Summary of AWS blogs for the week of monday Mon Apr 3

In the week of Mon Apr 3 2023 AWS published 61 blog posts – here is an overview of what happened.

Topics Covered

Official Machine Learning Blog of Amazon Web Services

Using AWS Services to Improve Airport Baggage Handling Systems, Voice Chat Security, and More

Deploy a Predictive Maintenance Solution for Airport Baggage Handling Systems with Amazon Lookout for Equipment

Probably everyone has checked their baggage when flying, and waited anxiously for their bags to appear at the carousel. Successful and timely delivery of your bags depends on a massive infrastructure called the baggage handling system (BHS). This infrastructure is one of the key infrastructure components in any airport’s operations. Many airports are now looking to optimize availability and minimize downtime through predictive maintenance.

Moulham Zahabi from Matarat has co-written this post to show how to use Amazon Lookout for Equipment to deploy a predictive maintenance solution for airport baggage handling systems. Amazon Lookout for Equipment helps to detect and diagnose anomalies in equipment operations based on data collected from Internet of Things (IoT) sensors. It does this by combining metrics from all equipment signals and leveraging ML models, which learn from equipment signals to detect faults.

Amazon Lookout for Equipment also provides a fault tree-based approach to identify the root cause of equipment failures. It then provides recommendations for maintenance teams to address the root cause and resolve the issue, helping minimize downtime and improve availability.

Modulate Makes Voice Chat Safer While Reducing Infrastructure Costs by a Factor of 5 with Amazon EC2 G5g Instances

Carter Huffman, CTO and Co-founder at Modulate, has written this post to show how they are using Amazon EC2 G5g instances to reduce infrastructure costs by a factor of 5 while making voice chat safer. Modulate is a Boston-based startup on a mission to build richer, safer, more inclusive online gaming experiences for everyone.

The Modulate team is using Amazon EC2 G5g instances to reduce latency and increase throughput for their real-time voice chat system. By leveraging the AWS Nitro System, the Amazon EC2 G5g instances give Modulate the performance they need to support their large user base.

Modulate is also using Amazon Rekognition to detect real and live users and deter bad actors. It does this by matching the user’s face in a selfie captured by a device camera with a government-issued identity card photo or pre-established profile photo. Additionally, Modulate is using Amazon SageMaker to transform their retraining MLOps pipelines and build Streamlit apps.

Secure Your Amazon Kendra Indexes with the ACL using a JWT Shared Secret Key

Organizations have difficulty accessing critical business data dispersed among various content repositories in a streamlined and cohesive manner. Amazon Kendra is an enterprise search service that makes it easier for businesses to access this data. However, organizations must secure their Amazon Kendra indexes with an access control list (ACL) using a JWT shared secret key.

Using JWT tokens, Amazon Kendra can authenticate the identity of a user or an application. It then matches the user’s or application’s identity with an ACL associated with the index. If the identity matches an entry in the ACL, Amazon Kendra grants access to the index. Additionally, JWT tokens expire over time and must be renewed, so organizations can control access to their Amazon Kendra indexes.

How Games24x7 Transformed Their Retraining MLOps Pipelines with Amazon SageMaker

Hussain Jagirdar from Games24x7 co-wrote this post to explain how the company is using Amazon SageMaker to transform their retraining MLOps pipelines. Games24x7 is one of India’s most valuable multi-game platforms and entertains over 100 million gamers across various skill games.

Using Amazon SageMaker, Games24x7 was able to quickly launch the familiar RStudio integrated development environment (IDE) in a managed Amazon SageMaker environment. This allowed them to easily monitor training jobs and track model performance. Additionally, they created a secure and flexible MLOps platform using Amazon SageMaker Pipelines, which enabled them to run PySpark processing jobs within a pipeline.

Moreover, Games24x7 was able to use the Amazon SageMaker JumpStart feature to inpaint images with Stable Diffusion models. They also deployed large language models on AWS Inferentia2 using large model inference containers.

KeyCore Can Help

KeyCore provides both professional services and managed services to help customers maximize their AWS investments. Our Advanced AI writers can provide highly technical details and/or references to AWS documentation or code snippets in CloudFormation YAML or AWS API Calls using Typescript and AWS SDK for JavaScript v3.
We can also help you build, train, debug, deploy, and monitor your models and manage your machine learning (ML) workflows with Amazon SageMaker.
Additionally, we can assist you in securing your Amazon Kendra indexes with the ACL using a JWT shared secret key.

Contact us today to learn more about how KeyCore can help you use AWS services to improve airport baggage handling systems, voice chat security, and more.

Read the full blog posts from AWS

Announcements, Updates, and Launches

AWS Summit Season – Week in Review

The week started with the AWS Summit season opening in Sydney and Paris. Over nine thousand customers and partners attended the Paris summit to discuss and explore the latest AWS offerings and new features.

AWS Service Catalog and Terraform

The AWS Service Catalog team announced a new Terraform Provider for Service Catalog. The provider allows customers to use Terraform to create, update, and delete AWS Service Catalog products and portfolios like any other Terraform-managed AWS resource.

AWS Supply Chain

The AWS Supply Chain team released a new feature, Autonomous Inventory Replenishment. It allows customers to automatically replenish inventory in multiple locations based on a single forecast across their entire supply chain. This allows customers to better manage their overall inventory levels.

Lambda and Streaming Response

The Lambda team released a new feature, Streaming Response, which allows customers to stream the response of a Lambda function in real-time. This feature allows customers to build highly scalable applications that process and respond to large amounts of data in real-time.

Amplify Library for Swift

The Amplify team released a new library for Swift. The new library allows customers to use Swift to develop and deploy applications that leverage the Amplify framework. The library is designed to streamline the development process and make it easier for developers to build applications using Swift.

KeyCore and AWS Services

At KeyCore, we are committed to helping our customers realize the full potential of the AWS platform. Our team of certified AWS experts has extensive experience with all of the above services, and can help customers get started with setting up their AWS environment. Our managed services are tailored to meet the needs of our customers and ensure that their AWS environment is running smoothly and efficiently. Contact us to learn more about how we can help you get the most out of AWS.

Read the full blog posts from AWS

Containers

Amazon EKS Now Supports Kubernetes Version 1.26

The Amazon Elastic Kubernetes Service (EKS) team is delighted to announce their support for Kubernetes version 1.26. With this version, the team has recognized the diverse components the project contains and has honored the individuals who have contributed to the project.

Kubernetes Version 1.26 Features

Kubernetes version 1.26 provides a lot of new features. It allows you to use persistent local storage and includes several new resources for cluster operators. It has also improved support for applying annotations and labels to workloads.

Version 1.26 also allows you to use container images from multiple registries, including Amazon ECR. This gives you the flexibility to use multiple registries and integrate them with your existing infrastructure.

This version also adds support for Amazon Elastic File System (EFS) and Amazon Elastic Block Store (EBS). With this support, you can easily scale your applications and manage data with EFS and EBS.

