DEV Community: Sundus Hussain

PulseGuard: Real-time Heart Monitoring with eBPF & Cilium

Sundus Hussain — Sat, 22 Nov 2025 17:36:17 +0000

**What if we could detect heart attacks early — not just through
medical devices, but through observability in the cloud?

PulseGuard: Real-time Heart Monitoring with eBPF & Cilium

PulseGuard demonstrates how eBPF-based observability can be used for real-time health monitoring, detecting anomalies (like abnormal pulse), and sending alerts.

PulseGuard simulates continuous heart rate monitoring, detects irregular pulse patterns, and integrates with eBPF and Cilium to show how system-level observability tools can detect, trace, and alert health-related anomalies in real-time.

What is eBPF & Cilium?
eBPF (extended Berkeley Packet Filter) is a revolutionary technology within the Linux kernel that allows for the safe and efficient execution of custom programs in the kernel space. Traditionally, kernel modifications required recompiling the kernel or loading kernel modules, which could be complex and risky. eBPF provides a mechanism to run sandboxed programs within the kernel, enabling dynamic programmability and extending its functionality without modifying the kernel source code. This capability is particularly powerful for networking, security, and observability, allowing for high-performance packet processing, custom security policies, and deep insights into system behavior.

Cilium is an open-source, cloud-native networking, security, and observability solution specifically designed for containerized workloads, particularly in Kubernetes environments. It leverages the power of eBPF to provide secure and high-performance communication between microservices. Instead of relying on traditional networking constructs like iptables, Cilium utilizes eBPF programs to enforce network policies, perform load balancing, and gather detailed network telemetry directly within the Linux kernel.

Key aspects of Cilium's use of eBPF:
High-performance Networking: Cilium replaces kube-proxy's iptables rules with eBPF programs for efficient service load balancing, reducing overhead and improving network performance.
Identity-based Security: It enforces network security policies based on workload identities (e.g., Kubernetes labels) rather than IP addresses, providing a more granular and robust security model.
Deep Observability: Through its Hubble component, Cilium provides rich network observability by collecting and visualizing network flow data, dropped packets, and policy enforcement events, all powered by eBPF.
Advanced Features: Cilium also offers features like Layer 7 policy enforcement, transparent encryption, and service mesh capabilities, all built upon its eBPF foundation.
In essence, eBPF is the underlying kernel technology that allows for programmable and extensible kernel functionality, while Cilium is a specific application that harnesses eBPF to deliver advanced networking, security, and observability features for modern cloud-native environments.

The PulseGuard smart band, worn on the wrist, continuously tracks the
user’s heart rate in real time. The collected data is sent to a Flask web
application, which acts as the backend server to receive, process, and
visualize pulse readings.

To ensure efficient performance and deep visibility, eBPF is integrated at the
kernel level to monitor network and system metrics, such as data packet
latency and response time between the device, API, and cloud services.

Using Cilium and Hubble, PulseGuard provides advanced network
observability and security insights. Hubble generates live charts and
dashboards that display heartbeat data, latency trends, and alert frequency
allowing both developers and healthcare providers to monitor system health
in real time.

When an abnormal pulse is detected, AWS Lambda processes the data and triggers AWS SNS to send instant notifications to the loved ones’ phones or emails. Meanwhile, CloudWatch tracks all alerts and ensures the entire pipeline from the wristband to notification runs smoothly and reliably.

Why PulseGuard Matters: Survey Insights &
Statistics

According to the World Health
Organization (WHO), cardiovascular
diseases (CVDs), including heart
attacks, are the leading cause of death
globally, accounting for an estimated
19.8 million deaths in 2022.

In the United States alone,
approximately 805,000 heart attacks
occur each year, of which around
605,000 are first-time events and
200,000 are recurrent attacks.

So what does eBPF do here?

eBPF helps PulseGuard monitor network and system activity at the kernel level,
providing deep observability, performance insights, and enhanced security for the
app’s data flow.

