Amazon API Gateway integration with AWS WAF is a great way to protect your APIs from common web exploits that could affect application availability, compromise security, or consume excessive resources.

Amazon API Gateway integration with AWS WAF

AWS CloudFormation templates can contain parameters—custom values that are supplied at deployment time and incorporated into the template. Since the AWS CDK synthesizes AWS CloudFormation templates, it too offers support for deployment-time parameters. Using the AWS CDK, you can both define parameters, which can then be used in the properties of constructs you create, and you can also deploy stacks containing parameters.

How to use parameters in AWS CDK?

Mock Service Worker is an API mocking library for browsers and Node. It provides seamless mocking by interception of actual requests on the network level using Service Worker API. This makes your application unaware of any mocking being at the place.

API mocking example (Mock Service Worker) with Next.js

A signed URL includes additional information, for example, an expiration date and time, that gives you more control over access to your content. This additional information appears in a policy statement, which is based on either a canned policy or a custom policy.

Cloudfront restrict user access by signed URLs

This blog post provides a step-by-step guide for beginners on how to set up an AWS Lambda function to automatically forward emails received via AWS SNS to a specified email address using AWS SES.

Automating Email Forwarding with AWS Lambda, SNS, and SES

Compare AWS CDK vs Terraform for small teams. Learn which IaC tool is easier to adopt, scale, and maintain for developer-led projects.

CDK vs Terraform: Which is right for a small team?

In this blog post, we will explore how to enhance application security using cdk_nag with AWS CDK. Learn how to identify and address security issues in your CDK application to ensure a secure deployment.

Optimizing Application Security. A Guide to Using cdk_nag with AWS CDK

A Lambda proxy integration enables you to integrate an API route with a Lambda function. When a client calls your API, API Gateway sends the request to the Lambda function and returns the function's response to the client. Today, I will show you how to create a Lambda proxy integration for an HTTP API in AWS CDK.

AWS Lambda proxy integrations for HTTP APIs in AWS CDK

You can deploy your Lambda function code as a container image. This blog post is about how to do that in AWS CDK.

Deploy Python Lambda functions with container images in AWS CDK

You can authenticate and protect your Amazon OpenSearch Service default installation of OpenSearch Dashboards using Amazon Cognito. This article will show you how to do this using the AWS CDK.

Configuring Amazon Cognito authentication for OpenSearch Dashboards in AWS CDK

Because Node.js doesn't run TypeScript code natively, you must first transpile your TypeScript code into JavaScript. Then, use the JavaScript files to deploy your function code to Lambda. But now you can write a lambda typescript with the NodejsFunction construct without transpile your code first.

Building Lambda functions with TypeScript in AWS CDK

This article explains how to handle SSL/TLS certificate verification errors that occur when making HTTPS requests in Node.js using Axios. The article recommends passing a custom httpsAgent option with rejectUnauthorized set to false to disable SSL/TLS certificate verification. However, the article emphasizes the importance of enabling certificate verification in production environments to ensure data security.

How to Use Axios to Handle SSL/TLS Certificate Verification Errors in Node.js

AWS Aurora Serverless is a fully managed, auto-scaling configuration of Aurora that automatically starts up, shuts down, and scales the compute resources based on your application's needs. In this article, we will learn how to create an Aurora Serverless V2 with AWS CDK.

Aurora Serverless V2 with AWS CDK

Explore the transformative capabilities of deep learning through our newly launched course on PyTorch. Led by Omar Atef, this engaging course provides hands-on experiences with five vital projects, ranging from tabular data classification to advanced applications in image, audio, and text classification. Ideal for beginners and those with some machine learning knowledge, the course also emphasizes the practical application of concepts through real-world coding exercises. Dive into the world of AI and enhance your skills with PyTorch today!

Unlocking the Power of PyTorch: Dive into Deep Learning with Five Engaging Projects

In the digital age, optimizing the Largest Contentful Paint (LCP) is essential for improved user experience and better search rankings. This blog post delves into LCP and its newly introduced subparts, helping developers identify and address loading delays. With tools like DebugBear, you can gain valuable insights into how different components, such as Time to First Byte and Resource Load Delay, impact your site's performance. Embracing these strategies not only enhances website speed but also fine-tunes real user engagement.