Additionally, version 1.26 adds support for AWS Identity and Access Management (IAM) authentication, which gives you the ability to securely access your applications. You can also use IAM roles to limit access to specific resources.

How KeyCore Can Help With Kubernetes Version 1.26

At KeyCore, we provide both professional services and managed services for AWS users. Our team of experts can help you get started with Kubernetes version 1.26 so that you can take advantage of the new features. We can also help you scale your application and manage data with EFS and EBS.

We can also help you set up IAM authentication and roles so that you can securely access your applications. With our assistance, you can ensure that only authorized users are able to access the resources they need.

If you would like to explore the features of Kubernetes version 1.26 and learn more about how KeyCore can help, please visit our website at www.keycore.dk.

Read the full blog posts from AWS

AWS Smart Business Blog

Boosting Productivity and Saving Costs with AWS Support

Small and medium businesses (SMBs) are driving today’s innovation and economic growth. SMBs are engaging in research and development of new products and services, and some are even in the process of launching a new product or service. Additionally, many SMBs are adapting to new opportunities, such as digital transformation, to capture new opportunities presented by the evolving business landscape.

AWS Support, a suite of services for businesses of all sizes, can help SMBs optimize operations and navigate the complexities of cloud computing. AWS Support offers a variety of plans to fit the needs of any business, from startups to Fortune 500 companies.

Technical Support from AWS

AWS Support provides technical assistance from experienced professionals and access to AWS tools and resources. With AWS Support, SMBs can get help with troubleshooting and optimization issues, such as setting up and managing applications and databases, identifying and addressing performance and cost issues, and more.

AWS Support also has proactive services that help SMBs identify and resolve potential problems before they become major issues. These services include performance optimization, security and compliance best practices, and proactive monitoring.

Business Support from AWS

AWS Support also provides business-level assistance, including guidance on cloud adoption, best practices, and related services. AWS Solutions Architects and Consultants can help SMBs create and implement customized solutions, and provide advice on the best practices for leveraging AWS technologies.

Cost Savings with AWS Support

SMBs can save time and money by using AWS Support. With the ability to tailor plans to any business’ needs, AWS Support offers cost-effective solutions that can help SMBs optimize operations and reduce costs.

KeyCore’s Role in AWS Support

At KeyCore, we offer professional and managed services for AWS Support. Our experienced professionals can assist SMBs with their cloud adoption strategy, help them troubleshoot and optimize their applications and databases, provide guidance on best practices, and more.

We also offer managed services that provide proactive monitoring, performance optimization, and security and compliance best practices. With our services, businesses of all sizes can benefit from the advantages of AWS Support.

Read the full blog posts from AWS

Official Database Blog of Amazon Web Services

Understanding the Performance, Analysis and Deployment Benefits of Amazon Web Services

The official Database Blog of Amazon Web Services (AWS) contains a variety of articles related to the performance, analysis, and deployment of AWS. This article will summarize four articles from the blog and explain how KeyCore, the leading Danish AWS consultancy, can help with related services.

Understanding Amazon DynamoDB Latency

Amazon DynamoDB uses horizontal scaling to support tables of any size and provides single-digit millisecond performance for workloads of all sizes. Retail sites like Amazon.com make use of DynamoDB for shopping carts and workflow engines, but slow response times in processing orders can frustrate customers.

KeyCore offers managed services that focus on dynamic scalability and near real-time performance. Our certified AWS solutions architects can optimize DynamoDB to ensure it is configured correctly and that customers always receive the best performance.

Using CloudWatch Logs Insights with Amazon RDS for Oracle Log Files

Database engines log error messages, warnings, traces, and audit statements in order to improve database observability and monitoring. Amazon RDS for Oracle offers Multi-AZ deployment, which increases read capacity with two readable standby instances and improves transaction latency.

KeyCore provides professional services to help customers customize their Amazon RDS for Oracle database engine. Our team can help customers deploy Amazon RDS for Oracle Multi-AZ DB clusters, allowing customers to gain access to optimized read and transaction latency for their databases.

Deploying an Ethereum Development Environment with Amazon EC2 and Amazon Managed Blockchain

This article provides steps for deploying a cloud-based development environment for building, testing, and deploying smart contracts on the Ethereum Goerli testnet. It also explains how to manage a dedicated Ethereum full node using Amazon Managed Blockchain.

KeyCore offers professional services to help customers set up and deploy an Ethereum development environment using AWS. Our certified AWS solutions architects can help customers manage Ethereum nodes using Amazon Managed Blockchain and ensure the environment is configured correctly.

Introducing Optimized Reads for Amazon RDS for PostgreSQL

In March 2022, Amazon Relational Database Service (Amazon RDS) for PostgreSQL introduced a new Multi-AZ deployment option called Multi-AZ DB clusters. This deployment option increases read capacity and improves transaction latency, using local storage on purpose-built Amazon Elastic Compute instances.

KeyCore provides managed services to help customers optimize their Amazon RDS for PostgreSQL databases. Our team of certified AWS solutions architects can set up Multi-AZ DB clusters for customers, helping them to increase read capacity and optimize transaction latency.

Read the full blog posts from AWS

AWS Cloud Financial Management

AWS Split Cost Allocation Data: Unlock Cost Visibility of Amazon ECS and AWS Batch

Cost optimization is a key element of cloud financial management. AWS Cost and Usage Reports (CUR) provides much needed transparency into cloud costs and allow users to understand and optimize the cost and usage of their applications. Now, AWS Cost and Usage Reports is introducing AWS Split Cost Allocation Data, a feature that will allow users to track and allocate application costs back to individual business entities based on how shared compute and memory resources are consumed by their containerized applications.

What is AWS Split Cost Allocation Data

AWS Split Cost Allocation Data is now available for Amazon Elastic Container Service (Amazon ECS) tasks and AWS Batch jobs. It allows users to track their containerized application costs and make informed decisions about their compute and memory resource utilization. With AWS Split Cost Allocation Data, users can easily gain more visibility into their cloud costs and allocate application costs to individual business entities.

How to Opt Into and View Your Split Cost Allocation Data

AWS Split Cost Allocation Data is easy to opt into and view. All users need to do is to enable the feature in their AWS Cost and Usage Reports (CUR) settings and they will be able to view their containerized application costs. With AWS Split Cost Allocation Data, users can better understand their usage and cost of their applications and make more informed decisions on how to optimize their cloud costs.

How KeyCore Can Help

At KeyCore, we understand the importance of cost optimization and transparency. We offer both professional and managed services to help you get the most out of your cloud environment. Our team of AWS experts can provide you with the guidance and knowledge to optimize your cost and usage of your containerized applications. We can help you leverage AWS Split Cost Allocation Data to gain more visibility into your cloud costs and make more informed decisions on how to optimize your cloud costs.

