Fabian Lee : Software Engineer

AWS: using Certificate Manager to generate a TLS certificate for a delegated subdomain

February 8, 2026
Categories: aws

AWS Certificate Manager can generate custom TLS certificates that can be used by AWS resources to enable secure TLS communication. In this article, I will delegate authority of a custom subdomain to AWS Route 53, then allow AWS ACM to generate certificates for this subdomain. This subdomain and certificate can then be used within the … AWS: using Certificate Manager to generate a TLS certificate for a delegated subdomain

GitHub: workflow authentication to AWS using OIDC

January 27, 2026
Categories: aws, CI/CD

GitHub Actions provide the ability to define a build workflow, which per your requirements may include calls to AWS infrastructure. However, for those AWS calls to work you need to establish an IAM identity. In the past, you would have to rely on AWS access keys set in project variables/secrets, or applying an IAM role … GitHub: workflow authentication to AWS using OIDC

GitLab: pipeline authentication to AWS using OIDC

January 26, 2026
Categories: aws, CI/CD

GitLab Pipelines provide the ability to define a build workflow, which per your requirements may include calls to AWS infrastructure. However, for those AWS calls to work you need to establish an IAM identity. In the past, you would have to rely on AWS access keys in CI/CD variables, or applying an IAM role to … GitLab: pipeline authentication to AWS using OIDC

AWS: retrieving standalone database instances by filtering out those with cluster membership

January 11, 2026
Categories: aws, Scripting

The AWS CLI provides a way to query for DB instances using “aws rds describe-db-instances“, but this will return all DB instances including those that are members of a cluster. If we want to query for just the standalone DB instances (not part of a cluster), here are a couple of options. You can use … AWS: retrieving standalone database instances by filtering out those with cluster membership