Joining CloudFront logs with JA4 fingerprints at ingestion time to classify every request — verified bots, spoofed crawlers, suspicious scrapers — before it reaches the dashboard.
Read more →
How to capture TLS fingerprints at the CloudFront edge, route them through a serverless pipeline, and query them in Athena — using a CloudFront Function, a bash Lambda, SNS, Firehose, and S3.
Read more →
User-Agent strings are trivially forged. TLS handshakes are not. How JA4 fingerprinting combined with ASN classification exposes distributed scraper clusters that look exactly like real browsers.
Read more →
Raw requests are interesting, but how do we distinguish crawlers, retrieval systems, previews and humans?
Read more →
Building a Visibility Layer for a Static Website with CloudFront, Athena and Grafana
Read more →
First-party web analytics with zero dependencies: browser fetch → bash Lambda → curl SigV4 → SNS → Firehose → partitioned S3 → Athena. Under $1/month.
Read more →
How migrating a bespoke OpenSearch ingestion pipeline led to two reusable Terraform modules for event analytics
Read more →