Setting up Cloudwatch Cross Account Observability with CDK
Cross Account Cross Region(XAXR) Cloudwatch Observability has been a feature that has been around for a while, it was introduced by AWS in 2022. Let鈥檚 consider this scenario, you work in a company, that uses AWS. You are in a team that vends constructs/templates to other internal teams in your company. These internal teams are your customers. You vend your solution as an abstraction, that solves an undifferentiated problem for your customer. This let鈥檚 your customer focus on what makes their beer taste better. ...
Curated List of FOSDEM 2025 Talks for Linux Distribution Builders
FOSDEM is a free and non-commercial event organised by the community for the community. The full form is Free and Open Source Developers European Meeting, you can learn more about it鈥檚 history here. My day to day involves working with Linux, and maintaining a Linux Distribution for my company and building new features for the distribution. FOSDEM is great conference for Linux builders and even users to learn about the latest greatest happening in the community. ...
Leveraging Container Registry APIs for your benefit.
If you have ever run docker pull or pulled a container using the favorite container runtime tool of your choice, you鈥檝e probably interacted with a container registry. A container registry does not only provide mechanisms to store and distribute container images, it also exposes APIs that clients can use to perform other actions like fetching the container鈥檚 metadata without pulling the entire container. At work, I had a problem to solve, which is when I thought why not leverage these APIs to solve my problem. In this post we鈥檒l see how I leveraged the Container Registry APIs for my benefit and possibly how you the reader can use it as well. ...
Using UV to manage a python project
1. Motivation I wanted to put up a small snippet of code I did at work as a public github project, as it seemed like a common usage pattern that other folks can use of the shelf or copy from. Within Amazon, we have our own python project management and dependency management tooling that automates away a lot of the boilerplate setup in defining and distributing a Python project. They abstract away the setup and usage for tools and configurations like pyproject.toml, venv, mypy, black, pytest, etc. They essentially run these tools under the hood, but we as developers don鈥檛 need to care about setting these up every time we start a new project. ...
My notes on the Trusted Platform Modules
These are my notes taken from learning about TPMs from this source material: https://courses.cs.vt.edu/cs5204/fall10-kafura-BB/Papers/TPM/Intro-TPM-2.pdf These are just excerpts and notes, that I have captured for my recollection and understanding, from the chapter A common design goal across this diversity however, is the provision of some degree of secure processing, implemented in secure hardware. The Trusted Platform Module, or TPM, is similar to a smart card device in that it is a small footprint low cost security module typically implemented as a tamper resistant integrated circuit (IC). The TPM however, has been specifically designed to be a building block for trusted computing ...
My Notes while learning about Greengrass
Greengrass Concepts Basics GG is a edge runtime with a deployment and management mechanism for the egde runtime AWS IoT thing: A device or logic entity Greengrass core device: Device running greengrass core software Greengrass client device: A device that connects to and communicates with a greengrass core device over MQTT. client device and core device could the same device or could be separated, with a sort of master slave relationship. client devices are meant for small footprint device that run embedded linux or RTOS maybe? ...
Build your own Customized Live Debian Distro using Debootstrap
In this guide, we鈥檒l be going over the steps involved to build a LiveCD Debian distribution using debootstrap with both legacy BIOS and UEFI boot support using GRUB2. Why build your own distribution, you ask? There are scenarios and use cases that necessitate packages, certificates or other artifacts are already installed in the OS Image that鈥檚 distributed in the machines that are shipped, this guide will go over the steps involved to build that image. ...
Building Yocto Based Linux Image for AMD Ryzen Embedded v1000 Series SoCs with AWS Agents installed.
This guide outlines the steps involved to build a linux distribution using Yocto for AMD Ryzen Embedded v1000 Series SoCs with AWS SDKs, services, and software from the meta-aws layer. Prerequisites: To follow the steps image build section, you will need: A Supported Linux Distribution: You should have a reasonably current Linux-based host system. You will have the best results with a recent release of Fedora, openSUSE, Debian, Ubuntu, or CentOS as these releases are frequently tested against the Yocto Project庐 and officially supported. I鈥檝e tried building this with both Ubuntu 20.04 and Pop_OS! 22.04. ...