12/2024

🧠 I'm experimenting with local LLMs for programming. My setup consists of three building blocks: 1️⃣ ollama to download and run LLMs. 2️⃣ Continue for code completion, code generation, and discussion integrated into VS Code. 3️⃣ MacBook Pro with M4 Pro 🧵 (1/3)

100

Andreas Wittig @andreaswittig.bsky.social · 04/12/2024

🎞️ It's amazing how fast AWS publishes the keynotes and breakout sessions at #reInvent 2024 on YouTube. Amazing experience, for those who are watching from home. Thanks! 🙏

040

Andreas Wittig @andreaswittig.bsky.social · 03/12/2024

Good question, could not find an SLA. The documentation mentions, that data is stored on multiple nodes. So I expect an SLA similar to S3 in the future.

000

Andreas Wittig @andreaswittig.bsky.social · 03/12/2024

🆕 Hetzner announced their object storage service (S3-compatible) 😳 For 5 EUR/month you get 1 TB storage, 1 TB outgoing traffic, incoming traffic and requests are free of charge. 😭 AWS charges 23 USD for storing 1 TB not to mention the extra charges for requests, outbound traffic, ...

210

Andreas Wittig @andreaswittig.bsky.social · 29/11/2024

2️⃣ Terraform/OpenTofu/CloudFormation/CDK state will be broken after the upgrade as Aurora Serverless v2 requires a ServerlessV2ScalingConfiguration as well as a separate DB instance of type db.serverless. 🧐 Double check that you have migrated all Aurora Serverless v1 cluster to v2! 🧵 (3/3)

010

Andreas Wittig @andreaswittig.bsky.social · 29/11/2024

1️⃣ Aurora Serverless v2 requires MySQL 3.02.0 or PostgreSQL 13.6. So AWS might run a major version upgrade of your MySQL or PostgreSQL database. 🧵 (2/3)

100

Andreas Wittig @andreaswittig.bsky.social · 29/11/2024

⚠ Are you still running Aurora Severless v1 clusters? Be warned, AWS will migrate them to v2 automatically after December 31, 2024. The following two changes might blow up and cause severe issues: 🧵 (1/3) #awscommunity #AmazonWebServices

110

Reposted by Andreas Wittig

Anton Babenko 🇺🇦 @antonbabenko.com · 29/11/2024

At AWS reinvent, I will also demo compliance.tf in action. As we are getting closer to the launch, I want to find a few active users of opensource Terraform AWS modules who want to join pre-release and provide feedback. Sharing the docs for the first time - docs.compliance.tf

docs.compliance.tf

Compliance-Ready Terraform Modules

051

Andreas Wittig @andreaswittig.bsky.social · 29/11/2024

🆕 „AWS PrivateLink now supports native cross-region connectivity.“ 👍 That‘s one of the features, I‘ve been waiting for. Might enable a use case/product I‘ve been thinking about for months. (Source: aws.amazon.com/about-aws/wh...)

aws.amazon.com

AWS PrivateLink now supports cross-region connectivity - AWS

Discover more about what's new at AWS with AWS PrivateLink now supports cross-region connectivity

020

Andreas Wittig @andreaswittig.bsky.social · 28/11/2024

Yes, same here! In my opinion, the license is deliberately worded very vaguely.

000

Andreas Wittig @andreaswittig.bsky.social · 28/11/2024

We've just released a new version of attachmentAV for WordPress. 1️⃣ Performance improvements 2️⃣ Show scan status of media files Special thanks to Sebastian for the feedback on the onboarding flow.

The WordPress plugin attachmentAV adds the scan status to each media file.

020

Andreas Wittig @andreaswittig.bsky.social · 27/11/2024

Nice, but not that important because each table/index has a unique name. Or what‘s the scenario where you desperately needed ABAC for DynamoDB?

200

Andreas Wittig @andreaswittig.bsky.social · 25/11/2024

Oh, interesting. We worked with Cloudflare queues and workers and were quite unsatisfied with the service maturity. Which parts of Cloudflare are you using?

100

Andreas Wittig @andreaswittig.bsky.social · 25/11/2024

Does CloudFormation or Terraform support the ability to configure "scale to zero" for Serverless v2 already? Could not find anything in the docs.

100

Andreas Wittig @andreaswittig.bsky.social · 25/11/2024

Didn't AWS announce to shut down Aurora Serverless v1 at the end of the year? Strangely, no hints can be found in the documentation. And it is still possible to create Serverless v1 clusters. Did I miss anything? #awscommunity #AmazonWebServices

010

Andreas Wittig @andreaswittig.bsky.social · 25/11/2024

I have been observing much more frequent Fargate spot interruptions in eu-west-1 for about 2-4 weeks now, practically every day instead of every month. Is anyone else experiencing this? #awscommunity #AmazonWebServices

media.tenor.com

a man sitting in front of a laptop with skoda written on the wall behind him

ALT: a man sitting in front of a laptop with skoda written on the wall behind him

020