EthanLabs
Loading amazing content...
Loading amazing content...
Thoughts on web development, technology trends, and best practices
3 posts tagged with aws
A Cognito User Pool's immutable schema attributes hit two separate provider-level bugs — one that corrupts Pulumi's own recorded state on refresh, one that reports a successful update while silently changing nothing. Neither is fixable in application code; both needed a documented, permanent distrust of one narrow resource
An occasional orphaned user row looked like DynamoDB read-consistency lag. It was actually Lambda's own async-invocation retry — a second mechanism stacked underneath EventBridge's, firing about a minute later on the same trace ID and creating a duplicate Cognito user for a tenant already mid-deletion
Instead of trusting every handler to filter by `tenantId`, InvocaCare pushes tenant isolation down to AWS IAM itself — a Lambda authorizer calls STS AssumeRole to hand each request credentials that are structurally incapable of reading another tenant's data