mattgillard

Amazon Bedrock provides OpenAI compatible API endpoints for model inference, powered by Mantle, a distributed inference engine for large-scale machine learning model serving. Mantle is designed with Zero Operator Access required - which basically means there is no technical way for an AWS operator to access the systems that power Mantle - everything is managed via automation. See blog for details https://aws.amazon.com/blogs/machine-learning/exploring-the-zero-operator-access-design-of-mantle/.

User guide and API info here https://docs.aws.amazon.com/bedrock/latest/userguide/bedrock-mantle.html

Supported regions - ensure you call the correct endpoint for the region you want: https://docs.aws.amazon.com/bedrock/latest/userguide/bedrock-mantle.html#bedrock-mantle-supported

Below I use glow for printing nicely the markdown the LLM gives you. Install for your platform https://github.com/charmbracelet/glow

Also use uv for painless Python scripts.

mattgillard

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ec2:Create*",
                "ec2:Describe*",
                "ec2:Modify*",
                "ec2:Delete*",

mattgillard

name: Pull Request workflow

on:
  - pull_request

jobs:
  cloudformation-linter:
    runs-on: ubuntu-latest

    steps:

mattgillard

## Input is like:
## curl --request POST "https://xxx.execute-api.ap-southeast-2.amazonaws.com/Prod/resource?MessageGroupId=1114" -H "Content-Type: application/json" --data-raw "{\"mykey\":[\"A\",\"B\"]}"
##
## If you get this error:
## {
##    "Error": {
##        "Code": "AccessDenied",
##        "Message": "Access to the resource https://sqs.ap-southeast-2.amazonaws.com/123456789012/myqueue.fifo is denied.",
##        "Type": "Sender"
##    },

mattgillard

#! /bin/bash

AWS_ACCESS_KEY_ID="$(aws configure get aws_access_key_id)"
AWS_SECRET_ACCESS_KEY="$(aws configure get aws_secret_access_key)"
AWS_SESSION_TOKEN=$(aws configure get aws_session_token)
AWS_REGION=$(aws configure get region)

# from https://gist.github.com/slawekzachcial/fe23184124763dfb82f233b5dde2394b?permalink_comment_id=4292171#gistcomment-4292171

curl --request GET -v \

mattgillard

import struct
import pyodbc
import boto3

# IMPORTANT: Install Microsoft ODBC drivers first for your platform - see: https://learn.microsoft.com/en-us/sql/connect/odbc/linux-mac/install-microsoft-odbc-driver-sql-server-macos?view=sql-server-ver16
# Just an install is enough for pyodbc to see them.
# Also, on M1 mac need to use 4.0.34 release of pyodbc
# pip3.11 install pyodbc==4.0.34
# v4.0.35 is broken

mattgillard

using Microsoft.Data.SqlClient;
using Amazon.RDS;

/*

This code is a sample for generating an RDS auth token to use for IAM authentication with MS SQL server.
ref: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-proxy-setup.html

Below steps assumes you stored DB user creds in secrets manager when deploying RDS.

mattgillard

package main

/*
Notes:

This demonstrates how to use the native fedauth functionality with AWS RDS Proxy for MS SQL server.
Connection string is simple as the access token is retrieved via the token provider in NewConnectorWithAccessTokenProvider.

How to use (make sure you have an active IAM user api key or role via the regular methods):
1. Create an RDS MS SQL Server (Express is fine for cheapness)

mattgillard

aws --region=us-east-1 iam simulate-principal-policy \
--context-entries ContextKeyName=aws:RequestedRegion,ContextKeyValues=us-east-1,ContextKeyType=string \
--policy-source-arn=arn:aws:iam::123456789:role/OrganizationAccountAccessRole \
--action-names s3:PutObject

mattgillard

# aws cloudformation list-types --type RESOURCE --visibility PUBLIC --provisioning-type NON_PROVISIONABLE --filters Category=AWS_TYPES|grep -i TypeName > /tmp/ccapi-notcompatible.txt
#
            "TypeName": "AWS::AmazonMQ::Broker",
            "TypeName": "AWS::AmazonMQ::Configuration",
            "TypeName": "AWS::AmazonMQ::ConfigurationAssociation",
            "TypeName": "AWS::ApiGateway::Deployment",
            "TypeName": "AWS::ApiGateway::DocumentationPart",
            "TypeName": "AWS::ApiGateway::GatewayResponse",
            "TypeName": "AWS::ApiGateway::RestApi",
            "TypeName": "AWS::ApiGateway::VpcLink",