Read the full blog posts from AWS

AWS Training and Certification Blog

AWS Training and Certification Blog: M&E Foundations & Mainframe Modernization

AWS for M&E Launches Free Digital Learning Badge

Amazon Web Services (AWS) has launched a free Learning Plan and Digital Badge for Media and Entertainment (M&E) for Direct-to-Consumer (D2C) and Broadcast Foundations. This Learning Plan prepares executives, professionals, and technologists for the AWS services and best practices applied to Broadcast and D2C workflows in the cloud.

Building AWS Mainframe Modernization Skills

Mainframe modernization is a critical component to achieving business objectives in many organizations. To assist customers and partners with building skills to support their mainframe modernization with AWS journeys, AWS has launched 10 self-paced courses. These courses are designed to equip the workforce with the diverse and complementary skillsets, such as mainframe, mainframe modernization, and cloud skills.

How KeyCore Can Help

KeyCore is the leading Danish AWS consultancy, providing both professional and managed services. Our highly advanced AWS consultants can help your organization with its AWS journey, offering assistance with mainframe modernization, CloudFormation, AWS API Calls, and more. From developing a strategic plan to executing and managing your AWS environment, KeyCore can help you make the most of your AWS journey. Contact us today to learn more!

Read the full blog posts from AWS

Microsoft Workloads on AWS

Know your AWS Options for Microsoft Windows Server 2012 End of Support

Windows Server 2012 and 2012 R2 will soon reach end of support (EOS) on October 10, 2023. This presents a unique opportunity for organizations to enhance Windows Server workloads in the cloud. In this blog post, we’ll take a look at the common pathways offered by AWS to help address the Windows Server end-of-support challenge, and discuss how you can use them to migrate, optimize, and modernize your workloads in order to take full advantage of the cloud and propel business innovation.

Migrating to the Cloud

Migrating your Windows Server workloads to the cloud is a great way to take advantage of the higher levels of scalability, agility, and efficiency offered by AWS. Protocols such as Server Migration Service (SMS) and AWS Application Discovery Service (ADC) can be used to assess, migrate, and modernize your existing Windows Server 2012 workloads, enabling you to quickly move these workloads to the cloud.

Optimizing for Performance

Optimizing performance is key to getting the most out of your Windows Server workloads in AWS. You can use a variety of AWS services to optimize performance, such as Amazon EC2 instance types, Amazon Elastic Compute Cloud (EC2) Auto Scaling, Amazon Elastic Block Store (EBS) volumes, Amazon Relational Database Service (RDS), and Amazon Elastic Load Balancing (ELB). Additionally, the AWS Database Migration Service (DMS) can be used to migrate and optimize data between on-premises databases and AWS databases.

Modernizing to Enhance Security, Resiliency, and Efficiency

Modernizing Windows Server workloads can help you take advantage of the latest features and security protocols offered by AWS. AWS provides a variety of tools and services that can be used to modernize your Windows Server workloads, such as Amazon EC2 Systems Manager (SSM), AWS Identity and Access Management (IAM), Amazon CloudWatch, Amazon VPCs, and Amazon GuardDuty.

KeyCore – Your Partner for AWS Migration and Modernization

At KeyCore, we provide both professional services and managed services to help you migrate, optimize, and modernize your Windows Server workloads. Our team of experienced AWS professionals can provide best-in-class guidance and assistance throughout the entire migration process, from assessment and migration to optimization and modernization. We understand the importance of getting the most out of your Windows Server workloads in AWS, and we have the knowledge and expertise to help you do that. Contact us today to learn more about how we can help you make the most of the cloud.

Read the full blog posts from AWS

Official Big Data Blog of Amazon Web Services

Amazon Web Services: How To Optimize Your Big Data Workloads

Organizations looking to maximize their big data workloads will find a lot of value in Amazon Web Services (AWS). With Amazon EMR on EKS, users can run Apache Spark workloads substantially faster and more cost effectively. Additionally, SANS Institute has been utilizing QuickSight to drive transformational security awareness maturity within organizations, while reference guides are available to build inventory management and forecasting solutions on AWS. This article will outline some of the ways you can use AWS to optimize your big data workloads.

Running Apache Spark Workloads with Amazon EMR on EKS

Amazon EMR on EKS provides a deployment option for Amazon EMR that allows organizations to run open-source big data frameworks on Amazon Elastic Kubernetes Service (Amazon EKS). With EMR on EKS, Spark applications run on the Amazon EMR runtime for Apache Spark. This performance-optimized runtime offered by Amazon EMR makes your Spark jobs run 5.37 times faster and at 4.3 times lower cost.

Using Amazon QuickSight to Drive Security Maturity

SANS Institute has been using Amazon QuickSight to drive transformational security awareness maturity within organizations. QuickSight is a business intelligence (BI) service that allows users to easily create and share interactive dashboards that include data from a variety of sources, including AWS services such as Amazon S3, Amazon RDS, and Amazon Redshift. SANS Institute uses QuickSight to help organizations gain insights into their organizational security posture, measure security maturity, identify vulnerabilities, and develop plans to remediate them.

Building Inventory Management and Forecasting Solutions on AWS

AWS offers reference guides to help organizations build inventory management and forecasting solutions. Inventory management is essential for any business that deals with physical products, as poor inventory management can lead to costly overstocking or stockouts. AWS provides the tools, services, and reference guides to help organizations create robust inventory management solutions that can be customized to meet their specific needs. Additionally, AWS also offers solutions to help businesses forecast demand, optimize inventory levels, and plan for unexpected events.

Amazon QuickSight Community 1st Birthday

Recently, the Amazon QuickSight Community celebrated its 1-year birthday. This community website is a great resource for business intelligence authors and developers, where they can ask and answer questions, stay up to date, network, and learn together about Amazon QuickSight. The community is a great place to get the latest insights and updates about Amazon QuickSight and other AWS services.

KeyCore and Our Big Data Offerings

KeyCore is the leading Danish AWS consultancy, providing both professional services and managed services. Our team of AWS experts is highly knowledgeable in AWS, and can help organizations better manage their big data workloads with AWS. Whether you need help with deploying Amazon EMR on EKS, utilizing QuickSight for security awareness, or building an inventory management system, KeyCore can help. You can learn more about KeyCore and our AWS services through our website, www.keycore.dk.

Read the full blog posts from AWS

Networking & Content Delivery

Networking & Content Delivery with AWS

Accelerate, protect and make dynamic workloads delivery cost efficient with Amazon CloudFront

The end user experience of any website or web-based application is highly dependent on the speed, security, and reliability of the content delivery network (CDN) it is served from. Amazon CloudFront can help improve the performance and security, while optimizing the cost of serving dynamic content from an Amazon Elastic Load Balancer (Amazon ELB), Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon API Gateway, or AWS Lambda to end users on the Internet.

By leveraging CloudFront’s global network of data centers, customers can benefit from faster delivery of content, improved security and scalability. CloudFront also helps to minimize costs by caching objects as close to the user as possible. This is done by routing end-users to the nearest CloudFront PoP (Point of Presence), which cuts down on latency and allows for dynamic content to be delivered faster.

