
I try to tweet novel things about AWS.“Shit-poster extraordinaire” according to @LastWeekInAWS. He/him. AWS Serverless Hero
Melbourne, Australia
Joined April 2011
- Tweets12.9K
- Following2.3K
- Followers10.2K
- Likes43.8K
Aidan W Steele retweeted
How down is AWS in the middle east? 2027 down. I guess at least they sent an update.
Aidan W Steele retweeted
I remember reading about Actually Portable Executables by @jartine and having my jaw drop.
(I even tried to contribute to Cosmopolitan and got Google to sign off on it! That's another fun story)
I tender my submission to the pantheon: Actually Queryable Executables
#sqlite all the way down.
fzakaria.com/2026/08/24/actu…
Aidan W Steele retweeted
Another day, another chance to drop the "Melbourne suburbs didn't have boundaries until 1998" bomb on people. wongm.com/2022/06/melbournes…
Aidan W Steele retweeted
Is it pre:Invent season already? ALB now allows URL and Host rewrite using regexp. That should be fun. I wonder if the documentation example using `/dp/` is from a certain retail customer...
aws.amazon.com/about-aws/wha…
Aidan W Steele retweeted
One of the most, if not the most, impactful cloud vulns of all time. Absolutely incredible.
I've been researching the Microsoft cloud for almost 7 years now. A few months ago that research resulted in the most impactful vulnerability I will probably ever find: a token validation flaw allowing me to get Global Admin in any Entra ID tenant. Blog: dirkjanm.io/obtaining-global…
Aidan W Steele retweeted
When AWS announced their IPv4 tax, >90% of service endpoints did not support IPv6 at all. This number is now down to 33%. To celebrate, I gave awsipv6.neveragain.de a makeover – it's now dynamic, so it won't shove several megabytes of HTML into your face anymore.
Also, to keep the page more useful (and to keep AWS motivated), it will now initially display only endpoints that support IPv6 by default. And it now remembers your selected regions!
The page is now built as a Lambda Function URL using Aurora DSQL, with Cloudfront for caching. And simply because I adore how much @htmx_org reminds me of the long-gone golden days of the internet, I just had to give htmx a try. Loading the endpoint data is a trivial use case, but I can already see how very refreshingly simple htmx is – frontend hasn't been that much fun in a long time.
Let me know what you think.
Aidan W Steele retweeted
AWS just sent notifications about Aurora DSQL going GA "soon", with billing starting accordingly – though pricing info still isn't public, it seems.
That woke me from my slumber and reminded me that I had set up some experiment to generate data – and then completely forgot about it. Well, it's still there, it's been reliable, and notably the latency is extremely consistent over ~half a year. That's pretty impressive, especially for a service in preview. If anything, it seems there is an ever so slight increase of latency for INSERTs as the number of rows grows (that table is now at 8.2M rows / ~5 GiB).
Random observation though, it seems table statistics are not updated automatically as Postgres would do it. That didn't change the query plan in my case, still a bit odd.
I'm a bit sad that I didn't play around with DSQL much more. But anyway, can't wait for DSQL to be GA and to learn about the pricing. Already have some ideas for using it in customer projects.
PS: Just today DSQL has also added endpoints in several ap* and eu* regions, so GA might be just around the corner.
Aidan W Steele retweeted
Excited to see this feature launched in CodeBuild. You can now optimize your Docker image builds on CodeBuild using the remote docker server.
📰🚨 Accelerate CI/CD pipelines with the new AWS CodeBuild Docker Server capability
#AWSCodeBuild #DockerServer #DevOps #ContinuousIntegration #BuildEfficiency
ift.tt/H9l0puB
Aidan W Steele retweeted
Wake up honey, new IPv6 ingress option on AWS just dropped! It's easy to miss with all the announcements about *service* API endpoints getting IPv6 support, but API Gateway now support IPv6 for client traffic too! Now go build IPv6-enabled APIs.
aws.amazon.com/about-aws/wha…
Aidan W Steele retweeted
DynamoDB read operations like "GetItem", "Query", and "Scan" aren’t the only way to retrieve data. Some write operations can also return data, and if you're not careful, you might be leaking information without even realizing it.
H/T @__steele
Aidan W Steele retweeted
Finding a balanced wildcard use solution to letting users allow *[.]their-co[.]com & *[.]trusted-tenant[.]csp[.]com safely but not accidentally allow *[.]cloudfront[.]net or *[.]s3[.]amazonaws[.]com took some time but we finally found an answer with... 🧵
DiscrimiNAT Firewall, for outbound filtering, v2.9.0 released on AWS.
Release notes: chasersystems.com/docs/discr…
Aidan W Steele retweeted
This is a MASSIVE feature for EventBridge & Step Functions. Makes it super easy to integrate with Container or EC2 workloads — just setup your private API as a target. Fantastic work on this by the team!
This quoted post is unavailable.
Aidan W Steele retweeted
Mark your calendars! The next fwd:cloudsec will be in Denver, Colorado June 30-July 1, 2025! 🎉
Aidan W Steele retweeted
I love any feature that comes out relating to security groups, so important. This time it's sharing them across VPCs and tenants of shared VPCs: aws.amazon.com/about-aws/wha…
Aidan W Steele retweeted
How a student on my cloud security training course ended up accessing underlying AWS infrastructure 😮
Thanks @__steele your post on CloudShell helped me understand what was going on 🚀link.medium.com/aTetDu8SINb
Aidan W Steele retweeted
In the endless cloud vs anything else debate, people often forget how cloud platforms have dropped the cost of entry and how they have democratised the market.
A student can use and thus learn the same technology their future employers use. This is a critical capability.





























