BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin) header
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin) profile picture

Father of Malak & Joud . Hands-on | Cloud Core Services Manager @ENGIEgroup | ☁️Cloud Surfer 🏄‍♂️ desert fox 🏟

eu-west-3
Joined January 2016
Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)Photo by BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ (@belhamin)
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
CONGRATULATIONS IMANE KHELIF 🤍 WE ARE SO PROUD OF YOU THE WORLD OWES YOU AN APPOLOGY
1,795
6,188
145
52,319
1,304,539
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
After giving it a lot of thought, we made the decision to discontinue new access to a small number of services, including AWS CodeCommit. While we are no longer onboarding new customers to these services, there are no plans to change the features or experience you get today, including keeping them secure and reliable. We also support migrations to other AWS or third-party solutions better aligned with your evolving needs. Keep the feedback coming. We’re always listening.
60
246
80
603
220,345
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
Ninja -- the new multi-agent personal AI from @NinjaTechAI has four personas (Researcher, Scheduler, Adviser, and Coder), all brought together via a conductor/orchestrator in front. The model was trained on #AWS Trainium chips and deployed on AWS Inferentia2 chips, allowing them to deliver a system that is responsive and affordable. Use Ninja for free: myninja.ai/
1
6
1
22
4,596
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
In 1985, I asked my brother David (age 15) to be the rotoscope model for my new game, Prince of Persia. 38 years later, I've made him a (present day) cartoon character in my new graphic novel memoir REPLAY. jordanmechner.com/en/books/r… Thanks, bro! @01FirstSecond @stripepress @princeofpersia
638
3,574
506
20,989
1,514,923
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
Thank you to everyone who brought this article to our attention. We agree that customers should not have to pay for unauthorized requests that they did not initiate. We’ll have more to share on exactly how we’ll help prevent these charges shortly. #AWS #S3 How an empty S3 bucket can make your AWS bill explode - medium.com/@maciej.pocwierz/…
78
531
190
3,376
1,325,774
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
AWS Snowmobile has been scrubbed from the AWS docs. It appears AWS has deprecated this service. I have added it to github.com/SummitRoute/aws_b…
11
9
5
69
29,834
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
Still one of my fav quotes. Every time someone tells me "serverless has servers!" this shuts them up good. Thanks @gojkoadzic!
4
12
87
7,758
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
The whole cloud repatriation movement didn't make sense to me. But I get it now. Thanks to Wardley Maps. The problem is not that these people don't "get" the cloud or that they are misguided. DHH is a smart man (as much as I don't agree with a lot of what he says). The problem is that we're building products that are at different stages along the evolution axis. (see this for the definitions of "genesis", "custom built", etc. learnwardleymapping.com/clim…) Most of the people in my circle are building things that are on the genesis / custom-built stage. Where there are a lot of uncertainties and opportunities to differentiate against the market incumbents. We're still discovering market fit and our product requirements can pivot at any moment. So we need technologies that offer a lot of flexibility and agility. The cloud and especially serverless technologies are great for these. If you need a new capability (e.g. add AI features to your app), you can just start using a new service and write a few lines of code in a Lambda function to hook things up. In some of my previous jobs, we'd sometimes come up with an idea or experiment, and we'd implement and ship it on the same day. But if you're building an email or instant messenger service then the picture is very different. These are very much known product categories and possibly governed by industry standards and protocols. The product requirements aren't going to change daily. And by nature of them being commodities, it's a competitive space and you need to compete on cost. When you need to be ruthless about efficiency, cloud repatriation makes sense. It's more cost-efficient to run on your own datacenter than renting virtual machines from the cloud IF you have the in-house expertise to do that. Again, you should be thinking in total cost of ownership terms. That's all well and good, but where this movement becomes dangerous is when we extrapolate what works for 37signals and apply that to other businesses on the other end of the evolutionary scale! Anyway, I hope you find some value in this rambling. Here's an article by Simon Wardley that helped me understand what's going on and inspired this post. In this article, Simon talks about why it doesn't make sense to use Agile, Lean or Six Sigma for everything. Because they work better for components at different stages of the evolution. blog.gardeviance.org/2015/06… If you want to learn more about Wardley Maps, you should check out learnwardleymapping.com or read Simon's other blog posts. Have a great weekend. #aws #cloud
12
36
5
176
30,475
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
Here are some trade-offs you should consider when choosing between API Gateway and Lambda Function URLs. 𝗙𝘂𝗻𝗰𝘁𝗶𝗼𝗻 𝗨𝗥𝗟𝘀 𝗣𝗿𝗼𝘀 1. Works naturally with Lambdaliths 2. No API Gateway latency overhead 3. No API Gateway-related costs 4. Response streaming 5. Simplicity - fewer things to configure 6. Can run for 15 mins 𝗙𝘂𝗻𝗰𝘁𝗶𝗼𝗻 𝗨𝗥𝗟𝘀 𝗖𝗼𝗻𝘀 1. You HAVE to use Lambdaliths (and all the shortcomings that come with that) 2. No per endpoint metrics & alarms 3. No direct integration with WAF (but possible through CloudFront) 4. Only AWS_IAM auth 5. Cannot configure different auth per endpoint 𝗪𝗵𝗲𝗿𝗲 𝗙𝘂𝗻𝗰𝘁𝗶𝗼𝗻 𝗨𝗥𝗟𝘀 𝗺𝗮𝗸𝗲 𝘀𝗲𝗻𝘀𝗲 If you WANT to (ie. not forced into it by the choice to use Function URLs) build a Lambdalith and you’re not using any of the additional features that API Gateway offers. Then Function URLs make sense - it’s cheaper, faster and has fewer moving parts. Similarly, if you need to return a large payload (> 10MB) or to run for more than 29s, then Function URLs also make sense IFF you can’t refactor the client-server interaction. Given the limited support for authentication & authorization, its use case is limited to public APIs or internal APIs (ie. not user-facing) in a microservices architecture. 𝗔𝗣𝗜 𝗚𝗮𝘁𝗲𝘄𝗮𝘆 𝗽𝗿𝗼𝘀 1. Works with both Lambdaliths and single-purpose functions 2. Direct integration with most AWS services 3. Can proxy any HTTP API 4. LOTs of additional features - cognito authorizer - usage plans (great for SAAS applications that offer tiered pricing) - built-in request validation with request models - detailed per-endpoint metrics - mock endpoints (useful for endpoints that return static data) - request and response transformation (useful for integrating with 3rd party APIs) - & lots more 𝗔𝗣𝗜 𝗚𝗮𝘁𝗲𝘄𝗮𝘆 𝗰𝗼𝗻𝘀 1. Additional latency overhead 2. Additional cost 3. No response streaming 4. 29s integration limit 5. 10MB response limit 𝗪𝗵𝗲𝗻 𝗔𝗣𝗜 𝗚𝗮𝘁𝗲𝘄𝗮𝘆 𝗺𝗮𝗸𝗲𝘀 𝘀𝗲𝗻𝘀𝗲 Given the vast array of features that API Gateway supports, it makes sense in most cases if you’re OK with the additional cost that comes with the convenience. The 29s and 10MB response limits can be problematic, but they can be mitigated with patterns such as “decoupled invocation” and S3 presigned URLs. When it comes to REST APIs, I prefer API Gateway over Function URLs and ALB. ----- If you liked this, then you might also enjoy the tips and tutorials I publish every week about AWS and serverless. Subscribe to my free newsletter and level up your AWS game: theburningmonk.com/subscribe… #aws #serverless #awslambda
4
17
90
11,333
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
AI-first pull request reviewer with context-aware feedback, line-by-line code suggestions, and real-time chat.

