In this episode of the AWS Developers Podcast, Seb and Ran Isenberg discuss the automation of IAM policies across multiple AWS accounts. They explore the challenges faced in managing security and access in a multi-account environment, the design and implementation of an automation architecture that simplifies these processes, and the significant improvements in developer experience and operational efficiency achieved through this automation. Ran shares insights into the open-source project that supports this automation and discusses future enhancements and community engagement.

With Ran Isenberg, Software Architect, CyberArk

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• Ran the builder web site
• The GitHub repo we talked about: Auto Cross Account Access Service
• [Blog] : Serverless Governance of Software Deployed with AWS Service Catalog
• [Blog] : Amazon CloudFormation Custom Resources Best Practices with CDK and Python Examples
• [Blog] : AWS Security Best Practices: Leveraging IAM for Service-to-Service Authentication and Authorization
• [Blog] : Export CloudWatch Logs to Third-party Observability Tools with Serverless

In this episode of the AWS Developers Podcast, we discuss the Multi-Agent Orchestrator, an open-source framework designed to facilitate the orchestration of multiple AI agents. The conversation covers the challenges of building generative AI solutions, the need for specialized agents, and how the orchestrator functions as a smart router for directing user queries to the appropriate agents. They explore real-world use cases, including an e-commerce support system, and discuss the integration of new agents into the framework. The episode also compares the orchestrator with Amazon Bedrock's Converse API, highlighting the unique capabilities of the orchestrator in managing multiple agents.

With Corneliu Croitoru and Anthony Bernabeu, Prototyping Architects, AWS.

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• The multi agent orchestrator
• Use case 1: From ‘Bonjour’ to ‘Boarding Pass’: Multilingual AI Chatbot for Flight Reservations
• Use case 2: Beyond Auto-Replies: Building an AI-Powered E-commerce Support system
• Use case 3: Speak Up, AI: Voicing Your Agents with Amazon Connect, Lex, and Bedrock

In this episode of the AWS Developers Podcast, Seb speaks with Peter Lavelle and Edward Sun about Twilio, and the complexities of authorization in cloud applications. They discuss the evolution of Twilio Flex, the challenges faced in implementing a sophisticated authorization model, and the decision-making process behind choosing between graph-based and policy-based authorization systems. The conversation also highlights the benefits of Amazon Verified Permissions (AVP) and the Cedar Policy Language, emphasizing the importance of decoupling authorization logic from business logic for better scalability and maintainability. This conversation delves into the implementation and benefits of AWS Verified Permissions (AVP) and the Cedar policy language. The speakers discuss the Quick Start experience for users, the challenges of policy-based systems, and the importance of automated reasoning in policy verification. They also explore metadata management, the flexibility of local versus central evaluation in authorization, and the implementation timeline for Twilio's use of AVP. The discussion highlights the growing adoption of these technologies and their potential future applications.

With Peter Lavelle, Principal Software Engineer, Twilio and Edward Sun, Solution Architect, AWS.

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• Twilio
• Google Zanzibar
• Amazon Verified Permission
• Cedar: Learn about the language, tutorial and playground
• AWS blog: How we designed Cedar to be intuitive to use, fast, and safe
• AWS blog: Authorize API Gateway APIs using Amazon Verified Permissions

In this episode of the AWS Developers Podcast, Julian Wood hosts a discussion with Marc Brooker, a distinguished engineer involved in the creation of AWS Lambda. They explore the origins of Lambda, its evolution, and the impact of serverless technology on modern computing. The conversation delves into customer-centric innovations, the challenges of event-driven architectures, and the future of serverless in the context of generative AI. Mark reflects on the journey of Lambda, the lessons learned, and the exciting possibilities that lie ahead for serverless technology.

With Marc Brooker, VP/Distinguished Engineer, AWS and Julian Wood, Developer Advocate, AWS

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• AWS Lambda
• Firecracker microVM
• How Lambda loads data from the block devices

In this conversation, Vadym Kazulkin discusses AWS Lambda Snap Start, a feature designed to reduce cold start latency for Java applications in AWS Lambda. The discussion covers the challenges of cold starts, how Snap Start works, its impact on performance, and optimization techniques such as priming. Kazulkin shares insights from his extensive benchmarking and the implications for developers using AWS Lambda. The discussion also touches on challenges developers may face when using Snap Start, particularly in relation to randomness and caching mechanisms. Kazulkin encourages developers to revisit Java on Lambda with the new optimizations available, highlighting the evolving landscape of serverless computing.

With Vadym Kazulkin, Head of development at ip.labs

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• The first of 26 articles about Lambda SnapStart benchmarking
• AWS Lambda Snap Start for Java functions
• AWS Lambda cold start
• Firecracker microVM
• Impact of latency on revenue
• AWS CRT
• How Lambda loads data from the block devices

In this episode of the AWS Developers Podcast, Seb and Arthur discuss the Graviton processors and the Arm64 architecture. They explore the evolution of AWS's custom hardware, the benefits of adopting Arm architecture for AWS and developers, and the ease of porting applications to Arm64. The conversation also covers the challenges faced during migration, strategies for performance optimization, and the future of Graviton in AWS.