Security is also improved when using CloudFront as it supports HTTPS by default and can help protect against DDoS attacks. Additionally, customers can configure CloudFront to reject requests from suspicious sources, which reduces the potential for malicious attacks.

Choosing the right health check with Elastic Load Balancing and EC2 Auto Scaling

Organizations often use Elastic Load Balancing (ELB) load balancers and Amazon EC2 Auto Scaling groups (ASG) to build scalable, resilient workloads. ELB health checks are designed to make these workloads more resilient to failures in the workload components behind the load balancer.

When setting up ELB and Auto Scaling, there are several important health check factors to consider. For example, how often should ELB health checks be performed? If too often, the ELB will unnecessarily move traffic away from instances that are still good. Too infrequently, and you run the risk of sending bad traffic to instances that have already failed.

There is also the question of which type of health check to use. The ELB and Auto Scaling services offer several options for this, including a TCP connection check, an HTTP/S connection, or an SSL connection. Depending on what your workload is, the choice of health check can vary, so it’s important to consider all the options and select the one that offers the best performance and reliability.

Inspecting network traffic between Amazon VPCs with AWS Cloud WAN

AWS Cloud WAN is a managed service used to build wide area networks that connect data centers, branch offices, and Amazon Virtual Private Clouds (VPCs) using AWS global infrastructure. When building with Cloud WAN, customers may choose to employ next-generation firewalls (NGFW) and intrusion prevention systems (IPS) to inspect network traffic and increase security.

Cloud WAN makes it easy to configure and deploy these security services across multiple VPCs. It can also help reduce the time it takes to scale network traffic, as well as provide access control, network segmentation and visibility into network traffic. Additionally, the service can be used to enforce compliance policies, such as PCI and HIPAA.

How KeyCore Can Help

At KeyCore, we understand that leveraging the full power of Amazon Web Services means managing a complex array of services and technologies. That’s why we offer both professional services and managed services to help customers get the most out of their AWS implementations.

We specialize in helping customers manage their networking and content delivery requirements using AWS. Our team of experienced AWS professionals can help you choose the right health checks and firewall services, deploy Cloud WAN, and accelerate, protect and make dynamic workloads delivery cost efficient with Amazon CloudFront.

Contact us today to learn more about how KeyCore can help you make the most of your AWS implementations.

Read the full blog posts from AWS

AWS Compute Blog

Implementing up-to-date Images with Automated EC2 Image Builder Pipelines

Amazon EC2 Image Builder provides an easy way to create and deploy customized Virtual Machine (VM) and container images on AWS or on-premises. This blog post will discuss how to use Amazon EC2 Image Builder to automate the process of building and updating custom images. It also explains the benefits of using Amazon EC2 Image Builder and how KeyCore can help to maximize its potential.

What is Amazon EC2 Image Builder?

Amazon EC2 Image Builder is a service that simplifies the creation and deployment of customized images. It combines the benefits of both the EC2 and AWS CodePipeline services to build and deploy images faster, while also ensuring they remain up-to-date and secure. EC2 Image Builder automates the creation of VM images and container images, as well as the provisioning of the required components. With this service, users can easily customize images to match their application and environment needs.

Advantages of EC2 Image Builder

One of the main benefits of EC2 Image Builder is its ability to automate the creation and updating of custom images. This helps users save time and effort when building images. Additionally, EC2 Image Builder automatically configures the necessary components, such as packages and operating system updates, to ensure the image is always up-to-date. By using EC2 Image Builder, users can also ensure that the images are secure and compliant with corporate and regulatory policies.

How KeyCore Can Help with EC2 Image Builder

KeyCore can help customers make the most of their EC2 Image Builder deployments by providing professional services and managed services. Our team of certified AWS professionals can provide best practices on configuring and managing EC2 Image Builder for customers’ needs. Our experts can also provide advice and assistance on building custom images and deploying them to EC2 instances in a secure and compliant way. Additionally, KeyCore offers managed services to ensure that EC2 Image Builder deployments remain up-to-date and secure.

Read the full blog posts from AWS

AWS for M&E Blog

AWS Introduces Virtual Live Remote Production Partner Acceleration Initiative for Media and Entertainment

The media and entertainment (M&E) industry is increasingly turning to the cloud to deliver end-to-end remote production workloads. This is due to a combination of new remote work norms, cost reduction goals, and the pursuit of new revenue streams.

AWS has launched the Virtual Live Remote Production Partner Acceleration Initiative to help customers and partners quickly transition to the cloud. The first step of the program is the launch of the AWS Media and Entertainment Competency to recognize partners with the expertise to provide cloud-native solutions for media and entertainment use cases. This competency recognizes AWS partners with the skills and experience to design, develop, and deploy solutions for broadcast media workflows, live streaming, media asset management, digital rights management, and more.

Next, AWS provides access to an array of M&E-focused services, including AWS Elemental MediaLive, a broadcast-grade video processing service that enables customers to easily set up and run live streaming video channels. AWS Elemental MediaLive supports live-to-VOD workflows, latency optimization, and the ability to ingest and transcode up to 8K video streams.

Additionally, AWS is introducing the AWS Media and Entertainment Accelerator, which helps customers run their video processing workloads in a cost-effective and secure manner. This accelerator provides customers with the ability to quickly launch and operate their video processing workloads and provides a secure environment with built-in scalability and fault tolerance.

Finally, AWS is launching the AWS Video Accelerator Program to help partners build the skills and experience needed to design, develop, and deploy solutions for broadcast media workflows, live streaming, media asset management, digital rights management, and more. Through this program, partners receive customized guidance and support from AWS experts and access to the latest technologies and tools for optimizing video workloads.

At KeyCore, we understand the importance of staying up-to-date with the latest cloud technologies and services. Our team of expert consultants can help you get the most out of AWS services, such as AWS Elemental MediaLive, through comprehensive cloud migration and architecture consulting services. Moreover, our Managed Services Team can handle the day-to-day management of your cloud resources. Contact KeyCore today to learn more about how we can help you get the most out of your video processing workloads on AWS.

SmileShark Helps K-Pop Fans Keep Singing with Live Streaming on Amazon IVS

SmileShark, a Korean cloud consulting firm functioning as a Managed Service Provider (MSP), is devoted to optimizing clients’ cloud strategies and technologies via Amazon Web Services (AWS) products and services. To date, SmileShark has achieved more than 500 successful projects, including cloud migrations, architecture consulting, managed services, and cloud modernization, for prominent clients in various industries.

Recently, SmileShark helped K-Pop fans enjoy singing with live streaming on Amazon Interactive Video Service (IVS). Amazon IVS is a fully managed video streaming service powered by AWS that makes it easy to build video streaming applications that can be scaled up to millions of live viewers. It features a multi-region, high-throughput ingest infrastructure that enables customers to ingest and deliver video streams with low latency to their end-users.

