Getting-Started on Simple Enough Blog

Introduction to Amazon Inspector

Wed, 03 Sep 2025 11:18:06 +0200

I. Overview of Amazon Inspector

Amazon Inspector is an automated vulnerability management service on AWS that automatically discovers workloads such as EC2 instances, container images in ECR, and Lambda functions, and continuously scans them for software vulnerabilities and unexpected network exposures.
It generates findings used to prioritize patches based on a contextualized risk score, which adapts the CVSS score according to the environment (e.g., absence of open ports).

Report: Amazon GuardDuty Malware Protection for S3

Wed, 20 Aug 2025 10:09:45 +0200

I. What is Amazon GuardDuty?

Amazon GuardDuty is an AI-based security service that continuously monitors AWS accounts and workloads.
It uses machine learning algorithms to detect suspicious activities, abnormal behaviors, and potential threats in your cloud environment.
GuardDuty integrates seamlessly with other AWS services like S3, EC2, and IAM to provide a comprehensive view of your infrastructure’s security posture.
It also works alongside AWS CloudTrail and AWS Config to gather additional context and trigger automatic responses to threats.

Understanding the CSS Box Model

Mon, 04 Aug 2025 16:09:45 +0200

I. What is the CSS Box Model?

In CSS, every HTML element is treated as a rectangular box. This is called the box model.

The box model defines how an element’s total size is calculated, and how it interacts with surrounding elements.

An HTML element consists of 4 main areas:

+-------------------------------+
| margin (outer) |
| +-------------------------+ |
| | border (border) | |
| | +-------------------+ | |
| | | padding (space) | | |
| | | +---------------+ | | |
| | | | content | | | |
| | | +---------------+ | | |
| | +-------------------+ | |
| +-------------------------+ |
+-------------------------------+

II. The 4 Parts of the Box Model

1. `content`

The actual content of the element (text, image, button…).

This is who IAM

Tue, 27 May 2025 15:33:47 +0200

I. IAM: Core Components and Concepts

IAM is based on entities and policies.

IAM Entities

Users: Represent people or applications. Example: a developer named “alice”.
Groups: Collections of users sharing the same permissions.
Roles: IAM entities that can be temporarily assumed by others. Ideal for federation or services like EC2 or Lambda.
Policies: JSON documents that define permissions attached to an entity.

Sample JSON Policy

{
 "Version": "2012-10-17",
 "Statement": [
 {
 "Effect": "Allow",
 "Action": "s3:ListBucket",
 "Resource": "arn:aws:s3:::example_bucket"
 }
 ]
}

This IAM policy allows an AWS entity (user, role, or group) to list the objects in a specific S3 bucket named example_bucket. It uses the standard IAM version format (2012-10-17) and allows the s3:ListBucket action on the resource identified by its ARN. It lets the entity see the list of objects (names, sizes, metadata), but not read or modify them—unless additional permissions are granted. This minimal policy is often used for inventory or bucket navigation via the AWS Console or API.

Flutter for True Beginners: What It Is, What It’s For, and How to Try It

Mon, 12 May 2025 10:10:48 +0200

I. What is Flutter?

Flutter is an open-source framework developed by Google, designed to build native user interfaces for Android, iOS, Web, and desktop from a single codebase. It uses the Dart language and allows developers to build smooth, high-performance, and visually appealing apps.

Flutter stands out thanks to its integrated rendering engine and ability to display animations at 60 fps or higher. It doesn’t rely on native platform UI components, which ensures visual consistency across platforms.

Introduction to AWS ELB

Sat, 15 Mar 2025 21:11:49 +0000

I. Introduction to Load Balancers in AWS

An Elastic Load Balancer (ELB) acts as a traffic distributor, automatically spreading incoming traffic across multiple target resources such as EC2 instances, containers, or IP addresses.

This functionality is a cornerstone of fault-tolerant and highly available cloud application design. AWS offers three types of ELB tailored to different use cases, each with specific features.

Amazon EventBridge vs Amazon SNS: Which Solution to Choose?

Tue, 11 Mar 2025 10:05:00 +0100

Introduction

In this article, we will compare these two services, explore their use cases, and see how to integrate them effectively into an AWS architecture.

