Some lesser known AWS facts: If you close an AWS account, the billing stops immediately, regardless of still provisioned resources in the account. You don't need to clean up the resources in the account manually. You won't get billed for the time after the account is suspended.

I have written ~800 technical articles/whitepapers in the last 10 years and they have been viewed millions of times. I see a lot of folks making the same mistakes I did early on in my journey. So here are some principles to help you get better at writing. 🧵

Serverless is great, but it's not a free lunch. The "serviceful" mindset means you'll need to learn and use many services in your architecture. Having the right tool to help you along can make a world of difference. And here are 7 of my favourites.

yay, I got invited to be an AWS Community Builder. Not entirely sure what I am getting myself into, but happy to be part of the program :). thanks Farrah C

new release, org-formation v1.0.4 🚀 - Support for ExcludeOrganizationalUnit in organization binding - Allow organization binding to be declared as parameter - Nunjucks support for copy-s3 tasks ...and more: github.com/org-formation/…

Ok now that AWS::Organizations::Account is available, that's another step towards "cattle" a.k.a. ephemeral AWS accounts, since accounts can now be created and closed(!) via declarative CloudFormation. Short test:

CloudFormation telling me "Update successful. One or more resources could not be deleted." is the worst thing ever. Is this a bug? can't imagine this is a feature! help! AWS CloudFormation

org-formation now supports terraform deployments! (as of v1.0.8). Contributed by Yannick van Rooyen 👏👏👏 github.com/org-formation/…

yay!

Calling all Security Hub and IaC geeks to join me at: github.com/org-formation/…

Set your BucketPolicy to retain in CloudFormation & keep your data secure even after a bucket failed deletion. see: github.com/aws/aws-cdk/pu…

I think what this world needs is an aws "control tower" formation

Security is job zero @Stedi. While building Stedi's RBAC system, our very own Ross Williams 🇬🇧 discovered an AWS access vulnerability in STS. We worked with AWS Security to report the issue (which is now resolved, and didn't affect Stedi customers). Full details in the blog.

Don't use custom resources, use resource providers!