To create an interactive singing experience for K-Pop fans, SmileShark used Amazon IVS to ingest, process, and stream live video from a remote camera. During the live stream, fans could interact with the singer by singing along in real-time. By streamlining the production process and minimizing latency, SmileShark was able to create an interactive K-Pop fan experience that was both entertaining and engaging.

At KeyCore, we understand the importance of providing an interactive and engaging experience for viewers. Our team of expert consultants can help you build customized video streaming applications with Amazon IVS. Moreover, our Managed Services Team can manage and optimize your video streaming workloads on AWS. Contact KeyCore today to learn more about how we can help you get the most out of Amazon IVS.

Read the full blog posts from AWS

AWS Storage Blog

Preserving Last-Modified Timestamps When Restoring S3 Objects with AWS Backup

Customers in highly regulated industries are subject to rules that require data integrity to be maintained and available across its entire lifetime. To meet integrity requirements, data must be restorable with an associated audit trail and metadata information, like object creation dates, last modified timestamps, and tags.

When restoring backups of Amazon S3 objects with AWS Backup, customers generally want to maintain last-modified timestamps, which is an essential part of their data integrity. In this article, we will discuss how to preserve last-modified timestamps when restoring S3 objects with AWS Backup.

Using AWS Backup to Restore S3 Objects

AWS Backup is a fully managed backup service that makes it easy to centralize and automate the backup of data across AWS services. It enables customers to create backup plans for backing up data to Amazon S3 and to assign tags and lifecycle policies to objects stored in S3.

When using AWS Backup to restore S3 objects, customers can choose from two options:

  • Copy: This option copies an existing object from a source S3 bucket to a destination S3 bucket and the original object remains unchanged with its original metadata.
  • Replace: This option overwrites the destination object with the source object, and the destination object inherits the source object’s metadata.

Preserving Last-Modified Timestamps When Restoring

When restoring S3 objects with AWS Backup, customers will want to preserve last-modified timestamps. To do this, they should use the Copy option when restoring and provide a new x-amz-metadata-directive header value of REPLACE.

This will ensure that the timestamp of the new object is the same as the timestamp of the old object. Additionally, customers can use the Replace option if they want to overwrite the destination object with the source object and inherit the source object’s metadata.

Conclusion

Preserving last-modified timestamps when restoring S3 objects with AWS Backup is important for customers operating in highly regulated industries. To maintain data integrity and meet their requirements, customers should use the Copy option when restoring and provide a new x-amz-metadata-directive header value of REPLACE.

At KeyCore, we understand the importance of maintaining data integrity and can help customers ensure data is restorable with all associated audit trails and metadata information. Our team of experienced AWS professionals can provide you with the right advice and guidance to meet your data integrity requirements. Contact us today to learn more.

Read the full blog posts from AWS

AWS Architecture Blog

Monitoring Production Systems at Scale and the Updated AWS Well-Architected Framework

“Everything Fails, All the Time”

Amazon’s Chief Technology Officer Werner Vogels states that software and distributed systems may eventually fail due to something going wrong. Designing systems accordingly, testing software and services, and thinking about all edge cases is necessary for success. An effective strategy is to monitor production systems at scale. This allows for understanding how the system is used, how its components interact, and how the system behaves in the event of a failure.

The AWS Well-Architected Framework

The updated AWS Well-Architected Framework helps customers evaluate and improve the design, implementation, and operations of their systems. It is composed of six pillars: Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimization, and Sustainability. These provide a set of best practices to build, operate, and maintain systems in the cloud. They also allow customers to drive better software development and increase efficiency.

KeyCore AWS Services

KeyCore provides professional and managed services to help customers leverage the AWS Well-Architected Framework. Our consultants are fully trained in AWS, allowing them to provide effective system and service designs, implementation, and ongoing support. We can also help optimize costs, mitigate risk and increase performance efficiency, so customers can focus on what they do best. Contact us to learn more.

Read the full blog posts from AWS

AWS Partner Network (APN) Blog

Modernizing Stateless Applications from On-Premises Containers to AWS with Matilda Cloud

Modernizing applications from on-premises containers to AWS can be a daunting task. The process of “stateless application modernization” can be especially tedious and error-prone. Fortunately, cloud architects and DevOps engineers are now turning to Matilda Cloud to help them in this process. Matilda Cloud supplies automated tools that accelerate the modernization process with powerful discovery capabilities and automated infrastructure as code tools.

By using Matilda Cloud’s comprehensive suite of services, cloud architects and DevOps engineers can reduce the time it takes to modernize stateless applications from on-premises containers to AWS. The service utilizes powerful discovery capabilities to help identify what can be migrated, and automated infrastructure as code tools help to ensure the process is accurate and efficient.

Once the stateless application has been identified and the modernized version is ready for deployment, Matilda Cloud provides DevOps engineers with the ability to create an Infrastructure as Code (IaC) template in their preferred format. This template can be used to quickly build a secure and compliant AWS cloud environment. Additionally, the service offers a comprehensive suite of services to help with the post-migration tasks, such as managing cost, ensuring security compliance, and ensuring the application is optimized for performance.

Accelerate Productivity with KONE Construction Time Use Solution on AWS

In the construction space, the use of buildings’ own elevators during the construction phase is common. However, this presents some challenges as the operating conditions of an elevator during construction are different from normal use. Studies from KONE, a global leader in the elevator and escalator industry, have shown that the first-year call-out rate of an elevator used during construction time can be twice as high compared to an elevator which has not been used in construction.

KONE has leveraged the power of AWS to create a solution called the KONE Construction Time Use Solution. This solution helps customers manage elevators during the construction phase of any project. Data collected during the construction phase is maintained on the AWS public cloud which allows customers to access information on demand. Furthermore, the solution utilizes a combination of the AWS IoT platform and KONE’s proprietary analytics to provide customers with insights and predictions on elevator performance.

The solution also allows customers to establish rules-based maintenance plans and schedule preventive maintenance tasks in order to ensure maximum performance and reduce call-outs. This helps to optimize the construction process and reduce time spent on maintenance and repairs.

How AWS Partners Are Creating New Revenue Streams with VMware Cloud on AWS

VMware Cloud on AWS is helping customers—including enterprises, government entities, and startups—migrate to the cloud quicker, and at a lower cost than with other solutions. According to VMware, customers can realize savings of up to 46% faster migration and 43% lower five-year costs.

For AWS partners, this means the potential to create new revenue streams. By creating a VMware Cloud on AWS practice, partners can see a 10-15% revenue lift in overall services revenue. Additionally, partners can grow their VMware Cloud on AWS practice through a range of professional services, managed services, modernization, and by expanding their customer base.

Partners can also take advantage of AWS funding and special offers to support their VMware Cloud on AWS practice. AWS has a variety of special offers, including the AWS VMC on AWS Migration Acceleration Promo. This allows partners to have AWS cover a portion of the expenses related to performing migrations for customers.

