The AWS Developers Podcast

In this episode of the AWS Developers Podcast, Seb speaks with Peter Lavelle and Edward Sun about Twilio, and the complexities of authorization in cloud applications. They discuss the evolution of Twilio Flex, the challenges faced in implementing a sophisticated authorization model, and the decision-making process behind choosing between graph-based and policy-based authorization systems. The conversation also highlights the benefits of Amazon Verified Permissions (AVP) and the Cedar Policy Language, emphasizing the importance of decoupling authorization logic from business logic for better scalability and maintainability. This conversation delves into the implementation and benefits of AWS Verified Permissions (AVP) and the Cedar policy language. The speakers discuss the Quick Start experience for users, the challenges of policy-based systems, and the importance of automated reasoning in policy verification. They also explore metadata management, the flexibility of local versus central evaluation in authorization, and the implementation timeline for Twilio's use of AVP. The discussion highlights the growing adoption of these technologies and their potential future applications.

With Peter Lavelle, Principal Software Engineer, Twilio ; With Edward Sun, Solution Architect, AWS

Twilio

Google Zanzibar

Amazon Verified Permission

Cedar: Learn about the language, tutorial and playground

AWS blog: How we designed Cedar to be intuitive to use, fast, and safe

AWS blog: Authorize API Gateway APIs using Amazon Verified Permissions

In this episode of the AWS Developers Podcast, Julian Wood hosts a discussion with Marc Brooker, a distinguished engineer involved in the creation of AWS Lambda. They explore the origins of Lambda, its evolution, and the impact of serverless technology on modern computing. The conversation delves into customer-centric innovations, the challenges of event-driven architectures, and the future of serverless in the context of generative AI. Mark reflects on the journey of Lambda, the lessons learned, and the exciting possibilities that lie ahead for serverless technology.

With Marc Brooker, VP/Distinguished Engineer, AWS ; With Julian Wood, Developer Advocate, AWS

AWS Lambda

Firecracker microVM

How Lambda loads data from the block devices

In this conversation, Vadym Kazulkin discusses AWS Lambda Snap Start, a feature designed to reduce cold start latency for Java applications in AWS Lambda. The discussion covers the challenges of cold starts, how Snap Start works, its impact on performance, and optimization techniques such as priming. Kazulkin shares insights from his extensive benchmarking and the implications for developers using AWS Lambda. The discussion also touches on challenges developers may face when using Snap Start, particularly in relation to randomness and caching mechanisms. Kazulkin encourages developers to revisit Java on Lambda with the new optimizations available, highlighting the evolving landscape of serverless computing.

With Vadym Kazulkin, Head of development at ip.labs

The first of 26 articles about Lambda SnapStart benchmarking

AWS Lambda Snap Start for Java functions

AWS Lambda cold start

Firecracker microVM

Impact of latency on revenue

AWS CRT

How Lambda loads data from the block devices

In this episode of the AWS Developers Podcast, Seb and Arthur discuss the Graviton processors and the Arm64 architecture. They explore the evolution of AWS's custom hardware, the benefits of adopting Arm architecture for AWS and developers, and the ease of porting applications to Arm64. The conversation also covers the challenges faced during migration, strategies for performance optimization, and the future of Graviton in AWS.

With Arthur PetitPierre, Solution Architect, AWS

AWS Graviton

Arm64 migration guide

Java Native Interface (JNI)

In this episode of the AWS Developers Podcast, the hosts discuss trusted identity propagation with Joseph De Clerck and Raphael Koike. Trusted identity propagation (TIP) allows organizations to propagate the actual user identity downstream to AWS services. It enhances IAM roles with the actual user identity, enabling fine-grained access control and simplifying IAM role management. The benefits of TIP include improved security posture, fine-grained access control, simplified user experience, and support for various OAuth 2.0 flows. Services that currently support TIP include Lake Formation, S3 Access Grants, Redshift Query Editor, EMR Studio, Athena, and Amazon QuickSight.

With Joseph de Clerck, ProServ Consultant, AWS ; With Rafael Koike, Solution Architect, AWS

IAM Identity Center

Trusted Identity Propagation

Integrate Tableau with Trusted Identity Center

In this episode of the AWS Developers Podcast, Seb and Brooke are joined by Massimo Refere, a senior principal product manager in the Amazon Q team. They discuss how generative AI can help developers and introduce Amazon Q Developer, a generative AI assistant for work. They explore the different capabilities of Amazon Q Developer, including troubleshooting, coding assistance, and task assignment. They also discuss the conversational coding experience and the ability to customize models based on an organization's codebase. The episode concludes with a discussion on how developers can get started with Amazon Q Developer. The conversation covers topics such as the overlap between Q business and Q Developer, customization and personalization, the challenges of demoing customizations, the minimum amount of code required for customization, evaluating customized models, data security and protection, and the future direction of Amazon Q Developer.

