TNTun Nyeininblog.tunlab.xyz·Oct 18, 2025 · 2 min readDeploying the bookinfo microservices on AWS ECS + ALBOverview This project demonstrates how to deploy the well-known Istio BookInfo microservices application on Amazon ECS using the Fargate launch type. The BookInfo application is composed of four microservices, each running as an independent ECS task:...00
TNTun Nyeininblog.tunlab.xyz·Oct 8, 2025 · 2 min readStatic Websites using AWS S3 + CloudFront + SSLOverview Hosting a static website on AWS using S3 (Simple Storage Service) is one of the most cost-effective and low-maintenance solutions available today.By combining S3 with CloudFront (CDN) and AWS Certificate Manager (ACM), we can deliver our web...00
TNTun Nyeininblog.tunlab.xyz·Oct 7, 2025 · 1 min readhcp-vault-aws-vpc-peeringOverview This project demonstrates how to securely connect a HashiCorp Cloud Platform (HCP) Vault cluster running in an HCP HVN with a private AWS VPC using VPC Peering. The private AWS VPC contains EC2 instances (in private subnets) that communicate...00
TNTun Nyeininblog.tunlab.xyz·Oct 2, 2025 · 2 min readVPC Peering – cross-account cross-region and same account, same regionBy default, AWS VPCs are isolated from each other, meaning resources in one VPC cannot directly communicate with resources in another. However, in many many real-world scenarios, applications or services deployed across multiple VPCs—whether in the s...00
TNTun Nyeininblog.tunlab.xyz·Sep 29, 2025 · 5 min readManaging Private EC2s with AWS SSM Session Manager and Session LogsIntroduction Introduction Traditionally, managing private EC2 instances in AWS required SSH key pairs and bastion hosts. This approach meant opening inbound ports such as SSH (22) or RDP (3389), which not only increased the attack surface but also ad...00
