Comments for Cloudar

Comment on Aws workspaces with multi-factor authentication by multiOTP

multiOTP — Sat, 15 Nov 2025 10:54:11 +0000

The latest version 5.10.0.3 (2025-11-04) is available (in open source as always) on https://github.com/multiOTP/multiotp

Comment on Connect to private resources from API Gateway with VPC Link by Ben Bridts

Ben Bridts — Mon, 26 May 2025 14:24:04 +0000

In reply to Shoff.

Yes,

To access private resources using a HTTP API: https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-develop-integrations-private.html
To access private resources using a REST API: https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-private-integration.html

Comment on Connect to private resources from API Gateway with VPC Link by Shoff

Shoff — Thu, 01 May 2025 07:03:41 +0000

Can you use VPC Link with both REST APIs and HTTP APIs in API Gateway?

Comment on Integrating Fail2Ban with AWS Network ACLs by Adam

Adam — Wed, 08 May 2024 15:15:43 +0000

fail2ban isn’t in the Amazon Linux yum repo, so this falls at the first hurdle

Comment on Undocumented feature: Using Template Constraint Rules in CloudFormation by Steve Kinsman

Steve Kinsman — Wed, 21 Oct 2020 04:05:25 +0000

Thanks for blogging that Ben, it’s always fun to play with new things in CloudFormation!

Comment on Using the Application Load Balancer and WAF to replace CloudFront Security Groups by Jorge

Jorge — Thu, 30 Apr 2020 12:20:55 +0000

Good post. Thanks for the tip.

Comment on Enabling Federation to AWS Using Windows Active Directory, ADFS and SAML by eijer

eijer — Wed, 22 Apr 2020 04:18:24 +0000

Hello,

Thank for informative article!

I would like to configure AWS Cognito to receive the user’s department name and user’s full name from ADFS. At this time, I would like to get help if you have experience in how to construct the Claims rule.

Comment on Windows servers patching with AWS EC2 Systems Manager by Rutger Beyen

Rutger Beyen — Mon, 06 Apr 2020 10:36:21 +0000

In reply to pradeep.

Hello Pradeep.

As far as my knowledge goes, there’s no such one-click solution available.
However, what we do here at Cloudar is running the SSM Maintenance Window task with the option “Enable SNS notifications” set to true. This will cause the results of the Maintenance Window to be delivered to an SNS topic. From this SNS topic you can either subscribe your email address, or a Lambda function which can further sanitize and cleanup the output according to your preferences, as by default you will get an ugly JSON.
Alternatively you can query your instance patch results using the CLI with ‘aws ssm describe-instance-patches’ or ‘aws ssm describe-instance-patch-states’.

Regards,
Rutger

Comment on Windows servers patching with AWS EC2 Systems Manager by pradeep

pradeep — Mon, 06 Apr 2020 09:43:44 +0000

Hi There,

Is there any way after scanning the instances, Could we get the result to our Inbox.
For example like only Non-complaint issues in a particular instance.

Comment on Multicast on AWS by Ben Bridts

Ben Bridts — Thu, 12 Dec 2019 11:55:43 +0000

In reply to Steve.

Hi Steve,

AWS released multicast support for Transit Gateway. If that covers your use case, I’d recommend using that: https://aws.amazon.com/about-aws/whats-new/2019/12/run-ip-multicast-workloads-aws-transit-gateway/

Since this solution uses an overlay network the scale will be limited by the performance of n2n. They try to use peer to peer connections, but your multicast traffic will eventually have to be sent over the underlying vpc network. I’d recommend doing a load test to make sure the performance matches your expectations.

If you want to load balance the supernode, you’d have to search the n2n documentation to see if that is possible.

Kind regards,
Ben