u/CybrSecOps

Off topic, but what do you use to manage your Lambdas? Do you use AWS CDK / Terraform / SAM etc?

I tried asking what is AWS Cognito (and Amazon Cognito and just Cognito). It didn't even try to answer.

The compute scales down to 0. We all know you pay for storage. It's not scaling to $0

Shame Serverless Framework will be a paid product in Q1 or Q2 next year... They have served us well for application IaC.

Universal Blue (Fedora Silverblue).

I know lots of people complain about it, but I've been happy with GoDaddy and Namecheap for my personal domains.

Business domains are also purchased through GoDaddy.

Although we purchase the domains through these services, we still manage DNS in AWS Route53

Others have been saying how they don't believe to be in violation of the license if they were to upgrade. Do you believe Gruntwork's current usage would violate the license?

Thanks.

Is what u/lolklolk correct too, in that it's not just about my mailservers supporting TLS, but also all of the mailservers of the services and clients we may have?

If a client of yours is having a major security incident, they should be made aware.

Who cares if the client is sent an email. At least you're doing your best to resolve the incident.

Before going for DMS, take a look at pg_logical replication. We wasted over a month trying to get DMS to succeed without data loss with no luck. We switched to native postgres logical replication and could migrate in about a day

Crap. No question mark... That's embarrassing!

Lambda will likely be cheaper as AWS have a generous free tier.

With Lambda, you're charged per invocation, but Fargate you're paying for the resources while the Slackbot is inactive.

The SPF, DKIM and DMARC changes can likely be done at any time before the MX record switch. You can keep both Google and Microsoft values here for a while after the migration too.

https://dontasktoask.com/

For the most reliability, you can split the microservices.across multiple AZs and regions. If you want to go above and beyond, multi cloud.

If you run across GCP and AWS, the likelihood of both being offline at the same time is nearly zero. You need to assess the complexity though.

I think it's about $5 per user

We've switched from OpenVPN Access Server to OpenVPN Cloud and it integrates with SAML for on/offboardimg well.

Is it OpenVPN Access Server? Or the regular OpenVPN server? Only AS has a web console

It looks like you have a lot of Ops knowledge, but not so much on the Dev side.

I think you should learn a programming language - something widely used like Python or JavaScript/NodeJS. Also get to grips with some of the development tooling and practices like Git, Agile and SOLID principles.

Thank you. That's great to know.

I assume the maintenance window is the same no matter what type of subnet you host it in?

And there's no drawbacks to having a cluster without internet egress?