Moving a Pulumi Project to an S3 Self-Managed Backend (With Locking Caveats)
Move Pulumi stack state into your own S3 bucket with versioning, least-privilege IAM, a verified locking story, and a tested export-based recovery path.
ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Move Pulumi stack state into your own S3 bucket with versioning, least-privilege IAM, a verified locking story, and a tested export-based recovery path.
Learn how to configure Secrets Manager to automatically rotate Amazon RDS/MySQL credentials using a Lambda function, verify the rotation, and recover if it fails.
An architecture note on DynamoDB single-table design: enumerate access patterns, enforce invariants with conditional writes, and know when to split the table.
Step‑by‑step guide to define, validate, and build an Amazon‑EBS‑backed AMI using Packer, with verification and cleanup instructions.
Provisioned concurrency lets you reserve warm Lambda environments, eliminating cold starts for latency‑sensitive workloads. This guide walks you through the concept, when to use it, a concrete CLI example, and cost‑vs‑performance trade‑offs.
Pulumi component resources let you package repeated infrastructure patterns—like a VPC with subnets and routing—into one versioned, reusable unit. Here's how they work, with a TypeScript example and the trade-offs.
Choosing FIFO over standard SQS queues hinges on per‑entity ordering and deduplication needs. This architecture note explains requirements, minimal design, trust boundaries, operational checks, and when to switch.
Step‑by‑step guide to create an AWS EventBridge custom event bus, route filtered events to a Lambda target, add a dead‑letter queue, and monitor failures with CloudWatch alarms.
DynamoDB pages Query results by the 1 MB read cap, not your Limit. Here's how LastEvaluatedKey actually works, why FilterExpression can return empty pages, and a loop that doesn't drop records.