Kernel-Level Monitoring:
eBPF runs inside the Linux kernel and can observe every network packet or system call without changing the app’s code. For PulseGuard, this means it can track how heart-rate data is sent, processed, or transmitted securely.

Real-Time Performance Insights:
eBPF collects metrics like latency, CPU usage, and memory performance for the processes handling PulseGuard data. This helps detect delays or spikes that could affect real-time monitoring.

Security & Data Protection:
eBPF can detect unusual system or network behaviors like unauthorized data access or suspicious traffic ensuring PulseGuard’s sensitive health data remains secure.

Efficient Observability:
Instead of using heavy monitoring agents, eBPF provides lightweight, event-driven insights directly from the kernel so PulseGuard runs faster and more efficiently.

References

eBPF Foundation. eBPF – Introduction, Tutorials & Community Resources. https://ebpf.io

Datadog. What is eBPF? How it Works & Use Cases. https://www.datadoghq.com/knowledge-center/ebpf/

Isovalent. eBPF‑Powered Kubernetes Networking and Security. https://www.isovalent.com

Cilium Project. Cilium – Cloud Native, eBPF-based Networking, Observability, and Security. https://cilium.io

YouTube - https://www.youtube.com/watch?v=3cqCmtg-TOo

Devpost. eBPF Summit Hackathon 2025. https://ebpf-summit-2025.devpost.com

iStock. https://www.istockphoto.com

Learn AWS Basics First: A Beginner’s Guide to Cloud Confidence

Sundus Hussain — Mon, 14 Jul 2025 14:43:54 +0000

Whether you're a curious learner, a career returner, or a tech enthusiast exploring new horizons — Amazon Web Services (AWS) is the perfect launchpad into the cloud world.

But before jumping into certifications or advanced tools, it's essential to start with the basics.

What is AWS?
AWS (Amazon Web Services) is the world’s most widely used cloud platform, offering over 200 services — from storage and servers to databases, AI, security, and beyond.

Instead of buying and maintaining physical servers, AWS lets you use computing power on-demand, making it affordable and scalable for startups, enterprises, and even solo learners.

What Should You Learn First?
Here’s your AWS basics roadmap:

What is Cloud Computing? Learn about IaaS, PaaS, SaaS

Understand public, private, and hybrid cloud

Know the benefits: cost-saving, scalability, flexibility

Core AWS Services to Know: EC2 (Elastic Compute Cloud) – Think of it as a virtual computer

S3 (Simple Storage Service) – For storing files and data

RDS (Relational Database Service) – Managed databases like MySQL/PostgreSQL

Lambda – Serverless computing to run code without managing servers

IAM (Identity & Access Management) – Manage users, roles, and security

The AWS Global Infrastructure
Regions, Availability Zones, and Edge Locations
The AWS Free Tier
Use free services for 12 months with limited usage — perfect for hands-on learning

How to Start Practicing?
Sign up for the AWS Free Tier
Use AWS Skill Builder – AWS’s official free learning platform
Try hands-on labs with Qwiklabs, or YouTube tutorials
Build simple projects (like a static website on S3, or a Lambda function)

Why Should You Learn AWS?
In-demand skill in cloud, DevOps, AI, and backend roles

Great for freelancers, remote workers, and those starting their careers

Helps women re-entering tech build confidence with real skills

It's the foundation for certifications (AWS Cloud Practitioner, Solutions Architect, etc.)

Final Thoughts
Learning AWS might feel overwhelming at first — but starting with the basics gives you the clarity and confidence to grow.

It’s not just about getting certified. It’s about building real-world skills and believing in your ability to create, contribute, and lead in tech.

So take the first step — log in, explore, and launch your cloud journey.

Start simple. Stay consistent. You’re building something powerful.

Building a Memory Matching Game Using Amazon Q CLI & Python

Sundus Hussain — Thu, 19 Jun 2025 11:04:54 +0000

Building a Memory Matching Game with Amazon Q CLI + Pygame

Introduction:
In this blog, I walk through how I built a 2D memory matching game using Amazon Q CLI, an AI-powered coding assistant by AWS, combined with Python and the Pygame library.

