A guide to avoiding AWS WAF XSS Cookie false positives. — The JavaScript ‘on’ keyword within any cookie is enough to trigger a false positive in AWS WAF-managed rules. Overview — What is XSS? Cross-Site Scripting (XSS) attacks are a type of injection where malicious scripts are injected into otherwise benign and trusted websites. The attacker can send malicious code (typically JavaScript) to a different end-user.

A guide on how to set up DNS records SPF, DKIM, DMARC in AWS SES and avoiding spam folders. — If you need an overview of SPF, DKIM, DMARC and SMTP From headers, or you’d like to understand why you’re configuring each step then please refer to my other introductory Medium article. Step 1 — Add an SPF Record Step 2 — Update your DNS to verify your domain and…

A guide on using SPF, DKIM and DMARC to improve email deliverability and stop spoofers from hijacking your trust. — First, let's look at what happens when you don’t have any special email related entries in your DNS records — anyone can send emails pretending to be from your server and any email service provider (such as Gmail) could pass these emails directly to the recipient's email inbox, or if…

This article details the steps required to include your custom application logs from ElasticBeanstalk provisioned EC2 instances to the CloudWatch Logs. The main steps are as follows: Step 1. Set up the IAM Policy & role Step 2. Determine your application log paths and files Step 3. …

This article details my experience in evolving my application logging through three different AWS logging mechanisms, with the pros and cons of each of them. The three different AWS logging mechanisms: 1. AWS Elastic Beanstalk console 2. Rotating logs to S3 3. Log Streaming to CloudWatch Logs Route 1: AWS…

The Problem If you’ve recently received an email from Amazon Web Services informing you that you’re using the deprecated managed policy called AWSElasticBeanstalkService and that you should be using the newer policy named <takes a deep breath> AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy then this blog will help you understand what it means and what…

UPDATED 16th December 2021 It’s great to see that Stripe has added a new automated tax charging feature to simplify the convoluted process. I recommend that you check out the Stripe article after or instead of my article. Building Stripe Tax As the internet economy grows, businesses are finding tax regulation to be increasingly complex, prohibitive to growth…stripe.com I’m a software developer living in the UK and selling a digital…

UPDATED — 14th January 2021 The bug has now been closed as fixed by Visual Studio — please ensure you have the latest version installed. UPDATED — installed Big Sur? First ensure that you have updated Visual Studio to version 8.8 release 4 (Wednesday 16th December 2020). This will resolve…