Some software components are really important to get right, like your application’s access control policies and core business logic. There are a growing number of tools to help you verify the correctness of these components by leveraging automated reasoning. In developing Cedar, an open source authorization policy language, we have found that the Lean proof assistant is a great tool for verifying Cedar’s correctness and security properties. Over the past 6 months, we built a formal model of Cedar in Lean, and proved that Cedar’s components satisfy key safety and security properties. Lean is a ..read more

Less than a week after Redis Inc. announced it was removing the open source license and pulling out of the Redis project, Redis contributors banded together to move the community to The Linux Foundation as the Valkey project. They did this almost immediately after the license change announcement went live, in response to community outcry on GitHub and on social media, asking to fork the project or join an existing fork. This reaction is not surprising — we’ve seen a similar response from other communities when their projects are relicensed. Open source developers and others invest significant ..read more

Modernization is the process of progressively transforming legacy applications and infrastructure to extend into the higher value of cloud native services. Along with people and process changes, modernization unlocks new business capabilities, accelerates innovation, and reduces technical debt. Migrating applications to the cloud is a three-phase process, starting with assessment, progressing with mobilization and executing with migration and modernization. During assessment and/or mobilization you select one of 7 migration strategies (also known as 7 Rs: Refactor, Replatform, Repurchase, Reho ..read more

There are many reasons why AWS customers will arrive in a situation where they have applications and infrastructure deployed in a multicloud environment. These customers encounter many operational challenges with their applications distributed across a cloud estate that spans not only multiple Cloud Service Providers (CSPs) but also regions and accounts on AWS (or Subscriptions and Projects on other providers). One particular challenge is gathering and maintaining accurate and current metadata about their cloud resources. This metadata can be extracted from all CSPs but the APIs and data schem ..read more

Today, we are excited to announce the release of Data Solutions Framework on AWS (DSF), an opinionated open source framework that accelerates building data solutions on AWS. It can take days or weeks to build end-to-end solutions on AWS with infrastructure as code (IaC) and following best practices, but with DSF it takes hours and you can focus on your use case. About Data Solutions Framework on AWS Building modern data platforms requires specialized skills across multiple domains such as infrastructure, security, networking, and distributed systems. It can be challenging to select the right t ..read more

The complexities of contemporary software development environments have led, in recent years, to the creation and adoption of Internal Developer Platforms (IDPs). IDPs’ purpose is to decrease the cognitive load for software developers, who have to use a large number of tools and products to perform their jobs. Such fragmentation causes time consuming context switches and steepens the learning curve for new joiners. IDPs address those drawbacks by providing a unified front-end, where the different tools and products are glued together and made available to the developer in a single catalog. Bac ..read more

In November 2022, AWS announced a new command line developer tool for container developers, Finch. Almost one year later we reached an important milestone in the maturity of the project with our Finch 1.0 release. Finch provides local developer tools so that container developers can work with Linux containers on non-Linux operating systems, initially available for macOS. Today we’re excited to announce a significant additional milestone for the project: Windows operating system support! With this added support, container developers on Windows can easily install Finch and build, run, and publis ..read more

The OpenSearch project has achieved another milestone, launching the inaugural OpenSearch Leadership Committee, in December 2023. The committee is another step toward open governance in which a broad community of users, contributors, and committers is included in a publicly visible and accessible process that determines an open source project’s direction. Open governance creates a clearly defined path toward leadership and ensures that anyone can participate and bring their ideas and changes to the project. The broader and more diverse a project’s participation, the faster it innovates, the mo ..read more

This is the second blog post in our series “Istio on EKS”, where we uncover Istio’s transformative benefits for microservices in Amazon Elastic Kubernetes Service (Amazon EKS). In our previous blog, Getting started with Istio on EKS, we explained how to set up Istio on Amazon EKS. We covered core aspects such as Istio Gateway, Istio VirtualService, and observability with open source Kiali and Grafana. In this blog, we’ll unlock the true potential of Istio as a service mesh by mastering Istio’s most powerful features for traffic management, the communication among microservices that is key to m ..read more

Developers can use Cedar, an open source policy language and evaluation engine, to decouple access control from application logic by expressing fine-grained permissions as easy-to-understand policies. This blog post explains how developers using the Cedar SDK can use two new open source Rust crates, cedar-local-agent and avp-local-agent, to reduce their development burden and ease policy management tasks. Developers use Cedar to answer the question, “Is this request authorized?” In Cedar terms, this question can be restated: “Given this set of policies, can this principal perform this action o ..read more