75
337
13
3,190
25,120,753
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
☁️ Detecting Manual AWS Actions How to detect when devs don't use an approved infrastructure-as-code workflow → Devs must access AWS through Okta/AssumeRoleWithSAML → List of mutating AWS actions → Detecting session name bypasses By @arkadiyt arkadiyt.com/2024/02/18/dete…
1
21
85
5,576
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
🛎️ DING! AWS Security Digest 152 is ready! 1️⃣ When AWS invariants aren't [invariant] @__steele 2️⃣ Detecting Manual AWS Actions: An Update! @arkadiyt 3️⃣ How to secure CI/CD roles without burning production to the ground @theburningmonk
1
2
7
1,469
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
Click image > Sign up for newsletter > Learn how to use AI tools for FREE.

471
1,054
42
6,854
10,973,320
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
Patrick Collison is 100% correct here. Great API design is so enduring that not only does it last for humans, but it lasts for AI models. The best APIs work *extremely* well with LLMs & function calling. If invented today, API could easily be named AI Programming Interface.
19
72
13
716
127,295
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
The blog has the math. This is the most conservative approach:: I ping’d all ec2 and global accelerator ips. And got about 6M replies. That alone is: 6 Million addresses x $43.80 is $ 263 Million annually. But the default security groups for ec2 is deny any, or just ssh/rdp. Ie icmp is blocked by default. So the actual number has to be a multiple of that. Question is 2x, 4x8x ? – at Vancouver, British Columbia
2
3
2
10
20,769
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
AWS Marketplace launches self-service flows for sellers to list third-party EKS add-ons AWS Marketplace now provides a self-service listing workflow for AWS ... aws.amazon.com/about-aws/wha…
3
9
1,888
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
Architect defense-in-depth security for generative AI applications using the OWASP Top 10 for LLMs 👉 A common mental model to apply best practices that allow AI/ML teams to move fast without trading off security for speed buff.ly/42lxeyz #AWS #Security #AI #GenAI #ML
12
30
2,788
BELHABIB ⠃⠑⠇⠓⠁⠃⠊⠃AMINE ⠁⠍⠊⠝⠑ retweeted
The PartyRock #generativeAI Hackathon by #AWS starts now! 📣 Learn how to build fun & intuitive apps without coding for a chance to win cash prizes and AWS credits. 🏆 #AI Don't forget your mug of hot cocoa, tea, or coffee to keep warm. 🧤☕️🧣 🔗 go.aws/3w16Uxy
47
38
6
106
34,010