Unlocking the Secrets of Largest Contentful Paint: A Deep Dive into Subpart Analysis

In this comprehensive guide, we explore the process of creating a full-stack To-Do application using the MERN stack, which includes MongoDB, Express.js, React, and Node.js. The tutorial walks you through setting up your development environment, installing dependencies, building a robust user interface, and connecting your app to a MongoDB Atlas database. Ideal for developers with basic knowledge of HTML, CSS, and JavaScript, this guide emphasizes functionality, allowing you to customize your application's aesthetics.

Crafting a Full-Stack To-Do Application with MERN: A Comprehensive Guide

In this blog post, we explore the importance of safeguarding Amazon S3 buckets against malware threats with our innovative solution, bucketAV. We discuss the various scenarios that necessitate virus scanning and detail the robust architecture behind our antivirus solution that emphasizes fault tolerance, cost efficiency, and scalability. With a clear explanation of our technology choices, we invite readers to experience the benefits of bucketAV through a free trial, enhancing their data security in the cloud.

Fortify Your S3 Buckets: A Comprehensive Guide to Virus Scanning and Malware Protection

In the world of WordPress development, frameworks like Sage and Genesis promise efficiency and modern standards, but personal experience unveils hidden complications that often arise over time. By inheriting projects built on these frameworks, I've encountered challenges ranging from complex debugging processes to breaking changes and hosting issues. Advocating for a minimal WordPress setup not only enhances maintainability and collaboration but also simplifies both developer onboarding and long-term sustainability.

Why Minimalism Is the Secret Sauce in WordPress Development

March welcomes the long-awaited arrival of spring, presenting us with an ideal moment to channel our energy into creativity. Our talented community of artists has launched a fresh collection of vibrant desktop wallpapers, each echoing the spirit of March 2025. This post invites readers to explore these remarkable artworks and encourages budding artists to share their designs for future features.

March Into Spring: A Celebration of Creative Wallpapers for 2025

In this blog post, we explore Git's fundamental concepts through an interactive 3D game world, making it easier for newbies and experienced developers to understand the working directory, staging area, and commit history. By visualizing these abstract ideas, the post aims to simplify the learning process and encourage hands-on experimentation. Devlands, a gamified Git interface, serves as the platform promoting this engaging learning approach.

Mastering Git: A 3D Adventure Through Version Control Concepts

This article provides a comprehensive guide to building a powerful and reusable `useSearch` hook in React. It addresses common limitations of basic search implementations, such as lack of flexibility, performance issues, and typo tolerance. The guide walks through creating search and pagination filters, implementing an n-gram fuzzy search for handling typos, and integrating a ready-made version from npm. By the end, readers will have the knowledge and tools to enhance their React applications with effective search functionality.

Unlocking Advanced Search Functionality in React with a Custom useSearch Hook

In a digital world where speed is essential, website loading time directly affects user engagement and brand perception. This blog post explores crucial strategies to optimize loading speeds by eliminating unnecessary code, optimizing images, managing plugins, and upgrading server capabilities. It also highlights valuable tools like Minifier, TinyPNG, and Google PageSpeed Insights to streamline the optimization process, ensuring your website meets user expectations for speed and efficiency.

Turbocharge Your Website: Essential Tips to Boost Loading Speeds

Exploring the integration of AI in usability testing reveals an exciting yet cautious path toward enhancing user feedback collection. While AI can facilitate the generation of follow-up questions and enrich qualitative insights, challenges like redundancy and lack of contextual understanding must be addressed. By focusing on the synergy between human moderators and AI technology, UX researchers can navigate the complexities of modern usability testing, fostering better interactions and generating more meaningful insights. The future of usability research hinges on this balanced approach, ensuring human experiences remain at the forefront of design.

