The fix was using AWS WAF CAPTCHA and Cloudflare Turnstile. I wrote about how we diagnosed it, why the obvious defences failed, and how we solved it.
If you're running any public endpoint that triggers an email, this is worth a read: https://t.co/zq8sJ4R1Kc
Rate limiting is the first thing teams reach for against bot attacks. But attackers have adapted. distributed bots using residential proxies can spread requests across 200+ real IPs, each staying under your threshold. Your logs show nothing unusual. 🧵
That's exactly what happened to us. Rate limiting didn't catch it, as every request looked legitimate. By the time the aggregate told the story, our email sender reputation was already taking damage.
Just published this article on importing manual AWS resources into the Serverless Framework Stack
Worth a read if you are doing IAC work: https://t.co/GzbRjxt8PF
Just passed the AWS Certified DevOps Engineer – Professional exam!
Definitely a tough one; long, complex questions that really test your real-world AWS experience.
On to the next one 🚀
https://t.co/yGhPboz8ra
Many teams start with S3 + CloudFront, then later move marketing pages or blogs to Webflow.
Making both work on the same domain isn’t very straightforward.
I wrote about how to do it cleanly using CloudFront path-based routing:https://t.co/u56VWE4OSZ
Engineers, build this habit; type out URLs of important apps (like your cloud console or NPM) instead of clicking links from emails.
Phishing is smarter than you think 💯
@abioyepelumi363 How are you thinking about this Abdul? I don't think microservice would necessarily solve the AWS downtime. If the core function is also deployed in the AWS region that was down, the application will be down too.
Over the past few years, I’ve had the chance to work on multiple DevOps projects.
I reflect on that journey and write an article highlighting some of the most interesting of them and the lessons learnt.
You can read it here: https://t.co/9ywC40dtO8
😂I raise you DevOps
one time after sprint demo, designer was praising FE for pixel perfect work, frontend thanking BE for amazing api doc, BE praising FE and designer say it was nice working with them. I was like guys "I'll put off the prod env" as nobody remember infra 😂