Exploring AWS Lambda through a hands-on beginner project. In this article, I'll walk through creating and testing my first serverless function, understanding execution roles, and exploring how AWS Lambda runs code without managing servers.

What happens when your AWS CloudShell VPC environment disappears? Your scripts, files, and configurations may disappear with it. Explore how Git, Amazon S3, and reproducible setup scripts can help protect your work, rebuild your development environment, and avoid starting from scratch. A practical guide to making temporary cloud workspaces more resilient.

Twelve quick AWS console and CLI v2 tricks: CloudShell, Tag Editor, --query, --filters, logs tail and more. Each one takes under a minute to learn.

When building applications on AWS, controlling network traffic is essential to protecting workloads from unauthorized access. Two important security controls in Amazon VPC are Security Groups and Network Access Control Lists (NACLs).

Explore how VPC Route Tables control network traffic within AWS. This article explains routing basics, local routes, Internet Gateways, and the differences between public and private subnets. Learn how route tables work with Security Groups and Network ACLs to enable connectivity and strengthen network security. Build a practical understanding of AWS networking fundamentals and discover how these components work together in real-world cloud architectures.

I am preparing for the AWS Certified Cloud Practitioner exam and learning about core AWS services, cloud security, and cost management. Here are the key concepts I am learning as a beginner.

What if AWS went down for 24 hours? Explore outages, disaster recovery, multi-region design, and whether resilience is worth the extra cost. Share your views!

AWS Identity and Access Management (IAM) helps control who can access AWS resources and what actions they can perform. Explore IAM users, groups, roles, policies, and essential security practices for building a more secure cloud environment.

Master AWS VPC networking by understanding Network Access Control Lists (NACLs) and their role in subnet-level security. This guide explores traffic filtering, inbound and outbound rules, stateless communication, default vs. custom NACLs, and the key differences between Network ACLs and Security Groups. Learn essential AWS networking concepts and security best practices to build more secure, reliable, and scalable cloud architectures.

AWS CloudTrail ログには、疑わしいアクティビティを調査するために必要な証拠が含まれています。このパート 1 では、AWS の Security Incident Response Team (SIRT) が実践する調査手法を、2 つの実際のシナリオに沿って紹介します。1 つは、設定ミスのあるクロスアカウントアクセスが悪用され、ランサムウェアとの関連が疑われる Amazon S3 データ削除に至った事例です。もう 1 つは、多要素認証 (MFA) のないコンソール認証情報が悪用され、AWS CloudFormation と AWS CloudShell で暗号通貨マイニングが行われた事例です。重要なフィールドの読み解き方、調査の優先順位、対応チェックリスト、予防策を解説します。

AWS CloudTrail ログには、疑わしいアクティビティを調査するために必要な証拠が含まれています。このパート 1 では、AWS の Security Incident Response Team (SIRT) が実践する調査手法を、2 つの実際のシナリオに沿って紹介します。1 つは、設定ミスのあるクロスアカウントアクセスが悪用され、ランサムウェアとの関連が疑われる Amazon S3 データ削除に至った事例です。もう 1 つは、多要素認証 (MFA) のないコンソール認証情報が悪用され、AWS CloudFormation と AWS CloudShell で暗号通貨マイニングが行われた事例です。重要なフィールドの読み解き方、調査の優先順位、対応チェックリスト、予防策を解説します。

Explore how AWS services such as Elastic Load Balancing, Amazon Route 53, Availability Zones, and Amazon RDS Multi-AZ support high availability, fault tolerance, and resilient cloud architectures while minimizing downtime and improving application reliability.

Explore how AWS services such as Elastic Load Balancing, EC2 Auto Scaling, Amazon CloudWatch, and Route 53 support scalable, reliable, and highly available cloud applications through efficient traffic distribution, performance monitoring, and fault-tolerant architecture.

AWS Identity and Access Management (IAM) helps securely control who can access AWS resources and what actions they can perform. It is a global service provided at no additional cost.

A few thoughts on why security matters as I continue learning about AWS and cloud computing

A contact form looks simple from the user's perspective:

Building an AWS-powered system that connects code changes to infrastructure, cost, performance, and deployment outcomes Every software deployment begins with a change. A developer modifies a Lambda function. An API endpoint is added. A DynamoDB query changes. A dependency becomes heavier. A configuration value changes. From a code-review perspective, these may look like relatively small changes. But in a cloud environment, a small code change can have a much larger operational effect.

Learn 10 practical AWS serverless best practices for building secure, scalable, cost-efficient, and production-ready applications with Lambda, API Gateway, and DynamoDB.

Deploying cloud infrastructure requires a solid, isolated network foundation to ensure security and proper traffic management. In this hands-on project, I built a custom Amazon Virtual Private Cloud (VPC) from the ground up, configuring key networking components using both the AWS Management Console and the AWS Command Line Interface (CLI).

Starting AWS can feel overwhelming because there are hundreds of services and concepts to learn. Here are the lessons that helped me understand how to approach AWS as a beginner.

Learn how to architect, deploy, and secure an end-to-end serverless API using AWS Lambda, DynamoDB, and API Gateway with production-ready best practices.

Discover how Amazon Web Services (AWS) transformed modern computing into a global utility, powering startups, critical infrastructure, and advanced AI innovation worldwide.

DuckDB は軽量なインメモリ SQL エンジンで、追加のサーバー運用なしに対話型のデータ分析を実現します。本記事では、Amazon SageMaker Lakehouse Iceberg REST エンドポイントと AWS Lake Formation のアクセス許可を利用して、AWS CloudShell 上の DuckDB から Amazon S3 Tables に格納された Iceberg テーブルにアクセスし、クエリを実行する手順を紹介します。

DuckDB は軽量なインメモリ SQL エンジンで、追加のサーバー運用なしに対話型のデータ分析を実現します。本記事では、Amazon SageMaker Lakehouse Iceberg REST エンドポイントと AWS Lake Formation のアクセス許可を利用して、AWS CloudShell 上の DuckDB から Amazon S3 Tables に格納された Iceberg テーブルにアクセスし、クエリを実行する手順を紹介します。