As someone exploring the intersection of AI and interactive tech, I was amazed at how Amazon Q CLI guided me through every step — from game logic to visual layout — simply by chatting with it. It was like pair programming with an AI mentor.

This project was part of the “Build Games with Amazon Q CLI” challenge, and it opened up a new creative path for me — showing how AI can help bring even small, personal game ideas to life quickly and powerfully.

How I Got Started:

To begin, I followed these steps:

Step 1: Set up an AWS Builder ID
You need this to use Amazon Q CLI and join the AWS Builder community. It only takes a few minutes:
https://community.aws

Step 2: Install Amazon Q CLI
I installed the CLI on my local machine using the official instructions:

For Windows

For Linux

Step 3: Install Python + Pygame
I used Python (3.x) and installed Pygame with:

bash
Copy
Edit
pip install pygame

With these tools ready, I opened Amazon Q CLI, typed in my game prompt, and began building.

What I Built:

I created a Memory Matching Game — a fun, visual challenge where the player flips over cards to find matching pairs.

The gameplay includes:

A grid of face-down cards
On click, two cards are revealed
If they match: they stay visible; if not, they flip back
The game ends when all pairs are matched
This game is perfect for kids, educators, and even beginners learning pattern recognition.

How I Built It Using Amazon Q CLI:

In the CLI, I prompted:

_"Create a simple 2D memory matching game using Python and Pygame."
_
Amazon Q responded with step-by-step code that handled:

Setting up the display window
Drawing cards in a grid
Detecting user clicks
Matching logic with memory resets
Showing success messages when the game was complete

I made a few changes to:

Adjust the colors
Add font styling
Replace symbols on the cards
Improve timing for mismatched card resets

This was one of the smoothest experiences I’ve had turning an idea into a game — thanks to the conversational nature of Amazon Q CLI.

Watch the game in action here:
🎥 https://youtu.be/t7_quSR229w

Reflections:

Using Amazon Q CLI truly changed the way I think about coding.

Rather than starting from scratch, I could collaborate with AI, adapt what it gave me, and learn while building. It felt empowering — especially as someone passionate about building tech that’s accessible and supportive of real-life needs.

I could see how this would help:

New coders learning Python
Teachers creating simple educational games
Parents introducing kids to game logic
For me, it also connects to my deeper mission through MDBot for Her — supporting women in tech by encouraging creativity, visibility, and growth.

Try It Yourself!

Want to build a game with just a few prompts?

Start chatting with Amazon Q CLI and see how far your imagination goes.
This campaign runs until 30 June 2025, and if you’re in Asia Pacific, Japan, or Greater China, you’re eligible for a free Amazon Q T-shirt!

Learn more and get started here:

https://community.aws

AmazonQCLI ##Python ##GameDev ##Pygame ##WomenInTech ##MDBotForHer ##AIinEducation ##AWSCommunity

Understanding the Challenges and Limitations of Kubernetes Today

Sundus Hussain — Sat, 17 May 2025 11:41:21 +0000

Introduction
Kubernetes, also known as K8s, is an open source system for automating deployment, scaling, and management of containerized applications.
Kubernetes has become the de facto standard for container orchestration, powering modern cloud-native applications worldwide. Its flexibility, scalability, and rich ecosystem have driven rapid adoption across enterprises of all sizes. However, as powerful as Kubernetes is, it is not without its challenges and limitations. Understanding these hurdles is essential for teams looking to adopt or optimize their Kubernetes environments effectively.

Why Kubernetes Matters Today?
Its active open-source community and support from all major cloud providers (AWS, Azure, GCP) make it a future-proof choice for modern infrastructure.

Kubernetes Cluster Architecture
Kubernetes uses a client-server setup with two main types of machines: a master node and worker nodes. The master node runs important components like the API Server, controller manager, scheduler, and the etcd database that stores the cluster’s data. Worker nodes run the applications and include tools like kubelet (which talks to the master), kube-proxy (handles networking), and a container runtime like Docker to manage containers.