I. Comparison of Amazon EventBridge vs Amazon SNS

Feature	Amazon EventBridge	Amazon SNS
Communication Type	Event-Driven	Publish-Subscribe (Pub/Sub)
Use Cases	Event routing between AWS services and SaaS applications	Sending notifications to subscribers (emails, SMS, Lambda, SQS, etc.)
Message Sources	AWS Services, SaaS applications, custom applications	Applications, users, AWS services
Targeting Consumers	Advanced filtering rules to send an event to one or multiple targets	Sends the same message to all topic subscribers
Supported Protocols	AWS Lambda, SQS, API Gateway, Kinesis, Step Functions, etc.	Emails, SMS, Lambda, SQS, HTTP(S) endpoints, mobile applications (FCM, APN)
Message Filtering	Advanced filtering based on JSON rules	Limited filtering based on message attributes
Architecture	Event-driven and integrates with other AWS services	Notification-based messaging between producers and consumers
Durability & Message Retention	No native storage (events are routed immediately)	Messages stored for 4 days (up to 14 days with Extended Retention)
Message Ordering	Not guaranteed (messages may arrive out of order)	FIFO ordering available with SNS FIFO

II. Detailed Use Cases

A. Amazon EventBridge Use Case: Orchestrating Events Between Services

EventBridge is ideal for connecting different AWS services and SaaS applications.

The 5 Must-Read Whitepapers

Sat, 01 Mar 2025 10:56:41 +0100

Prepare for Your First AWS Certification with These Essential Whitepapers

AWS whitepapers help you gain an in-depth understanding of best practices and cloud architectures. These free resources are invaluable for anyone looking to pass their certification exam successfully.

In this article, we introduce the key whitepapers for your preparation and explain how to use them effectively.

I. Why Read AWS Whitepapers?

AWS whitepapers are written by cloud experts and provide practical guidance on designing, managing, and securing AWS infrastructures. They cover topics ranging from general architecture principles to performance and security best practices. Reading these documents allows you to deepen your knowledge beyond simple tutorials and better understand the requirements of AWS fundamental or associate-level exams.

How to Filter S3 Events by Object Size?

Tue, 18 Feb 2025 17:16:31 +0100

I. When Do You Need to Filter S3 Events by Object Size?

Filtering S3 events by object size is useful in various scenarios, especially when triggered actions depend on file volume. Here are some concrete use cases where this filtering is relevant:

1. Cost Optimization and Storage Management

Automatically deleting oversized files: Prevents the accumulation of unnecessary files that take up space and generate extra costs.
Automatically moving files to lower-cost storage (e.g., Glacier) when they exceed a certain size.

2. Process Automation

Executing a specific process on large files (e.g., video/audio conversion, compression, splitting large files into smaller chunks).
Triggering a Lambda function to index only relevant files based on their size.

3. Security and Compliance

Avoiding the storage of excessively large files in public buckets, which could lead to abuse (e.g., uploading large archives by malicious users).
Triggering an alert or blocking uploads if a user exceeds a defined size limit.

4. Data Flow Optimization

Directing small files to real-time processing (Lambda, Kinesis) and larger files to batch processing to optimize system efficiency.
Redirecting files based on their size to different buckets (e.g., files < 1MB to a high-speed access bucket, files > 100MB to cold storage).

5. Monitoring and Reporting

Generating reports on storage usage by filtering objects exceeding a critical size.
Detecting anomalies, such as sudden uploads of very large files, which could indicate an issue (e.g., massive log errors, data leaks, etc.).

II. How to Filter S3 Events by Object Size? c3 Methods

1. Filtering via AWS EventBridge and AWS Lambda

AWS S3 sends events to EventBridge or an AWS Lambda function. Unfortunately, EventBridge rules do not directly allow filtering by object size. However, you can configure an AWS Lambda function to process events and apply filtering based on size.

Demystifying AWS KMS

Sun, 19 Jan 2025 09:56:41 +0100

I. Introduction to AWS KMS

A. What is AWS KMS?

AWS KMS, short for Key Management Service, is a fully managed service designed to simplify the creation, management, and control of encryption keys. Everytime encryption is mentioned in AWS services like EBS, S3, RDS, or SSM, AWS KMS is probably involved. This service integrates seamlessly with IAM and, of course, it also ensures robust access control and auditing through CloudTrail.

Learn AWS by Yourself? 10 Services to Know

Wed, 20 Nov 2024 09:56:41 +0100

Here are the 10 essential services to master to fully leverage AWS.

1. IAM (Identity and Access Management)

IAM is the AWS service that allows you to manage access to your account’s resources. It plays a crucial role in security by controlling who can do what on your cloud infrastructure. With IAM, you can create individual users or group multiple users into groups. You can also define roles that allow other AWS services to interact with each other.