With Arthur PetitPierre, Solution Architect, AWS

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• AWS Graviton
• Arm64 migration guide
• Java Native Interface (JNI)

In this episode of the AWS Developers Podcast, the hosts discuss trusted identity propagation with Joseph De Clerck and Raphael Koike. Trusted identity propagation (TIP) allows organizations to propagate the actual user identity downstream to AWS services. It enhances IAM roles with the actual user identity, enabling fine-grained access control and simplifying IAM role management. The benefits of TIP include improved security posture, fine-grained access control, simplified user experience, and support for various OAuth 2.0 flows. Services that currently support TIP include Lake Formation, S3 Access Grants, Redshift Query Editor, EMR Studio, Athena, and Amazon QuickSight.

With Joseph de Clerck, ProServ Consultant, Rafael Koike, Solution Architect, AWS, Brooke Jamieson, Developer Advocate, AWS.

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• IAM Identity Center
• Trusted Identity Propagation
• Integrate Tableau with Trusted Identity Center

In this episode of the AWS Developers Podcast, Seb and Brooke are joined by Massimo Refere, a senior principal product manager in the Amazon Q team. They discuss how generative AI can help developers and introduce Amazon Q Developer, a generative AI assistant for work. They explore the different capabilities of Amazon Q Developer, including troubleshooting, coding assistance, and task assignment. They also discuss the conversational coding experience and the ability to customize models based on an organization's codebase. The episode concludes with a discussion on how developers can get started with Amazon Q Developer. The conversation covers topics such as the overlap between Q business and Q Developer, customization and personalization, the challenges of demoing customizations, the minimum amount of code required for customization, evaluating customized models, data security and protection, and the future direction of Amazon Q Developer.

With Massimo Re Ferrè, Director, Product Management, AWS, and Brooke Jamieson, Developer Advocate, AWS.

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• Amazon Q Developer
• Amazon Q Developer pricing and tier of services
• Amazon Q Developer customization for enterprises

In this week's episode, we dive deep into the world of AWS Identity Center and explore how it changed workforce identity access management within the AWS ecosystem. Join us as we discuss the key differences between IAM and Identity Center, unraveling how this powerful service is specifically designed to manage human user access to AWS accounts. Discover the diverse use cases for Identity Center, from managing employee access to AWS accounts to providing seamless access to various AWS applications. We'll discuss the importance of choosing the right region and seamlessly integrating with your preferred identity providers. Additionally, we'll shed light on common pitfalls and scenarios to be aware of when leveraging Identity Center.

With Joseph de Clerck, ProServ Consultant, Roberto Migli, Solution Architect, AWS, Brooke Jamieson, Developer Advocate, AWS.

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• IAM Identity Center
• Renaming of AWS SSO to IAM Identity Center
• System for cross-domain identity management (SCIM)

In this episode, we dive deep into the world of AWS certifications, specifically the prestigious Solutions Architect - Professional exam. Join us as we interview Patrick, a seasoned solution architect with extensive experience in preparing for and passing this challenging certification. Patrick breaks down the key differences between the Associate and Professional levels, emphasizing the advanced knowledge and experience required for the latter. He shares valuable insights into the four domains covered by the exam: designing for organizational complexity, designing for new solutions, continuously improving existing solutions, and accelerating workload migration and modernization. We explore the intricacies of the exam format, including the types of questions, time management strategies, and the importance of understanding the AWS Well-Architected Framework. Patrick also discusses the best resources for exam preparation, such as official AWS documentation, practice exams, and his own book, 'AWS Certified Solutions Architect Professional Exam Guide.' Whether you're a seasoned AWS professional looking to advance your career or just starting your cloud journey, this episode offers invaluable guidance on how to tackle the AWS Certified Solutions Architect - Professional exam and achieve your certification goals.

With Patrick Sard, Solution Architect, AWS.

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• Patrick’s book to get prepared for the AWS SA Pro certification : AWS Certified Solutions Architect - Professional Exam Guide (SAP-C02): Gain the practical skills, knowledge, and confidence to ace the AWS (SAP-C02) exam on your first attempt
• The AWS Solution Architect Professional exam details
• A free course on SkillBuilder to study the AWS Architect Professional exam

In this episode of the AWS Developers Podcast, Seb and Brooke Jamieson interview Halim Qarroum, the head of application prototyping at AWS, about the document processing pipeline. They discuss the concept of a document processing pipeline, the typical use cases for processing documents, and how Lake Chain, an open-source framework developed by Halim and his team, simplifies the process of building document processing pipelines. They also explore the architecture of Lake Chain, including the use of SQS and SNS as the messaging system, and the integration of various AWS services and open-source machine learning models. The episode concludes with a discussion on future plans for Lake Chain and how developers can contribute to the project.

With Halim Qarroum, Manager, Application Prototyping and Brooke Jamieson, Developer Advocate, AWS.

Links

Here are the links to the tools, technologies, or articles we mentioned in this episode.

• Lakechain, a framework to implement and deploy tour document processing pipelines.
• The Cloud Development Kit (CDK)
• Werner’s video about the Cloud Development Kit (CDK)
• AWS Developers Podcast episode 126 : Domain-driven design for cloud automation