Kubernetes Components
Kubernetes has two main groups of components:

Control Plane: This manages the whole cluster, controlling the worker nodes and making decisions about the system.

Worker Nodes: These are the machines where your application containers run.

Control Plane Components
The control plane is like the brain of the Kubernetes cluster — it manages the overall health and operation of the cluster. It handles tasks like creating, deleting, and scaling pods. There are four main parts:

Kube-API Server
This is the main entry point for all commands and requests. It listens for instructions from tools like kubectl and makes sure they’re valid before passing them on. No action happens without going through the API server.

Kube-Scheduler
When a new pod needs to be created, the scheduler decides which worker node is the best fit for it, optimizing the cluster’s efficiency.

Kube-Controller-Manager
This runs different controllers that keep the cluster in the desired state. For example, it makes sure the right number of pod copies are running and checks if nodes are healthy.

etcd
This is the cluster’s database. It stores all the information about the current state of the cluster and shares it with other components so they know what’s going on.

Node Components
Nodes are the machines where your applications actually run inside containers. Each node runs several key processes:

Container Runtime
This is the software that runs the actual containers (like Docker).

kubelet
This agent runs on every node and makes sure the containers are running inside pods. It talks to the control plane and container runtime.

kube-proxy
This handles network traffic, making sure requests reach the right pods on the node.

The Kubernetes Network Model
Kubernetes uses a simple but powerful network model with these key points:

Every pod gets its own unique IP address.

Containers inside the same pod share that pod IP and can communicate freely.

Pods can communicate directly with all other pods in the cluster using their IPs—no need for NAT (Network Address Translation).

Network isolation (controlling which pods can talk to each other) is done through network policies, not by complicating the network itself.

Because of this, pods behave a lot like virtual machines or hosts, each having their own IP. Containers inside pods are like processes running on that host, sharing the same network space and IP address. This “flat network” design makes it easier to move applications from traditional VMs to Kubernetes pods.

Though rarely needed, Kubernetes also supports mapping host machine ports to pods or running pods directly in the host network namespace, sharing the host’s IP address.

Kubernetes Network Implementations
Kubernetes includes a basic network solution called kubenet to provide pod connectivity, but most users rely on third-party network plugins that connect via the CNI (Container Network Interface) API.

There are two main types of CNI plugins:

Network plugins: Connect pods to the network.

IPAM (IP Address Management) plugins: Allocate IP addresses to pods.

Storage in Kubernetes
Persistent Volumes (PV) and Persistent Volume Claims (PVC): PVs are storage resources in the cluster, and PVCs are requests for those storage volumes by pods.

Storage Classes and Dynamic Provisioning: Storage Classes define types of storage (like SSD or HDD), enabling Kubernetes to automatically create volumes as needed.

StatefulSets: Used for running stateful applications that need stable network IDs and persistent storage, like databases.

Scheduling and Scaling
Kubernetes Scheduler: Decides which node a new pod should run on based on resource availability and policies.

Horizontal Pod Autoscaling: Automatically adjusts the number of pod replicas based on CPU or custom metrics.

Vertical Pod Autoscaling: Adjusts resource requests (CPU/memory) of pods based on usage.

Cluster Autoscaling: Automatically adds or removes worker nodes depending on workload demand.

Security in Kubernetes
Authentication and Authorization: Ensures only trusted users and services can access the cluster.

Role-Based Access Control (RBAC): Defines who can do what within the cluster.

Pod Security Policies and Admission Controllers: Enforce security standards on pods before they run.

Secrets Management: Securely stores sensitive data like passwords and API keys.

Monitoring, Logging, and Troubleshooting
Monitoring Tools: Tools like Prometheus and Grafana help track cluster and application health.

Logging Solutions: ELK Stack (Elasticsearch, Logstash, Kibana) and Fluentd collect and analyze logs.