At KeyCore, our cloud experts can help customers to leverage the power of VMware Cloud on AWS. We offer a variety of professional and managed services that can help customers to get the most out of their cloud investment, including migration, optimization, and cost management. Our team of AWS certified engineers is ready to help with the process of migrating to, operating, and modernizing VMware Cloud on AWS. Contact us today to learn more about how we can help you make the most of VMware Cloud on AWS.

Read the full blog posts from AWS

AWS HPC Blog

Unlocking the Benefits of Computational Chemistry for the Circular Economy

What is the Circular Economy? The circular economy is an economic system, which is designed to be restorative and regenerative by aiming to keep resources in use for as long as possible. It works to minimise waste and reuse or repurpose materials instead of discarding them after a single use.

What is Computational Chemistry? Computational Chemistry is an area of research that uses computer simulations to understand and explore the properties of molecules and materials. It combines elements of mathematics and computing to explore the structure and reactivity of molecules.

How Can Computational Chemistry Help the Circular Economy? Using computational chemistry can help us identify new materials, better understand their properties, and use this information to create a more efficient and sustainable circular economy.

There are several ways this can be achieved. For starters, computational chemistry can help to reduce the amount of waste generated. By running simulations to determine the properties of materials, it can help identify which materials are most likely to be reused or repurposed. This can help companies to use materials more efficiently and reduce the amount of waste they need to dispose of.

Additionally, computational chemistry can help to discover new innovative materials that are better suited for reuse. By understanding the properties of molecules, researchers are able to identify which molecules can be used to create new materials that can be used in a variety of applications. This reduces the need for new materials to be created and helps to create a more efficient and sustainable economy.

Finally, computational chemistry can be used to identify the most sustainable processes for reusing and repurposing materials. By simulating how materials react in different environments, it can help to identify the best ways to reuse materials and ensure that the resources are used in the most efficient way possible.

How Can KeyCore Help? KeyCore is a leading AWS consultancy and can help your business to unlock the potential of computational chemistry and the circular economy. We have extensive experience in designing and deploying systems and solutions based on AWS and have the expertise to help your business get the most out of computational chemistry. We also offer a range of managed services, which can help to make sure your systems always remain up-to-date and secure. Contact us today to get started.

Read the full blog posts from AWS

AWS Cloud Operations & Migrations Blog

Using AWS Control Tower for Automated Account Customization

AWS Control Tower enables customers to build a secure and compliant foundation for their workloads in the cloud. With this foundational structure in place, customers can quickly create and manage multiple isolated accounts within their organization, supporting their growing needs.

Account Factory Customization

Account Factory Customization is a feature within AWS Control Tower that allows customers to automate the look and feel of new accounts as they are created. With this feature, customers can quickly apply and manage consistent security and operational standards across each account life cycle in their organization.

Using Account Factory Customization, customers can define a ‘template’ that new accounts follow, ensuring that the same security and operational requirements are met each time a new account is created. This allows customers to quickly configure and maintain consistent standards across their accounts.

Benefits of Account Factory Customization

Account Factory Customization allows customers to quickly apply consistent security and operational standards to their AWS accounts. This increases productivity as customers do not have to manually configure each account, allowing them to focus on other tasks. It also ensures greater operational efficiency and security as customers can be certain that their accounts are meeting their standards.

In addition, Account Factory Customization allows customers to better manage their accounts. Customers can quickly configure and apply consistent settings to their accounts, as well as easily manage any changes across their accounts. This provides customers with greater control and flexibility when managing their accounts.

How KeyCore Can Help

At KeyCore, our experienced consultants can help customers with their AWS Control Tower setup and configuration. We can provide guidance on customizing accounts using Account Factory Customization, as well as help customers set up their accounts to meet their security and operational requirements. We can also provide support in managing their accounts and applying any changes across their accounts.

With our expertise in AWS, we can help customers quickly customize their accounts and ensure that their accounts are consistently meeting their standards. Contact us today to learn more about our services and how we can help you.

Read the full blog posts from AWS

AWS for Industries

AWS for Industries: Optimizing for Efficiency and Security

The cloud presents an opportunity to reduce complexity, improve efficiency, and accelerate innovation. Financial services companies, however, face unique challenges due to the compliance and security requirements of the industry. Excelfore, Xcel Energy, Acxiom, and Capital One all recognize the potential of the cloud, but have needed to develop strategies to adopt cloud technologies and remain secure and compliant.

Capital One Optimizes for Productivity and Efficiency

In 2020, Capital One developed an innovative solution to optimize for productivity and efficiency while remaining secure and compliant. Through leveraging AWS services and solutions such as Amazon Virtual Private Cloud (VPC), Amazon ElastiCache, Amazon SageMaker, and AWS Lambda, Capital One was able to reap the benefits of cloud computing in a secure and compliant manner.

Excelfore Uses AWS Cloud to Develop and Deliver Software Updates

Excelfore has leveraged the AWS Cloud to develop and deliver continuous software updates for Software Defined Vehicles. For decades, software in vehicles has been embedded into proprietary hardware, and updating the software was a lengthy process requiring vehicles to be brought into service and updating firmware with legacy systems. Excelfore has used AWS services such as Amazon SageMaker, Amazon Elastic Container Service (ECS), and Amazon Simple Storage Service (S3) to streamline the development, delivery, and deployment of software updates.

AWS Backup Enables Data Protection

Financial services customers need to focus on data protection and security when using the cloud. AWS Backup is a service that can help secure the data of customers in the Financial Services Industry (FSI). AWS Backup enables customers to define and automate backup policies and quickly restore data when needed. It is a fully-managed service that provides centralized control and cost-effective protection for data stored in AWS services.

MongoDB and AWS for Digital Twin Solutions

MongoDB and AWS are well-positioned to provide digital twin solutions that create a digital copy of physical systems. Using MongoDB Atlas and AWS services such as Amazon Athena, Amazon EMR, and Amazon S3, customers can build reliable data pipelines that enable real-time streaming of data from a physical system to a digital twin. This enables customers to monitor the health of their physical systems and quickly identify and address issues.

Amazon Relational Database Service (RDS)

Financial services customers who run workloads on Amazon RDS need to focus on five key considerations: achieving compliance, data protection, isolation of compute environments, audits with APIs, and access control/security. Amazon RDS enables customers to set up, operate, and scale a relational database in the cloud with just a few clicks. By providing cost-effective, resizable capacity, and automating time-consuming administration tasks, Amazon RDS makes it easy for customers to focus on their applications instead of managing databases.

Acxiom’s Use of R-Based Machine Learning Models

Acxiom leverages R-based machine learning models, also known as propensity scores, to create customer intelligence. Acxiom partners with leading brands to facilitate data-driven marketing experiences and generate value for customers and brands. Acxiom makes use of AWS services such as Amazon Elastic Compute Cloud (EC2), Amazon Athena, Amazon Simple Queue Service (SQS), and Amazon S3 to power their machine learning models and deliver insights to customers.

