AWS KMS

• Getting hands on with Sigstore Cosign on AWS

  Jan 31, 2023 |  13 minute read

  Getting hands on with Sigstore Cosign on AWS I am currently putting together some content around how you can use a number of open source tools to help build a stronger defence against common software supply chain attacks. In this blog post, I look at emerging tools from Sigstore, and focus in this post on Cosign, a tool that supports container image signing, verification, and storage in an Open Container Initiative (OCI) registry.

  • Amazon ECR
  • AWS KMS
  • Cosign
  • Sigstore
  • Docker
  • sget

• Setting up MWAA to use a KMS key

  Dec 14, 2021 |  6 minute read

  Introduction In a previous post, I shared how you can using AWS CDK to provision your Apache Airflow environments using the Managed Workflows for Apache Airflow service (MWAA). I was contacted this week by Michael Grabenstein, who flagged an issue with the code in that post. The post used code that configured a kms key for the MWAA environment, but when trying to deploy the app it would fail with the following error:

  • Apache Airflow
  • mwaa
  • AWS KMS