Pulumi
Where to block PromEx's /metrics
· 3 mins
PromEx's plug serves /metrics on the Phoenix app's public port. Why blocking it at the load balancer beats an ingress-nginx snippet, and when a separate metrics port is simpler.
NIST and AWS Password Policies
· 2 mins
What NIST 800-63 section 5 says about passwords, where the AWS account password policy cannot follow it, and the Pulumi resource that sets what it can.