--- title: "Service Level Arguments" id: "1424" type: "newsletter" slug: "service-level-arguments" published_at: "2019-01-08T01:01:24+00:00" modified_at: "2019-05-12T00:03:02+00:00" url: "https://www.lastweekinaws.com/newsletter/service-level-arguments/" markdown_url: "https://www.lastweekinaws.com/newsletter/service-level-arguments.md" excerpt: "Good morning and welcome to 2019! This is issue number 91 of Last Week in AWS. A short issue this week, as the AWS machine ramps back up. If you’re in Seattle and not doing anything Wednesday evening, I’m trying..." --- About the Author Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure. Sign up for the Newsletter Stay up to date on the latest AWS news, opinions, and tools, all lovingly sprinkled with a bit of snark. "*" indicates required fields [Good morning](https://twitter.com/QuinnyPig/status/1081304819745251328) and welcome to 2019! This is issue number 91 of ***Last Week in AWS***. A short issue this week, as the AWS machine ramps back up. If you’re in Seattle and not doing anything Wednesday evening, I’m trying my hand at “cloud standup.” Admission is free, (some) drinks are covered, but registration is required so we know what to plan for. Sign up at [TonightinAWS.com](https://tonightinsaws.com/) . Thanks to Polyverse for sponsoring the venue! ### Community Contributions A walkthrough of building a [Tram-Time Display with AWS Lambda](https://blog.rothe.uk/serverless-tram-time-display/) . The San Francisco BART system should talk to the author; they might learn a few things. After a year of trying it exclusively, I wrote up the [8 Things I’ve Learned Using an iPad for Presentations](https://lastweekinaws.com/blog/8-things-ive-learned-using-an-ipad-for-presentations.html) . Conference talks are fun, doing them without having to mess around with a laptop makes the experience better. The wonderfully-named [AWS Corey](https://medium.com/@coreysalzer/reflections-on-my-reading-journey-from-a-23-year-old-tech-nerd-20f50942ba5e) (not me; Corey Salzer is a San Francisco based Solutions Architect) writes about her journey to read more non-fiction books in 2018. Four Lambda Layers have been published, covering [FFmpeg, SOX, Pandoc and RSVG](https://serverless.pub/lambda-utility-layers/) . Note that you may want to verify their provenance / security before implementing them into things you value. A tale of a few best practices learned the hard way, this time covering [S3 and VPCs](https://szeitlin.github.io/posts/engineering/aws-s3-vpc/) . This one goes so far beyond the typical S3 Bucket Negligence award I don’t know where to begin. Essentially Guardzilla (a security camera manufacturer) baked AWS API keys into every device it shipped. When they were inevitably exposed, everyone’s video became exposed. There has been no patch, and (incredibly) no public comment as of the time of my writing this. If you have a Guardzilla “smart” camera, [unplug it immediately](https://techcrunch.com/2018/12/27/guardzilla-security-camera-flaws/) . SummitRoute’s Scott Piper put together a [great table](https://twitter.com/0xdabbad00/status/1081678214471180288) showing SLA coverage for AWS services. We’ve gotta start collecting his work somewhere other than on Twitter… AWS Hero Jerry Hargrove has done it again; this time a visual service summary of [Amazon Aurora Serverless](https://www.awsgeek.com/posts/Amazon-Aurora-Serverless/) . These things are gorgeous, and I want to collaborate with him on a snarky version of a few of these… Now that S3 Public Block is in effect, S3 bucket negligence awards become a thing of the past, and we can turn our attention towards–just kidding. This week we’ve got three! The Indian identity system [Aadhaar](https://www.ibtimes.co.in/india-cert-secures-thousands-aadhaar-pan-card-details-exposed-hackers-789281) ; [Twinning](https://www.wired.com/story/security-news-this-week-that-viral-twinning-site-leaked-a-bunch-of-photos/) , a