Labs and walkthroughs
Guides
Open the source guide for the full write-up.
No entries match these filters.
-
ACM public vs Private CA for intranet TLS
Side-by-side ACM public HTTPS on an internet ALB and AWS Private CA on an internal ALB, with Linux trust installed via S3 and SSM.
-
Greengrass V2 edge greenhouse
Greengrass V2 on a NUC core with ESP32-S3 zones — LAN closed loop first, then AWS CLI wiring for archive, alarms, cloud commands, and on-device ONNX.
-
Heltec V4 MeshCore first setup
Flash a Heltec WiFi LoRa 32 V4 with MeshCore Companion Bluetooth — bootloader, web flasher, radio preset, then pair the app.
-
Heltec V4 Meshtastic first setup
Flash a Heltec WiFi LoRa 32 V4 with Meshtastic from a clean desk — bootloader, web flasher, region, then prove the node is alive.
-
Enhanced EventBridge custom event bus
One enhanced bus shared with RAM, a FIFO Subscriber that owns its filter, and ordered health alerts in another account — without bus-to-bus hops.
-
Central Route 53 outbound DNS
When several VPCs need the same corporate zone, decide between per-account outbound endpoints and one hub shared with RAM — and when a local escape hatch is worth the extra ENIs.
-
S3 Express hot lookup
Put hot keys in an Express directory bucket next to compute, bake them off against Standard in the same AZ, and read the live ratio on a small harness dash.
-
NTRIP caster HA patterns
BKG’s caster fans GNSS streams but won’t fail over. Prove a normal relay-IPort first, then bolt on dual-AZ L4 and multi-region DNS — one stack at a time.
-
AWS NFW Walkthrough
Stand up disposable TGW hubs in Sydney and Auckland, then prove Network Firewall really double-inspects cross-Region traffic.
-
TGW Policy-Based Routing
Same private IP, two paths — prove Transit Gateway Policy-Based Routing sends HTTPS via the hub while HTTP goes direct.
-
PrivateLink vs inspected TGW
One live stream, two paths — clock PrivateLink against a TGW inspection hairpin, then keep the path that wins on latency and cost.
-
Private S3 package repo
Host private RPM and deb repositories on S3 and install from them through regional VPC gateway endpoints.
-
Private S3 artifact store
Keep S3 objects private and reachable only through regional VPC gateway endpoints, with copy from Sydney to Auckland.
-
Kinesis S3 delivery
Send Kinesis Data Streams records straight to S3 without Firehose or a Lambda consumer.
-
Amplify Astro CI/CD
Ship a static Astro site to Amplify Hosting with staging, PR previews, GitHub CI gates, and teardown.
-
Buildpacks on EKS
Prove buildpacks on EKS — platform-owned image builds, app teams push code only.
-
Kueue on EKS
Deploy Kueue on Amazon EKS Auto Mode with eksctl and GitOps — cap concurrent batch jobs and share quota across projects.
-
Amazon EKS control plane parameters
Amazon EKS control plane configuration parameters walkthrough.
-
SeisComP ECS lab
Unofficial SeisComP lab on ECS Fargate with RDS EFS and EC2 GUI.
-
SeisComP containers lab
Unofficial LEARN SeisComP lab as one Docker Compose service per process using gsm.
-
SeisComP lab
Single host SeisComP learning lab on AWS Ubuntu.
-
PrivateLink path between producer and consumer VPCs
Cross-account PrivateLink into a private 3-tier API — same-Region Sydney, cross-Region Melbourne, and why New Zealand cannot join the cross-Region path today.
-
Amazon EC2 application status checks
Amazon EC2 application status checks walkthrough for in network HTTP probes and optional Auto Scaling replacement.
-
BIND to Route 53 mirror
Keep on-prem BIND authoritative and mirror zones into Route 53 so cloud workloads resolve the same private DNS names.
-
Kiro Birthday 2026 Challenge
Kiro Birthday Week Day 1 — a docs sync check hook, with Builder Center write-up, demo video, and LinkedIn share.
-
PR Readiness Coach
AI coach that checks branch readiness before you open a pull request — local CLI, AWS API, GitHub Actions comments, Kiro hooks, and an owner UI.
-
AWS private connectivity patterns
Deploy and compare five private cross-account patterns — VPC Peering, PrivateLink, VPC Lattice, Transit Gateway, and Cloud WAN.
-
Kiro on WSL with AWS SSO
Take a Windows laptop from BIOS virtualization through WSL2, Docker Desktop, and Kiro IDE, then land GitHub SSH and IAM Identity Center so you can work in Ubuntu with AWS SSO and MCP ready.
-
S3 Vectors RAG workload
Vector search without a vector database — Amazon S3 Vectors, Bedrock embeddings, and a serverless RAG app.
-
S3 Annotations walkthrough
Attach structured JSON metadata to S3 objects — demonstrated on GeoNet volcano camera imagery from Te Kaha.
-
Classic Route 53 multi-account DNS
Share one private hosted zone across three accounts and two regions — classic VPC association authorization, no Profiles or RAM.
-
Event-driven serverless platform
Deploy an AWS event-driven platform for GNSS RINEX ingest, TEC calibration, and visualization.
-
AWS–GCP Interconnect
Private connectivity between AWS and GCP — no VPN, no colocation, no public internet.
-
ECS Express Mode
Deploy HTTP/HTTPS containers on ECS with a single Terraform resource — managed ALB, auto scaling, and HTTPS URL included.
-
Lambda Managed Instances
Theory-first guide to Lambda Managed Instances — fundamentals, quotas, and hands-on walkthrough pages as they publish.
-
S3 Files workloads
Mount an S3 bucket as an NFS file system on EC2, ECS Fargate, and Lambda — CLI and Terraform paths.
-
VPC IPAM multi-account
Org-wide VPC IPAM across four accounts and two regions — delegated admin, RAM pool sharing, and pool-backed workload VPCs.
-
AWS IoT Walkthrough
Connect ESP32-S3 to AWS IoT Core — pretest flash and serial, then Terraform for rules, Lambda, DynamoDB, API, and Amplify dashboard.
-
Greenfield EKS — Standard vs Auto Mode
Practical greenfield guide to choosing Standard EKS versus EKS Auto Mode — cost, who runs what, and a decision rubric without legacy baggage.
-
IAM Policy Guard (Hackathon 2025)
Serverless IAM guard that detects dangerous policy changes and remediates them in seconds — Lambda Hackathon 2025.
-
VPC Lattice at AWS Community Day Aotearoa 2025
Talk resources for modern service networking with VPC Lattice — agenda, links, and a Terraform example.
-
Amazon Q CLI slides
Slide deck on Amazon Q for development — history, install, CLI habits, and demo projects scaffolded with q chat.
-
Understanding GitHub Actions working directory
Where GitHub Actions stores files during a run — default workspace, working-directory scopes, action paths, and path-related environment variables.