Debugging Techniques: Methods and tools to identify and fix issues in Kubernetes environments.

Running Kubernetes Across Multiple Clouds: Benefits, Challenges, and Solutions

What is Kubernetes Multi-Cloud?
Many organizations run multiple Kubernetes clusters for different purposes like development, testing, and production. Some want to run these clusters across different public and private clouds — this is called multi-cloud or hybrid cloud.

Benefits of Multi-Cloud
Avoid Vendor Lock-in: You’re not tied to one cloud provider. If one has issues, you can move to another.

Cost Optimization: Run workloads where cloud costs are lowest.

Better Availability: If one cloud goes down, traffic can failover to another cloud, improving reliability.

Workload Isolation: You can isolate different projects, teams, or apps by running them on different clouds or clusters.

Challenges of Multi-Cloud Kubernetes
Managing identity and policy consistency across multiple providers can become a major operational burden.

Different APIs: Each cloud has unique ways to manage resources, making automation complex.

Monitoring Differences: Each cloud provides different monitoring tools and data formats.

Networking: Connecting pods across different cloud networks is tricky.

Security: Managing security across public networks needs extra care.

Best Practices for Multi-Cloud Kubernetes
Standardize Configurations: Use consistent settings across clouds.

Use Automation: Adopt GitOps and Infrastructure as Code (IaC) for easy management.

Strong Security: Implement RBAC, encryption, and strict policies.

Cloud-Agnostic Tools: Use Kubernetes-native tools like service meshes and Grafana for monitoring.

Managing Hybrid and Multi-Cloud Kubernetes

Managing multiple clusters requires unified governance, observability, and automation.
Use multi-cloud service meshes for smooth networking and autoscaling to optimize costs. Automation with GitOps and CI/CD pipelines is key to managing complexity.

Kubernetes Multi-Cloud Solutions

To overcome technical challenges:

Use VPNs or networking tools like Tungsten Fabric or Calico to connect clusters.

Avoid relying on cloud-specific APIs to keep your setup flexible.

Use multi-cloud-ready Kubernetes platforms like Mirantis Kubernetes Engine, which work on AWS, Google Cloud, VMware, and more, so workloads can move freely.

Emerging Solutions and Innovations in Kubernetes

Cloud-Native Network Solutions
Innovative solutions like the Aviatrix Kubernetes Firewall are redefining secure networking in cloud-native environments. These tools provide granular, pod-level network security controls that go beyond traditional firewall capabilities. They integrate seamlessly with Kubernetes and enable centralized policy management across hybrid and multi-cloud setups, addressing the challenge of consistent security enforcement.

Enhanced Security Approaches
New security paradigms are emerging to better protect Kubernetes workloads:

Zero Trust Networking: Enforcing strict identity and access controls for every component in the cluster.

Runtime Security Tools (e.g., Falco, Aqua Security): Monitor container behavior in real-time to detect anomalies or breaches.

Shift-Left Security: Integrating security earlier in the CI/CD pipeline using tools like Trivy for vulnerability scanning and Kyverno for policy enforcement.

Improved Observability Tools
Modern observability solutions offer deeper insights into Kubernetes environments:

OpenTelemetry: A unified standard for collecting traces, metrics, and logs, simplifying end-to-end visibility.

Grafana Loki + Tempo + Prometheus: A powerful, cloud-native stack for log aggregation, distributed tracing, and metrics visualization.

eBPF-based Tools (e.g., Cilium, Pixie): Provide low-overhead visibility into network and system activity directly from the Linux kernel, improving observability and performance troubleshooting.

CareNest: A Serverless Child Safety Tracker Powered by AWS - Smart care, Safe kids, Confident parents.

Sundus Hussain — Mon, 14 Apr 2025 09:23:21 +0000

Problem Statement
Children’s safety isn’t just a personal concern, it affects the mental well-being of parents globally. In India, a child goes missing every 8 minutes, according to the National Crime Records Bureau (NCRB).