Harnessing AI for Enhanced Usability Testing: Bridging the Gap Between Moderated and Unmoderated Approaches

In this tutorial, you'll learn how to create a clone of the popular mobile game Crossy Road using Three.js. You'll set up your game environment, render a map populated with obstacles, animate the player and vehicles, and handle hit detection for a fully functional game. This engaging project will deepen your understanding of game development principles and JavaScript programming.

Mastering Three.js: Create Your Own Crossy Road Game Clone

In today's digital landscape, mastering modern web development is essential, and learning ASP.NET Core MVC can significantly enhance your skill set. Our comprehensive course on freeCodeCamp.org walks you through the process of building a full-stack .NET web application, covering everything from project setup to database management and data visualization. With hands-on experience and practical exercises, this tutorial is suited for both beginners and experienced developers looking to refine their ASP.NET Core skills. Join us and start creating powerful web applications today!

Mastering ASP.NET Core MVC: Your Ultimate Guide to Full-Stack Development

In this comprehensive guide, we explore the significance of Kubernetes networking and the vital role of Network Policies in securing your cluster. Network Policies allow fine-grained control over pod communication, helping to enforce security and compliance within your applications. We walk you through the setup, implementation, and best practices for managing Network Policies effectively. By the end, you'll have a solid understanding of how to optimize security and resource utilization in your Kubernetes environment.

Mastering Kubernetes Networking: A Comprehensive Guide to Network Policies

Web security can seem overwhelming for developers, but understanding the common vulnerabilities is crucial for building safer applications. This blog post discusses the OWASP Top Ten vulnerabilities, illustrating the importance of strategic logging, careful management of dependencies, and proactive measures against various threats. Utilizing tools and frameworks correctly and staying informed can significantly enhance the security posture of full-stack web applications.

Navigating the Security Landscape: How to Safeguard Your Full-Stack Web Applications with OWASP

Custom Authorizers allow you to run an AWS Lambda Function via API Gateway before your targeted AWS Lambda Function is run. This is useful for Microservice Architectures or when you simply want to do some Authorization before running your business logic.

API Gateway Authorizer Function for Auth0 or AWS Cognito using the JWKS method.

Content testing is indispensable for understanding user interactions with web pages, whether through innovative methods like Banana Testing or insightful techniques such as heatmapping. These approaches reveal not only user comprehension but also align with their mental models, uncovering the gaps and needs often overlooked. It’s essential that designers craft content with care, ensuring that the right words and tone convey clear messages and foster positive user experiences throughout their journey.

Mastering Content Testing: Strategies for Enhanced UX

Explore Server-Sent Events (SSE) as a simpler alternative for real-time communication in web development.

Discovering the Power of Server-Sent Events (SSE) for Real-Time Communication

Setting up a front-end development project in JavaScript doesn't have to be overwhelming. This blog post walks you through essential tools like Visual Studio Code, showcases the importance of Node.js for managing libraries and dependencies, and introduces bundlers like Vite for a seamless live development experience. By following these steps, you'll create a solid foundation for building efficient and scalable web applications.

Mastering Front-End Development: Your Ultimate Guide to Setting Up JavaScript Projects

This blog post delves into the significance of Time to First Byte (TTFB) and its impact on website performance. Exploring various contributing factors to TTFB, the article emphasizes the importance of understanding network latency, geographical distances, and the advantages of using Content Delivery Networks (CDNs) to enhance user experience. By evaluating individual components affecting TTFB and employing real user monitoring, website owners can implement strategies to achieve faster loading times for visitors around the globe.

Understanding Time to First Byte: A Deep Dive into Optimizing Web Performance

Learn to optimize PostgreSQL with effective indexing strategies for rapid query performance while considering key trade-offs.

Boost Your PostgreSQL Performance: Mastering Indexes

Explore key skills beyond coding that define exceptional software engineers for a successful career in development.

Essential Skills Beyond Coding: What Makes Great Software Engineers

Learn how to assign a static IP to AWS Lambda for free with a step-by-step guide using AWS CDK.