Great MACH Runs on AWS

Retailers are turning to MACH (microservices-based, API-first, cloud-native software-as-a-service [SaaS], and headless) architecture to deliver fast and seamless experiences to customers. AWS services such as Amazon ECS, Amazon API Gateway, AWS Lambda, and Amazon Elasticsearch Service (Amazon ES) provide the building blocks to create a flexible and scalable MACH architecture.

Xcel Energy Migrates CI/CD to AWS Fargate

At Xcel Energy, legacy technology infrastructure and reliance on cloud-service contractors was limiting the benefits of digital development. By migrating their continuous integration and continuous deployment (CI/CD) process to AWS Fargate, Xcel Energy was able to achieve 60x faster deployments at 82x lower cost. AWS Fargate is a serverless compute engine for containers that enables customers to focus on their applications instead of managing infrastructure.

Firework Simplifies Live eCommerce with Amazon IVS

Shoppable video startup Firework is leveraging Amazon Interactive Video Service (IVS) to provide a more engaging shopping experience for customers. Amazon IVS is a managed live streaming service that enables customers to quickly and easily stream high-quality, interactive live video. With Amazon IVS, Firework is able to reach more customers and quickly scale their streaming capabilities with stability and reliability.

KeyCore: Leverage Our Experience with AWS for Industries

At KeyCore, we recognize the unique challenges faced by customers in the Financial Services Industry (FSI). Our team of experts provides solutions and services that leverage the power of the cloud, while helping customers remain secure and compliant. From providing data protection and security with AWS Backup to developing and delivering software updates with Amazon ECS, we have the expertise and experience to help customers succeed in the cloud. Contact us to learn more about how we can help you get the most out of AWS.

Read the full blog posts from AWS

AWS Messaging & Targeting Blog

Using BIMI with Amazon SES

Brand Indicators for Message Identification, or BIMI (pronounced “Bih-mee”), is an emerging email specification that allows brands to use their own logos within emails to help ensure their authenticity. This blog post will walk you through how to implement it when using Amazon SES.

What is BIMI?

BIMI stands for “Brand Indicators for Message Identification.” It’s a technical protocol that aims to provide a standardized way for email senders to authenticate their messages, and for email receivers to display the sender’s logo along with each email.

How Does BIMI Work?

The BIMI protocol works by allowing email senders to create their own custom logos and attach them to their emails. When a recipient of an email receives a message with a BIMI logo attached, their email client can validate that the logo is legitimate and display it. This allows the sender to visually authenticate their messages, while also providing helpful brand recognition to the receiver.

How to Setup BIMI with Amazon SES

Setting up BIMI with Amazon SES is a simple process. First, you’ll need to create a logo for your brand that meets the BIMI standard, which involves creating a SVG logo and hosting it on your website. Then, you’ll need to create a BIMI record, which includes the URL of your logo, and authenticate yourself as the owner of the website hosting the logo.

Once that’s done, you’ll need to add the BIMI record to your Domain Name System (DNS) settings so that your email client can access it. Finally, you’ll need to configure Amazon SES to use the BIMI record. This can be done by adding the BIMI record’s URL to your Amazon SES settings.

Benefits of BIMI with Amazon SES

Using BIMI with Amazon SES has several benefits. Firstly, it makes it easier for businesses to authenticate their emails, which can help increase their deliverability rate. Secondly, it helps boost brand recognition and trust with customers, since the logo appears alongside the email. Lastly, it provides a simple and cost-effective way to validate emails without the need for additional tools or services.

How KeyCore Can Help

At KeyCore, our team of AWS experts can help you set up BIMI with Amazon SES quickly and easily. We can help you create a logo for your brand that meets the BIMI standard, create a BIMI record and authenticate yourself as the owner, add the BIMI record to your DNS settings, and configure Amazon SES to use the BIMI record. Contact us today to learn more about how we can help you set up BIMI with Amazon SES.

Read the full blog posts from AWS

AWS Marketplace

Enhancing Web Application Security with AWS WAF and Cloudbric’s OWASP Top 10 Managed Rule Set

Maintaining web security from ever-changing new threats is a critical component of any application. One of the most effective ways to do this is by using an AWS Web Application Firewall (AWS WAF) with Cloudbric’s OWASP Top 10 Managed Rule Set. In this tutorial, Global Marketing Manager at Cloudbric Corporation, Yongwook Lucas Yoon, will show you how to implement this rule set and how it will enhance your application security.

What is the OWASP Top 10 Managed Rule Set?

The Open Web Application Security Project (OWASP) is an open source project that releases a list of the most critical security risks every year. The OWASP Top 10 Managed Rule Set is a set of rules that can be applied to your web application to block attacks, such as cross-site scripting (XSS), SQL injection, and more.

Subscribing to the Service and Implementing the Rule Set

The first step in implementing the OWASP Top 10 Managed Rule Set is to subscribe to the service. Cloudbric makes this easy with a simple subscription process. Once you have subscribed, you will have access to the rule set and can begin implementing it to your web application.

The next step is to configure the rule set in the AWS WAF. Cloudbric has made this process simple with a convenient web-based management console. From here, you can configure the rule set and create web access control lists (web ACLs) to block malicious traffic from reaching your application.

Maintaining Security with the Rule Set

Once you have implemented the rule set, it is important to regularly maintain it to keep your web application secure. Cloudbric provides continuous monitoring of the rule set and will notify you when threats are detected. This allows you to take immediate action to block the threats and maintain your web application’s security.

KeyCore’s Support Services

KeyCore provides a wide range of professional services that can help you implement and maintain the OWASP Top 10 Managed Rule Set. Our team of certified experts can help you set up the rule set and configure it in the AWS WAF. We can also help you create web ACLs to protect your application from malicious traffic. Furthermore, KeyCore’s managed services provide continuous monitoring of your application’s security to ensure it is never compromised.

By using the OWASP Top 10 Managed Rule Set and KeyCore’s professional and managed services, you will have the power to protect your application from ever-changing new threats.

Read the full blog posts from AWS

The latest AWS security, identity, and compliance launches, announcements, and how-to posts.

External Security and Identity Solutions from AWS

At AWS, we are committed to ensuring our customers’ data is secure and compliant with the latest industry regulations. To this end, we have a dedicated team of professionals who work to provide the best security, identity, and compliance solutions for our customers. In this article, we will cover the latest AWS security, identity, and compliance launches, announcements, and how-to posts.

AWS Security Profile Series

To help inform our customers on our security and identity solutions, we launched an AWS Security Profile series. In these interviews, we speak with experts from the AWS Security and Identity team to learn more about the solutions they provide. One such interview was with Matt Luttrell, Principal Solutions Architect for AWS Identity. During the interview, Matt described his role in the team, how they create identity solutions that are secure and user friendly, and how he likes to get creative with solutions.

Global AWS Data Processing Addendum

As part of our ongoing commitment to provide secure solutions for our customers, AWS is expanding the scope of the AWS Data Processing Addendum (Global AWS DPA). This addendum applies globally to any customer using AWS services to process personal data. It provides customers with detailed guidance on how to ensure their data is protected and compliant with the relevant data protection laws.