More than 47,000 children were reported missing recently, and 71.4% of them were minor girls. While location-tracking apps exist, most fail to offer real-time emergency alerting, crime mapping, or safe route guidance.

There’s a clear gap for an application that combines live location tracking, instant panic alerts, and intelligent safety indicators — all in one.

My Motivation
I know the fear of losing sight of your child even for a moment, and I built CareNest to help parents.

With the help of Amazon Web Services, I created a real-time, responsive, and scalable system that can actually make a difference.

This isn't just a tech solution, it's a safety companion born out of love and necessity.

What is CareNest?
CareNest is a browser-based child safety application designed to

Track a child’s real-time location using the browser’s geolocation API and LeafletJS.
Allow a child to trigger an emergency alert via a panic button.
Identify poorly lit streets, safe zones, and nearby facilities like hospitals or police stations.
Use AWS serverless services to process and deliver real-time alerts.
Offer a lightweight, scalable, and cost-efficient solution using cloud-native architecture.

Refer this live demo - https://sundus-hussain.github.io/MDBot_Alert_/

AWS Architecture

Frontend which is hosted on Github pages is a A responsive UI built with HTML, CSS, JavaScript, and LeafletJS. Javascript is used to add the functionality as with ease it can be collaborated with HTML and CSS.

Geolocation API-Tracks the child’s live coordinates from the browser.The Geolocation API is a built-in browser feature that allows web applications to access a device's current physical location using GPS, Wi-Fi, or cellular networks. In CareNest, this API is used to continuously track the child's live coordinates, including latitude and longitude and directly from their device.Once the permission is granted by the user, the app monitors their real-time movement and updates their position on the map using LeafletJS. This forms the backbone of live location tracking, ensuring that the child’s location is always visible and accurate for the parent to monitor from any device.

Amazon API Gateway Securely exposes backend endpoints to receive panic alert data. Amazon API Gateway acts as the secure entry point for all incoming requests from the CareNest frontend. When the panic button is pressed by the child, the browser sends a POST request containing the current location coordinates to the API Gateway endpoint. API Gateway then validates, formats, and forwards this data to an AWS Lambda function for processing.

It ensures that the communication between the web app and backend remains secure, scalable, and efficient. With features like throttling, monitoring, and request validation, API Gateway helps prevent misuse and provides a highly available interface for the application to trigger critical emergency workflows. It’s also configured with CORS settings, which are essential for allowing cross-origin communication from the GitHub Pages frontend to AWS services.

AWS Lambda (Node.js)-Processes the alert, fetches address using LocationIQ, and sends the message. AWS Lambda is the serverless compute service that powers the backend logic of CareNest. Written in Node.js, the Lambda function is triggered automatically whenever the API Gateway receives a panic alert request from the frontend. It extracts the child’s location data which including latitude, longitude, and timestamp and then performs two critical tasks.

First, it calls the LocationIQ API to perform reverse geocoding, converting the raw coordinates into a human-readable address. This makes it easier for parents to understand exactly where the child is.

Second, the Lambda function prepares an emergency message that includes the child’s ID, the exact time of the alert, the location address, and a direct Google Maps link. This message is then published to an Amazon SNS topic, which delivers it to subscribed parents via SMS or email.

Because it’s serverless, there's no need to manage infrastructure — Lambda automatically scales with demand and stays cost-efficient, only running when needed.

LocationIQ API-Converts latitude/longitude into a readable address (reverse geocoding).

Amazon SNS-Sends emergency alerts via SMS and email to registered contacts.Amazon SNS is a fully managed messaging service that enables CareNest to send real-time emergency alerts to parents or guardians. Once the AWS Lambda function processes the panic alert and generates the message, it uses SNS to deliver this alert through multiple channels — typically SMS and email.

In the CareNest setup, a specific SNS topic is created and subscribed to by the parent’s phone number and email address. When the child triggers the panic button, the SNS topic is immediately published with the alert message. This message contains the child’s ID, timestamp, live location, and a Google Maps link pointing to the exact coordinates.