With Massimo Re Ferrè, Director, Product Management, AWS ; With Brooke Jamieson, Developer Advocate, AWS

Amazon Q Developer

Amazon Q Developer pricing and tier of services

Amazon Q Developer customization for enterprises

In this week's episode, we dive deep into the world of AWS Identity Center and explore how it changed workforce identity access management within the AWS ecosystem.

Join us as we discuss the key differences between IAM and Identity Center, unraveling how this powerful service is specifically designed to manage human user access to AWS accounts. Discover the diverse use cases for Identity Center, from managing employee access to AWS accounts to providing seamless access to various AWS applications.

We'll discuss the importance of choosing the right region and seamlessly integrating with your preferred identity providers. Additionally, we'll shed light on common pitfalls and scenarios to be aware of when leveraging Identity Center.

With Joseph de Clerck, ProServ Consultant, AWS ; With Roberto Migli, Solution Architect, AWS

IAM Identity Center

Renaming of AWS SSO to IAM Identity Center

System for cross-domain identity management (SCIM)

In this episode, we dive deep into the world of AWS certifications, specifically the prestigious Solutions Architect - Professional exam. Join us as we interview Patrick, a seasoned solution architect with extensive experience in preparing for and passing this challenging certification.

Patrick breaks down the key differences between the Associate and Professional levels, emphasizing the advanced knowledge and experience required for the latter. He shares valuable insights into the four domains covered by the exam: designing for organizational complexity, designing for new solutions, continuously improving existing solutions, and accelerating workload migration and modernization.

We explore the intricacies of the exam format, including the types of questions, time management strategies, and the importance of understanding the AWS Well-Architected Framework. Patrick also discusses the best resources for exam preparation, such as official AWS documentation, practice exams, and his own book, 'AWS Certified Solutions Architect Professional Exam Guide.'

Whether you're a seasoned AWS professional looking to advance your career or just starting your cloud journey, this episode offers invaluable guidance on how to tackle the AWS Certified Solutions Architect - Professional exam and achieve your certification goals.

With Patrick Sard, Solution Architect, AWS

Patrick's book to get prepared for the AWS SA Pro certification : AWS Certified Solutions Architect - Professional Exam Guide (SAP-C02): Gain the practical skills, knowledge, and confidence to ace the AWS (SAP-C02) exam on your first attempt

The AWS Solution Architect Professional exam details

A free course on SkillBuilder to study the AWS Architect Professional exam

In this episode of the AWS Developers Podcast, Seb and Brooke Jamieson interview Halim Qarroum, the head of application prototyping at AWS, about the document processing pipeline. They discuss the concept of a document processing pipeline, the typical use cases for processing documents, and how Lake Chain, an open-source framework developed by Halim and his team, simplifies the process of building document processing pipelines. They also explore the architecture of Lake Chain, including the use of SQS and SNS as the messaging system, and the integration of various AWS services and open-source machine learning models. The episode concludes with a discussion on future plans for Lake Chain and how developers can contribute to the project.

With Halim Qarroum, Manager, Application Prototyping ; With Brooke Jamieson, Developer Advocate, AWS

Lakechain, a framework to implement and deploy your document processing pipelines.

Werner's video about the Cloud Development Kit (CDK)

The Cloud Development Kit (CDK)

AWS Developers Podcast episode 126: Domain-driven design for cloud automation

In this episode, we delve into the world of database performance optimization with Scott Lynn, product manager for Amazon RDS.

We discuss the essential factors that can significantly impact your database performance, ensuring your applications run smoothly and efficiently. We explore effective strategies for scaling your relational databases to meet growing demands and maintain optimal performance.

We also delve into the differences between provisioned IOPS, General Purpose SSD, and magnetic drives, helping you determine the best storage option for your specific workload. Discover why io2 Block Express storage is the ideal choice for demanding databases that require high performance and low latency.

Join the discussion as we weigh the pros and cons of using self-managed databases on EC2 versus fully managed databases on RDS.

Don't miss this informative episode! Tune in to learn how to optimize your database performance and achieve maximum efficiency with Amazon RDS.

With Scott Lynn, Product Manager, Amazon RDS

RDS Storage options