Re:Mistakes I've Made in AWS
by zrail on Saturday September 11, 2021 @08:13AM
(#28491325)
Curious what your issue was with Lambda and VPCs. We use that combo all the time where I work and it's fine as long as you have the IAM roles correct.
[ Parent
| on HN ]
Re:Mistakes I've Made in AWS
by Ancapistani on Saturday September 11, 2021 @01:17PM
(#28493735)
Ah, that’s the issue, at least for me - IAM roles are pretty nuanced, and it’s difficult to understand all that’s happening.
I’m working extensively with EventBridge now, and their “security” docs mix “what can access EventBridge” with “what EventBridge can access”. Also, different AWS services all seem to have different requirements - e.g, some are role-based, some are service-based, and some are resource-based. It gets complicated very quickly.
Re:Mistakes I've Made in AWS
by selfhoster11 on Saturday September 11, 2021 @04:39PM
(#28495723)
Lambda had some gotchas around the warm-up time the last time I used it to implement something. We had to have some extra workarounds to prevent the functions from going "cold".
Don't get me wrong, I'm a Lambda fan. But unlike EC2/EBS/etc, talking to some AWS services from a Lambda that's inside a VPC requires additional infra and you have to pay for the egress. In the end it just wasn't worth the price for us. It was a bad surprise money-wise.