Author

CloudFront – Restricting Access to an ALB
CloudFront – Restricting Access to an ALB

CloudFront – Restricting Access to an ALB For web applications or other content served by an Application Load Balancer in Elastic Load Balancing, CloudFront can cache objects and serve them directly to users (viewers), reducing the load on the Application Load Balancer. However, if users can bypass CloudFront and access the Application Load Balancer directly,... » read more

cloudfront implements nginx’s behavior
cloudfront implements nginx’s behavior

Default root object If you define a default root object, end user requests for a subdirectory of your distribution do not return the default root object. For example, suppose index.html is your default root object and CloudFront receives an end user request for the install directory under your CloudFront distribution.: https://d111111abcdef8.cloudfront.net/install/ CloudFront does not return... » read more

image optimization
image optimization

image optimization Customer managed solution based on CloudFront, S3, and Lambda The most common use case for image optimization is automatically formatting based on the user’s browser capabilities and allowing the front-end to resize the image. Popular web development frameworks such as Next.JS provide responsive image components that automatically select image sizes based on the... » read more

sftp-restrict user access to directories
sftp-restrict user access to directories

sftp login to the specified directory Modify sshd configuration: /etc/ssh/sshd_config #Subsystem sftp /usr/lib/openssh/sftp-server Subsystem sftp internal-sftp # Change to internal-sftp # Example of overriding settings on a per-user basis #Match User anoncvs # X11Forwarding no # AllowTcpForwarding no # PermitTTY no # ForceCommand cvs server Match User test ChrootDirectory /sftpdata/test X11Forwarding no AllowTcpForwarding no PermitTTY... » read more

push image to ecr
push image to ecr

We changed the docker image repository from harbor to AWS ECR. How to push the image? Retrieve an authentication token and authenticate your Docker client to your registry. Use the AWS CLI: aws ecr get-login-password --region ap-east-1 | docker login --username AWS --password-stdin <aws account>.dkr.ecr.<region>.amazonaws.com In this way, we not only have to change the... » read more