Amazon ECS Exec lets you securely interact with your running ECS containers (get a shell or run single commands) using SSM Session Manager.

Crypteia is an AWS Lambda extension for any runtime to preload SSM Parameters as secure environment variables at function startup.

iamlive can automatically generate least privilege IAM policies based on the permissions used during Terraform execution.

Legacy CloudFront Standard Logs (a.k.a access logs) are based on W3C Extended Log File format. These logs can be parsed into JSON format using a Python script.

Terraform 1.11 introduces S3-native state locking, eliminating the need for DynamoDB-based locks.

Use S3 Gateway VPC Endpoints to reduce network costs when pulling private ECR images in ECS Fargate tasks deployed in private subnets.

CloudWatch Logs Insights can automatically parse JSON in the @message field.