viral site; and [Abine Blur](https://www.bleepingcomputer.com/news/security/abine-blur-password-manager-user-data-exposed-online/) –a freaking *password manager*. I shouldn’t plan on retiring this award in 2019, should I… A reddit thread discussing the nightmare of [using AWS for the first time](https://www.reddit.com/r/aws/comments/aa7v1p/is_it_just_me_or_is_aws_is_a_nightmare_for/) . I don’t agree with everything in the thread, but it’s worth a read just to see how the service is often perceived by newcomers. We were all new to this once… After a recent Twitter kerfuffle about the idea of Manager READMEs (a document managers give to new team members about their management style), I caught up with Etsy’s Matt Newkirk to discuss his thoughts on the matter. It’s worth a listen to this episode of [Screaming in the Cloud](https://www.screaminginthecloud.com/episodes/2019/1/2/episode-43-heres-a-document-on-how-to-best-deal-with-my-foibles) . Someone forgot to tell Trek10’s Forrest Brazeal that there was a holiday; he apparently spent the time trapped in the office taking us in depth on going [from relational databases to a single DynamoDB table](https://www.trek10.com/blog/dynamodb-single-table-relational-modeling/) . This is well worth the time to read if you play with data modeling at all. ### Choice Cuts From the AWS Blog [Amazon API Gateway announces service level agreement](https://aws.amazon.com/about-aws/whats-new/2019/01/api-gateway-introduces-service-level-agreement/) – The only AWS announcements of note this week are that a pair of services get SLAs. The actual money / uptime guarantee of SLAs are almost irrelevant; their value lies in signaling to enterprises that this is a service that the provider takes seriously. This is a welcome change, one that’s such a delight to me that I can’t even snark about it properly. Well done. [Amazon EFS Announces 99.9% Service Level Agreement](https://aws.amazon.com/about-aws/whats-new/2019/01/amazon-efs-announces-99-9-service-level-agreement/) – EFS is in the same SLA boat. Though I loved to mock EFS at launch, it’s matured into a solid, reliable service whose only fault is that NFS is a tire-fire of a modern architectural pattern. That’s not its fault though… ### Tools If you want to build a command for the (sometimes arcane) AWS CLI, [this website](https://awsclibuilder.com/) may help you get there without wearing out your tab key. (You do have bash/zsh completion turned on for awscli… right?) …and that’s what happened ***Last Week in AWS***. ## You might also like [More Newsletter Issues](https://www.lastweekinaws.com/newsletter/) Issue No.490 ### [T8i Instances: Bursting With Mild Enthusiasm](https://www.lastweekinaws.com/newsletter/t8i-instances-bursting-with-mild-enthusiasm/) [Read More about T8i Instances: Bursting With Mild Enthusiasm](https://www.lastweekinaws.com/newsletter/t8i-instances-bursting-with-mild-enthusiasm/) Issue No.489 ### [Lambda Slowly Becomes EC2, One Feature at a Time](https://www.lastweekinaws.com/newsletter/lambda-slowly-becomes-ec2-one-feature-at-a-time/) [Read More about Lambda Slowly Becomes EC2, One Feature at a Time](https://www.lastweekinaws.com/newsletter/lambda-slowly-becomes-ec2-one-feature-at-a-time/) Issue No.488 ### [Claude Fable 5.1 and Other Bedtime Stories](https://www.lastweekinaws.com/newsletter/claude-fable-5-1-and-other-bedtime-stories/) [Read More about Claude Fable 5.1 and Other Bedtime Stories](https://www.lastweekinaws.com/newsletter/claude-fable-5-1-and-other-bedtime-stories/) Issue No.487 ### [Happy 20th Birthday EC2, You Beautiful Disaster](https://www.lastweekinaws.com/newsletter/happy-20th-birthday-ec2-you-beautiful-disaster/) [Read More about Happy 20th Birthday EC2, You Beautiful Disaster](https://www.lastweekinaws.com/newsletter/happy-20th-birthday-ec2-you-beautiful-disaster/)