AWS | pachamamita.de - In care of nature, simplicity and code

Multi-Tenant OpenID Connect Bearer Token Authentication with Quarkus

Jan 7, 2024 · 10 min read · Quarkus OIDC Authentication Authorization AWS Java ·

Quarkus offers comprehensive support for authentication and authorization utilizing Open ID Connect (OIDC). This real-life example shows how a REST API for two frontends with tenants based on AWS Cognito and Keycloak can be secured using OIDC bearer authentication.

Read Article

Deploying CloudFront Access Log Analysis Infrastructure with CDK 2

Nov 2, 2023 · 5 min read · AWS CDK CloudFront Glue Athena Typescript Web ·

Enabling CloudFront access logs is a basic way of monitoring incoming requests. However, CloudFront writes these logs as gzip packed files into S3, which makes a convenient analysis difficult. AWS Glue together with AWS Athena allows the use of SQL to query these logs and this post explains the steps to deploy the necessary infrastructure with CDK 2.

Read Article

Keeping Stateful and Stateless Resources in Separate Stacks in CDK

Feb 21, 2023 · 3 min read · AWS CDK ·

When deploying infrastructure as code with CDK it is a good practice to keep stateful resources like databases separated from stateless resources in different stacks to avoid accidental data loss and other problems.

Read Article

Unexpected SocketExceptions after AWS Lambda Execution

Feb 7, 2023 · 5 min read · Quarkus Java RESTEasy Reactive AWS Lambda ·

Having migrated to RESTEasy Reactive sporadic SocketExceptions occurred in one of our AWS Lambdas several minutes after the actual Lambda execution. This article describes one possible solution for this problem by disabling the connection pool for the used REST client with the help of custom HttpClientOptions but of course with the price of a lower overall performance.

Read Article