How to Assign a Static IP to AWS Lambda for Free

In this reflective piece, the author shares the journey of creating the 'Hero Section,' a transformative element in web design. Initially inspired by a Bootstrap class, the author explains their creative process, including the thoughtful naming and coding that set the Hero Section apart from standard banners. Over the years, this concept evolved into a widely recognized standard in web design, teaching key lessons about simplicity, commitment, and the significance of ownership in innovation. The blog encourages readers to recognize and share their own proud accomplishments in design.

The Birth of the Hero Section: From Staring at a Blank Canvas to Design Revolution

Explore my client-focused website creation process, enhancing efficiency and ensuring exceptional client experiences from start to finish!

Crafting Exceptional Websites: My Client-Centric Creation Process

Explore the pros and cons of monolithic and microservices architectures to determine the best fit for your project.

Monolithic vs. Microservices: Choosing the Right Architecture for Your Project

This blog post explores the evolution and principles of Responsive Web Design (RWD), highlighting the transformative impact of intrinsic web design and modern layout systems like Flexbox and CSS Grid. It emphasizes the importance of using semantic HTML for accessibility, fluid typography for adaptable content display, and the continued relevance of progressive enhancement. By trusting browser capabilities and embracing logical CSS, web developers can create inclusive and user-centered experiences, ensuring that websites serve their users effectively across various platforms.

Redefining Responsive Web Design: Embracing Intrinsic Principles

In this blog post, we explored how to integrate RTK Query with Redux Toolkit by building a simple CRUD React Movie app. We began by understanding the core concepts of RTK Query, created an API slice to handle movie data, and implemented Redux store integration. Additionally, we examined caching mechanisms, error handling, and best practices to enhance the app's user experience. This guide serves as a comprehensive resource for React developers looking to streamline their data fetching processes.

Mastering Data Fetching: Integrating RTK Query with Redux Toolkit in Your React Movie App

In an era where cloud costs can spiral, using AWS EC2 spot instances presents an effective way to reduce expenses when running GitHub Actions. This blog explores the journey of developing HyperEnv, a solution that employs ephemeral runners on spot instances, achieving a potential 60% cost reduction. Additionally, it covers strategies for handling instance interruptions and ensuring availability through fallback mechanisms. Join us as we unpack the architecture that makes it all possible.

Unlocking Cost Efficiency: Using EC2 Spot Instances for GitHub Actions

The journey of integrations has evolved dramatically from the simple file transfers of early computing to the complex composable architectures of today. Innovations such as REST APIs, GraphQL, and event-driven architectures epitomize modern integration patterns that enhance application scalability and performance. Headless CMS solutions like Storyblok are leading examples of this evolution, allowing flexible application development by decoupling content management and presentation. Embracing these advanced integration approaches is crucial for developers aiming to build efficient and future-proof applications.

Harnessing the Power of Modern Integrations: A Journey Through Composable Architectures

This blog post explores the essential techniques of clustering within the realm of Unsupervised Machine Learning. It covers key clustering algorithms such as K-Means, Hierarchical Clustering, and DBSCAN, providing detailed Python implementations and visualizations to help readers grasp their applications. Additionally, it discusses how to evaluate clustering performance and highlights real-world use cases, empowering both beginners and experienced data scientists to unlock hidden insights from complex datasets.

Unlocking Insights: A Deep Dive into Clustering Techniques with Python

This blog post will show you how to use husky and git-secrets to prevent committing passwords and other sensitive information to a git repository. This is a good idea because it reduces the risk of your API key and secret being exposed to your code.

Using husky and git-secrets to prevent committing sensitive information to a git repository.

I have been using AWS S3 for web hosting for a few years now. I have found it to be a great solution for hosting static websites, but it's not without its limitations. In this article, I'll explore the benefits and limitations of using AWS S3 for web hosting.

Using AWS S3 for Web Hosting - Benefits and Limitations

This blog post gives an overview of how to connect an AWS Lambda function to an RDS instance to perform database operations. We will explore how to connect Lambda to RDS over the Internet or VPC, and how to make RDS publicly accessible.

Connecting AWS Lambda with Amazon RDS using AWS CDK and Node.js

AWS Backup is a service that provides backup and restore of your AWS resources. This is an example of how to use the AWS Backup API to assign resources to a backup plan.