KeyCore AWS Security Services

At KeyCore, we are certified AWS Cloud Security professionals. We provide both professional services and managed services for AWS security, identity, and compliance solutions. Our team of experts can help you develop and implement a comprehensive security strategy, so you can be sure your data is secure and compliant with the latest industry regulations. We can help you create audit-ready solutions, so you can rest assured that you are meeting all security and compliance requirements.

Read the full blog posts from AWS

Business Productivity

NTT East Uses Amazon Chime SDK to Adapt to Digital Transformation

NTT East’s Digital Transformation

NTT East is a regional communication service provider that primarily provides internet connection services and mobile communication services. To keep up with the digital transformation, NTT East has to continuously adapt with the latest technologies. To do this, they are leveraging the Amazon Chime SDK to help with their digital transformation.

This blog post is written by Yoshio Nakamura at NTT East, and the content and opinions expressed are those of the third-party author. AWS is not responsible for the content or accuracy of this post.

Advantages of Amazon Chime SDK

The Amazon Chime SDK is a robust, developer-friendly software development kit (SDK) from Amazon Web Services (AWS). It includes a range of capabilities that help developers build rich video and voice experiences into mobile and web applications.

The Amazon Chime SDK can be used to create customer experiences that are tailored to customer needs and are consistent across devices. The SDK also provides a range of features that help developers build applications quickly and easily. With the Amazon Chime SDK, developers can start building applications with only a few lines of code.

How NTT East is Utilizing the Amazon Chime SDK

NTT East is leveraging the Amazon Chime SDK to build applications that can help them adapt to the digital transformation. They are able to use the SDK to create customer experiences that are tailored to customer needs and are consistent across devices. This helps them to keep up with the changes in the industry and stay ahead of their competition.

The Amazon Chime SDK allows NTT East to quickly build applications with only a few lines of code. They are also able to use the SDK to build applications that are secure and reliable. This helps ensure that their customers have a positive experience with their products and services.

How KeyCore Can Help

At KeyCore, we are an advanced AWS consultancy providing both professional services and managed services. Our team of AWS experts is highly knowledgeable in the Amazon Chime SDK and can help NTT East use the SDK to quickly build applications tailored to their customer needs. We can help ensure that the applications are secure, reliable, and consistent across devices.

Our team can also provide ongoing support and maintenance to help ensure that the applications are running smoothly. Contact us today to learn more about how we can help NTT East with their digital transformation.

Read the full blog posts from AWS

Innovating in the Public Sector

Innovating in the Public Sector with AWS

Public sector organizations have unique requirements when it comes to leveraging technology, both to deliver services and to manage their infrastructure. With AWS, they can access a wide range of services, including data analytics and machine learning (ML) tools, to help them innovate and keep up with the changing needs of the public sector. In this blog post, we’ll look at five examples of how public sector organizations are innovating with AWS.

Creating Satellite Communications Data Analytics Pipelines

Satellite communications (satcom) networks provide customers with performance metrics, such as signal-to-noise ratio (SNR) and bandwidth delivered by remote terminals, that can be used to detect network and terminal anomalies and identify trends to impact business outcomes. AWS provides serverless resources to build satcom control plane analytics pipelines that transform data to extract key performance indicators (KPIs) of interest, render them in business intelligence tools, and apply ML to flag unexpected SNR deviations.

Monitoring Energy Pipelines to Reduce Risks and Emissions

For energy infrastructure, Orbital Sidekick (OSK) uses AWS compute and analytics services to power its scalable data pipeline and imagery storage solution. This helps the energy industry protect pipelines and make them less vulnerable to risks such as leaks, contamination, and damage caused by construction and natural disasters. OSK delivers real-time, actionable insights to customers.

Data Security and Governance Best Practices for Education and SLG

Organizations within state and local government (SLG) and education must build digital environments and services that meet a variety of dynamic security and compliance considerations. AWS provides top-level best practices for using its Security Services to meet the needs of education and SLG organizations.

Protecting Transportation Agencies in the Era of Cybersecurity

The Transportation Security Administration (TSA) recently issued a new cybersecurity amendment for transportation agencies. It requires impacted entities to develop an approved implementation plan for improving their cybersecurity resilience and preventing disruption and degradation to their infrastructure. AWS can help transportation agencies support these four cybersecurity requirements and protect their organizations from cyber threats.

Preparing Students and Building Confidence for Lifelong Learning

Waterford.org is an early education nonprofit that provides personalized programs and support services for families and educators. To deliver these educational resources, Waterford.org uses AWS. AWS can help organizations like Waterford.org prepare students for lifelong learning and build a foundation of confidence.

At KeyCore, we understand that public sector organizations have unique requirements for leveraging technology. With our expertise in AWS, we can help public sector organizations access the services they need to innovate and keep up with changing needs. Contact us today to learn how we can help you succeed in the public sector.

Read the full blog posts from AWS

AWS Open Source Blog

Using Group Managed Service Accounts on Amazon Linux 2023 with AWS

Group Managed Service Accounts (gMSA) are an important tools for organizations that use Active Directory domain joined Linux servers. gMSA enables a single account to access a server or a group of servers. The credentials-fetcher daemon is an open source tool that allows gMSA to work on Amazon Linux 2 servers.

What Is Group Managed Service Accounts (gMSA)?

gMSA is a service account that can be used on multiple computers in an Active Directory Domain. gMSA allows for one account to be used to access multiple computers, reducing the need to manage multiple credentials. As a result, it can simplify day-to-day operations and provide better security when managing authentication credentials. gMSA is a Windows Server feature and is not available on Linux machines.

Credentials-Fetcher Daemon

The open source credentials-fetcher allows gMSA to be used on Amazon Linux 2. The credentials-fetcher daemon runs as a service on the Linux server and acts as a bridge between the Windows gMSA and the Linux applications. The credentials-fetcher daemon retrieves the gMSA credentials from the Windows Domain Controller and injects them into the Linux environment. As a result, applications running on the Linux server can authenticate using the gMSA credentials.

Using gMSA with AWS

Using gMSA with AWS requires setting up the credentials-fetcher daemon on the Linux server. The credentials-fetcher daemon is available as an open source project and is easy to set up. The installation requires creating a service account on the Windows Domain Controller, installing the credentials-fetcher service on the Linux server, and configuring the credentials-fetcher daemon to use the Windows service account.

Once the credentials-fetcher is set up, applications running on the Linux server can use the gMSA credentials to authenticate with AWS. This simplifies authentication and makes it easier to manage access to AWS resources.

How KeyCore Can Help

At KeyCore, we are AWS experts and can help you set up gMSA on Amazon Linux 2. We can provide professional services to help with the installation and configuration of credentials-fetcher and gMSA. We can also provide managed services to ensure that your gMSA setup is properly maintained and secure.

If you would like to learn more about how KeyCore can help with gMSA on Amazon Linux 2, please contact us today.

Read the full blog posts from AWS

Scroll to Top