Aws on Daniel Ancuta

Ditching CloudWatch Logs for CloudTrail: How I Cut CloudWatch Costs by Over Half on a Recent Project

Sat, 22 Aug 2026 00:00:00 +0000

If you’ve ever set up CloudTrail and just… left the default CloudWatch Logs integration running, you’re probably paying more than you need to. I know I was.

The setup is almost too easy - CloudTrail ships events to a CloudWatch log group, you get a unified place to search logs, maybe you wire up a few metric filters for alerts. Done. Except the bill quietly grows every month and you don’t really notice until you actually look at it.

Serving static pages on AWS with Amplify

Tue, 15 Apr 2025 00:00:00 +0000

After creating branding for your static website - layout, logo, typography, content, and so on - serving it should be easy, right?

But often, it’s overcomplicated. You think about a custom solution for the engine, look at WordPress, and realize it’s overkill for what you need.

Protect Sensitive Data in Logs with AWS CloudWatch Data Masking

Wed, 12 Mar 2025 00:00:00 +0000

Logging is part of every application, at least they should, but often logs contain sensitive information.

PII (Personally Identifiable Information), PHI (Protected Health Information), and other confidential data often end up in logs - often unintentionally. Storing raw, unmasked logs can lead to compliance violations (GDPR, HIPAA, SOC 2), security risks, and data exposure if logs are misused.

GitHub Actions: Security Hardening With OpenID Connect

Thu, 06 Mar 2025 00:00:00 +0000

The easiest way to configure your CI/CD pipeline with AWS is to just create long-lived credentials, access and secret key, and store them in GitHub Actions.

While this method works, it has several security risks:

Secrets Management in AWS: Using Secrets Manager

Sat, 01 Mar 2025 00:00:00 +0000

Sharing secrets across microservices creates security risks. Not only when one of the microservices is compromised, as then during rotation of single secret all of your microservices will be affected. Leading to potential downtimes.

Update AWS CloudFront configuration using AWS CLI

Tue, 18 Jun 2024 00:00:00 +0000

Regardless of whether you just need to make a quick manual change or it’s part of your CI/CD process, AWS CLI can be very useful for both scenarios.

Let’s dig into updating AWS CloudFront with AWS CLI!

AWS Amplify Override Amplify-generated resources. On example with resolvers.

Wed, 17 Jan 2024 00:00:00 +0000

AWS Amplify is a great tool when you’re building web and mobile apps, and you want to integrate them easily with the backend.

In a few simple steps, you can have a working GraphQL endpoint, storage on the backend, authentication, and authorization through Cognito.

Protocol Buffers RPC calls through WebSockets on AWS Lambda with API Gateway

Thu, 04 Jan 2024 00:00:00 +0000

We might argue about what is the important aspect of good communication.

But what are the few basic principles of communication where, at least, two parties will understand each other? Use of the same Glossary, happens in Real Time and uses Same language.

Strategies to Migrate Users to AWS Cognito Pool

Thu, 01 Jun 2023 00:00:00 +0000

If you work in the AWS ecosystem, sooner or later, you will deal with AWS Cognito.

AWS Cognito is meant to help you with customer identity and access management.

So you’ve decided to use AWS Cognito for the first time, or you’ve used it already. In both cases, you might want to migrate your existing users from either a legacy system or one Cognito Pool to another.