Notes

Things I've learned, and need to remember - so future me has a chance of using the knowledge

Things I’ve learned, and need to remember - so future me has a chance of using the knowledge.

Warning: These notes are mine, collected over time. Just because I’ve said it here, doesn’t mean it’s the absolute best practice. It worked for me, it might work for you.

If you’re interested, there’s an RSS feed too.

Forcing a specific CA chain

Oct 20, 2026

When a CA has its certificates removed from public trust (as happened today), applications don’t always know immediately. TLDR Just set …

#security

Enforce TLS for S3

Dec 10, 2024

IAM policies can have a Condition, which must pass for the policy to apply. This can be used to require HTTPS and/or the TLS version: { …

#AWS

Create presigned URLs using AWS CLI

Oct 29, 2024

Sometimes, you only have access to the aws CLI, and need to generate presigned URLs to S3 objects. The aws s3 presign command will do this, creating …

#AWS

Optimising GIFs

Mar 12, 2024

Optimising images is a fairly well understood problem, with lots of different solutions and tools. Images can be resized, their pixels grouped, or …

#media

Scheduler-only Heroku apps

Mar 11, 2024

If everything you run is already in Heroku, it can be useful to run even simple scheduled tasks there too, to save integrating and running services on …

#heroku

View all 27 →