12 Things You Should (and Shouldn't) Do in AWS - Talk Python to Me Ep. 559
Your site is down. It's 3am. Is it a bug, a bill, or a breach? You can't tell yet, and everyone is watching you find out. Matt Lea has spent fifteen years being the person companies call when an outage is costing them real money per hour, and his whole argument is that everything you'd want in that moment gets decided months earlier, on ordinary afternoons, when someone chose the convenient thing. We walk his top twelve dos and don'ts in AWS - infrastructure as code, IAM roles instead of access keys, private subnets, no wildcards, no public buckets - and I push on which of them actually matter if you're one person on a small VPS. Then we get to Cloud War Games, where Matt breaks things on purpose so your team's first real incident isn't their first incident. Let's get into it. ▬▬▬▬ About the podcast ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ This video is the uncut, live recording of the Talk Python To Me podcast ( https://talkpython.fm ). We cover Python-focused topics every week and publish the edited and polished version in audio form. Subscribe in your podcast player of choice (100% free) at https://talkpython.fm/subscribe. ▬▬▬▬ Guests ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ Matt Lea ▬▬▬▬ Links and resources from the show ▬▬▬▬▬▬▬▬▬▬▬▬ Talk Python Certificates: https://training.talkpython.fm/certificates Schematical: https://schematical.com CloudWarGames.com: https://cloudwargames.com Zero to Hero on AWS Security: https://www.oreilly.com/videos/zero-to-hero/0642572107789/ Repo: https://github.com/schematical/sc-terraform/tree/main/_course Custom Wheel Offset: https://customwheeloffset.com 2012 TechCrunch Disrupt Hackathon: http://techcrunch.com/2012/09/09/meet-the-disrupt-sf-2012-hackathon-winners-livebolt-takes-grand-prize-auctopus-and-heatdata-are-runners-up/ tech comics: https://schematical.com/comics shhgit: https://github.com/eth0izzle/shhgit Zero Trust in 200ms: Implementing Identity-Per-Transaction: https://us.pycon.org/2026/schedule/presentation/140/ Coolify: https://coolify.io/ returned to full GA Nov 2025: https://aws.amazon.com/blogs/devops/aws-codecommit-returns-to-general-availability Signed URLs/cookies: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-overview.html Cloudflare: https://www.cloudflare.com/ Bunny Shield: https://bunny.net/shield/ Cloud War Games One: https://www.youtube.com/watch?v=91z1pn7fEjM Cloud War Games Two: https://www.youtube.com/watch?v=xHXjiTi4nCA LinkedIn: https://linkedin.com/in/schematical YouTube: https://youtube.com/schematical KnocKnoc: https://knocknoc.io ▬▬▬▬ Dive deeper ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ Listen to the Talk Python To Me podcast at https://talkpython.fm and explore over 275 hours of Python courses at https://training.talkpython.fm/courses. ▬▬▬▬ Follow us on Social ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ Mastodon: Michael - https://fosstodon.org/@mkennedy & Talk Python - https://fosstodon.org/@talkpython Bluesky: Michael - https://bsky.app/profile/mkennedy.codes & Talk Python - https://bsky.app/profile/talkpython.fm X: Michael - https://x.com/mkennedy & Talk Python - https://x.com/talkpython