AWS Backup resources assignment by Tag using AWS CDK

AWS Lambda now supports event filtering for Amazon DynamoDB. But AWS CDK is not yet able to support this. In this article, I will show how to do this in CDK.

Filtering DynamoDB event for AWS Lambda functions

In this post, we'll show you how to validate request parameters and body in Amazon API Gateway using AWS CDK. This can help to prevent errors and security vulnerabilities.

Validating Request Parameters and Body in Amazon API Gateway with AWS CDK

Do you want to code anywhere? AWS Cloud9 is a great tool for developers who want to code anywhere. It's a cloud-based integrated development environment (IDE) that lets you write, run, and debug your code with just a browser. It comes with a powerful code editor, debugger, and terminal. You can create and switch between multiple Cloud9 environments that include a full-fledged Linux server, code editor, and terminal. You can also connect to your existing AWS resources from within the IDE.

Code anywhere. AWS Cloud9

Today, I would like to introduce you to a tool, called Metube Video Downloader. It is a simple program that can download videos from 10.000+ platforms. It has more exciting features than any other video downloader.

Metube.one - Video downloader, download video from 10.000+ platforms.

Learn how to deploy a web server to AWS EC2 using AWS CDK. This tutorial provides step-by-step instructions for setting up the development environment, initializing a CDK project, writing the necessary code, and deploying the web server.

Deploying a Web Server to AWS EC2 with AWS CDK. Step-by-step.

Storing and managing secrets like API keys and other credentials can be challenging. Your API key is valuable information and an accidental leak could result in unwanted calls, app blockage, or worse. Publicly exposing your API keys can lead to unexpected charges on your account

Improve the Security of API Keys [Checklist included]

Autocomplete functionality, as seen on platforms like YouTube, can greatly enhance the user experience by providing real-time suggestions while typing. In this blog post, we'll explore how to implement autocomplete using Elasticsearch, a powerful search engine, in combination with Node.js. We'll cover the steps involved and provide code samples and pseudo code to help you get started.

Implementing Autocomplete with Elasticsearch and Node.js

Invalid header value char. Have you ever seen this error? I have, and it's taken me some hours to figure out what was going on. I hope this post will help you to avoid the same mistake I made.

AxiosError, Parse Error, Invalid header value char

Assume that you have a Cognito user pool and you want to create an API that allows user to access to API without any authentication. This article will show you how to do that.

Allow user access to your API without authentication (Anonymous user access)

Stateful vs Stateless. The Key Differences between Stateful and Stateless APIs. What are the differences between stateful and stateless APIs? What are the pros and cons of each?

API Ultimate Guide, Stateful vs Stateless. The Key Differences

In this article, I will show you how to implement Amazon API Gateway as a proxy for DynamoDB by using AWS cdk. It is simple and very interesting.

Using Amazon API Gateway as a proxy for DynamoDB in AWS CDK

Sometimes you want mail clients to group emails into threads. For example, if you have a group of emails that are related to the same topic, you want to mail clients to group them together when the user views the list of emails in threaded view, the email client will show the thread.


AWS SES sends mails with a custom Reference header

As of July 19th, 2022 Amazon Web Services released their Design System as open-source along with a library of React components that implement the design system. This blog post is a quick overview of the design system and how it can be used with NextJS.

CloudScape Design with NextJS

The automatic references created by CDK when you use resources across stacks are convenient but may block your deployments if you want to remove the resources that are referenced in this way. This blog will explain how to remove cross-stack references

AWS CDK Removing automatic cross-stack references

Node.js v16.15.0 has been released with the fetch API. This is a great news for developers who want to use fetch API in node.js. In this article, we will see how to use fetch API in node.js.

Finally, we can use fetch API in node.js

Retry with exponential backoff is a technique to handle network errors by retrying a failed request after waiting for an increasing amount of time between each retry attempt. In Node.js, you can implement retry with exponential backoff using the retry module or by building your own implementation. This technique is useful for dealing with unreliable networks or services that occasionally fail.

