Verify Slack requests in AWS Lambda and Python

Posted on Sat, 30 June 2018 in development • Tagged with development, python, aws, lambda, serverless, slack, security

Slack announced yesterday a new way to verify the HTTP requests for e.g. Slash commands and Events API it sends to web server. In this article I will show how to implement this in Python and AWS Lambda.

Continue reading

Production Checklist

Posted on Mon, 16 October 2017 in development • Tagged with development, ops, monitoring, logging, architecture, security

Designing and developing applications is fun. When the time to go live nears, there are couple of things you want to have answers ready and documented.

Continue reading

Protect SSH with Fail2ban on CentOS 7

Posted on Sun, 02 April 2017 in development • Tagged with linux, security, worknotes

At the very moment, you expose your new Linux server to the internet, it starts to get automated SSH login attempts. There can easily be thousands of them in a short time period. Is there something we can do about this?

Continue reading