Yes. I had a project that was built with Elastic Beanstalk and was trying to move off it, but never got there. Amazon Linux and its package management was not great and I missed Debian/CentOS/Ubuntu.

Yes I was hit by waiting for Elastic Beanstalk to update nginx for the succession of fixes. Wasn't fun being pestered by my security team.

And now with AI answers...

Years ago I worked at a company that had a nightly cronjob for yum to apply security updates (with a couple of important exceptions that were handled manually). Always seemed very iffy to me for such a big company where downtime was very expensive.

Yeah with flexbox and fit-content/max-content is pretty fine now.

+1 For Amazon Route 53 - one of the services that they don't nickel and dime you on.

Very surprised they don’t charge you per GB of DNS traffic and per million DNS requests

They do the latter, it's $0.40 per million queries.

(And since the records are size-limited, per-GB is roughly the same thing.)

"Except for Alias A/AAAA records mapped to AWS services listed below, you incur charges for every DNS query answered by the Route 53 service."

https://aws.amazon.com/route53/pricing/

I was just checking them out as a possible place to move my DNS names to. Looks like it's a whopping $0.50/month if you use their nameservers per address, plus $0.40 per million queries, prorated, So probably tough to spend more than $1 a month on without having Google-scale and spending way more than that on servers.

Yeah me too - they charge for name servers but I figured out after a while that Linode did the same thing for none of the cost.

But for domain registrations alone it's fine.

is not Amazon Route 53 more expensive than Cloudflare?

Cloudflare requires you use their name servers

Yeah I've worked on a website built on a bunch of Lambdas - something like 150 Lambdas that tied themselves in knots with both HTTP requests and message queues.

I ended up moving a bunch of the logic into an ECS-hosted monolith. Probably cost a bit more (warm-up plugins meant that no customers still cost us money) but it vastly simplified things and made scaling up easier (can't set scaling thresholds with Lambda).

Interesting - I've only ever used it for unit tests and the only issue I had was (unsurprisingly) restoring from a back-up not being supported.

Yep I see this at work pretty regularly - a SpringBoot log file full of requests for all sorts of things (mostly WordPress but I think some IIS as well).

Yeah I wanted to use alg none for some unit tests once (it was easier than setting up the next lowest tier security option) but whichever Java library I was using had completely disabled it. I could see it had been supported at some point but it had been updated so that it couldn't be enabled at all.

Yes, that’s a good thing. That alg:none might be easy in tests is not a good reason for a weak mode in the real code and spec.

Been there, done that, wrote the stub/mock and ended up with the better test. :)

Wasn’t it like a month ago when Sharepoint still accepted alg:none? I guess that proves they’re not using Java :)