How to Implement Retry with Exponential Backoff in Node.js

In this blog, we will discuss issues with dealing with dates times and distributed systems in general (distributed clients as well as distributed decision services)

Issues Date/Time With Serverless functions

AWS SDK v3 now stable and recommended for general use. AWS SDK for JavaScript(V2) is deprecated. This article is serries of tips and tricks to use aws-sdk v3. The first article is about how to save text file from S3 using aws-sdk v3.

Save text file from S3 using aws-sdk v3

Recently, AWS Lambda announced that it supports Node.js 18 and it is available in all AWS regions. This is a big news for Node.js developers. It means that we can use the latest version of Node.js in AWS Lambda. However, should we update the version of Node.js in the Lambda runtime? Let's find out.

AWS Lambda support Node.js 18 now.

You can use CloudFront to automatically compress certain types of objects (files) and serve the compressed objects when viewers (web browsers or other clients) support them. Today I will show how to do it in AWS CDK.

Configuring CloudFront to compress objects in AWS CDK

How to publish an npx command to npm. This is a quick guide on how to publish an npx command to npm.

Publishing an npx command to npm.

How to enable CORS in AWS API Gateway + Lambda proxy integration with AWS CDK in a few lines of code.

Enable CORS in AWS API Gateway + Lambda proxy integration with AWS CDK

This is a simple example of how to use Route53 and S3 to forward your domain to absolute URLs.

Use Route53 + S3 to forward your domain to absolute URLs.

This tool can be a game-changer for those frequently dealing with video meetings. By converting videos into useful, summarized, and translatable notes, it enhances accessibility and saves time. Happy coding, and here’s to more streamlined workflows

Automating Meeting Notes from Video. A Complete Solution for Transcription

How to add Google Adsense to Next.js, refreshed ads when the user navigates to a new page. In this tutorial, we will use the Next.js router to detect when the user navigates to a new page and then refresh the ads.

Add Google Adsense to Next.js, refreshed ads

A step-by-step guide on how to build a video thumbnailer using AWS Lambda and Fargate using AWS CDK. The application will be able to process multiple videos in parallel and store the thumbnails in S3.

Video Thumbnailer with AWS Lambda and Fargate using AWS CDK

All spinners are displayed as 24 x 24 dp. The main content rests inside the live area of 22 dp with a padding of 1dp.

A collection of 24 x 24 dp SVG spinners!

Let's assume that we want to execute python file in a node js environment. So the container image should have both python and node js runtime and the container should compatible with lambda

Lambda Nodejs Container with Custom Python Runtime

Recently, I worked on a project that required users to be able to sign in with their Google account and users to be able to link their Google account with their Cognito account. I found that there is not much information on the internet about how to do this. So I decided to write this article to share my experience. I will show you how to link a Cognito account with a Google account in the front end and back end.

How to link a Cognito account with a Google account(source code full stack)

Learn how to change field types in Elasticsearch with a step-by-step guide. Create a new index, define the desired field mapping, reindex the data, and optionally delete the old index. Ensure data integrity and minimize the risk of data loss.

Changing Field Types in Elasticsearch

API Gateway Access logs are a feature of API Gateway that allows you to log all requests made to your API. This is a great feature to have enabled for debugging purposes. In this blog post, we will go over how to enable API Gateway Access Logs and how to view them in CloudWatch.

AWS API Gateway Access Logs. How to get them and what to do with them.

Nuxt3 is going release and it's still in beta. But it's already possible to use it with Quasar 2. This article will show you how to do it.

Quasar 2 with Nuxt3 (Starter Template)

Sometimes you want to show a progress bar while downloading a file in Node.js. This article will show you how to do that.

Show a progress bar when downloading files in Node.js

This example creates Http proxy using API gateway of cdk.

All Posts

Amazon API Gateway integration with AWS WAF

How to use parameters in AWS CDK?

API mocking example (Mock Service Worker) with Next.js

Cloudfront restrict user access by signed URLs

Automating Email Forwarding with AWS Lambda, SNS, and SES