SNS ensures that parents receive these notifications almost instantly, providing peace of mind and enabling faster response times during emergencies. The service is highly scalable, reliable, and integrated seamlessly with Lambda, making it ideal for a serverless, event-driven architecture like CareNest.

CORS + HTTPS-Ensures secure, cross-origin requests from the frontend.n web applications like CareNest that rely on frontend-backend communication, CORS (Cross-Origin Resource Sharing) and HTTPS are essential for both functionality and security.

Since the CareNest frontend is hosted on GitHub Pages (a different domain from the AWS backend), the browser treats requests between them as cross-origin. Without proper CORS configuration, these requests would be blocked by the browser. To enable this securely, CORS headers are configured in Amazon API Gateway, including Access-Control-Allow-Origin, Access-Control-Allow-Headers, and support for OPTIONS preflight requests. This allows the frontend to send data (like location and emergency alerts) to the backend Lambda function without errors.

In addition, all communication between the browser, API Gateway, and SNS is done over HTTPS, which ensures that sensitive data — such as location coordinates and emergency messages — is encrypted during transmission, preventing unauthorized access or tampering.

Together, CORS and HTTPS make sure that CareNest’s real-time alerts are both safe and reliable.

Functionality

Front end will display live location of the child, panic button and child profile. In the backend AWS Lambda is used for serverless function for emergency alert handling. Amazon API gateway is used to expose Lambda as secure HTTP endpoint. Amazon SNS is used to real time emergency alerts to registered contacts. LocationIQ API is used for reverse geocoding is used to convert latitude and longitude to human-readable address. GitHub Pages (Static Frontend) is used to host the live frontend of the application. CORS Configuration, HTTPS ensures secure data transmission and cross-origin request control. For Future Scope Government APIs / OpenStreetMap Crime, Light, Safety Data will be used for marking safe places, crimes, and light/dark streets.

Advantages
It is Lightweight and cost-effective due to serverless setup.

emergency alerts via SNS which is instantly sent to the parents or any other family memnber who all are registered under the appliaction.

Parents can relax and concentrate on their work which increases their day to day to productivity and peace of mind.

easily scalable as no backend server needs to be managed.

It is quite fast and responsive, in future according to the need and number of users the downtime can be taken care of with AWS.

Challenges & Learnings
Faced CORS issues on API Gateway — fixed with proper OPTIONS method and headers.

Understood how SNS topics and subscriptions work, as Amazon web services is a pay as you go model it can easily be used my any user.

Learned to use LeafletJS and geolocation together.

Gained insights into serverless application design in depth like the use of AWS Lambda.

Future scope is kept to measure the Risk Zone Prediction with Machine Learning

Battery Health Monitoring can also be achieved through Machine learning and AI.

Multi-Channel Alerts Integration is also important as now a days various platforms are used by people.

Debugging
First Issue
it took many hours of debugging and knowing the real issue why application is not able to handle certain commands.
After deploying the Lambda function and triggering the emergency alert, the alert didn’t reach the parent via SMS or email. On checking the Amazon SNS console, the subscription status was showing as “Pending Confirmation.”

I assumed SNS would immediately send messages after subscribing the number/email. I tested repeatedly but no alerts were being delivered.

Later I realized that for email subscriptions, the recipient must manually confirm the subscription from the AWS-generated confirmation email. After clicking the confirmation link, the status changed to “Confirmed”, and alerts started working. For SMS, direct confirmation isn't required if the number is added correctly.

Second Issue
When the Lambda function tried to publish the emergency message via SNS, it failed with an error
"AccessDeniedException: User is not authorized to perform: SNS:Publish".

I reviewed my code and retried with different SNS topic ARNs, assuming the issue was with the ARN format or message syntax.

Then the actual problem was with IAM permissions. I updated the Lambda’s execution role by attaching the AmazonSNSFullAccess policy. After that, Lambda had the rights to publish messages to the SNS topic, and the error was resolved.

Third Issue

When I tried to trigger the panic button, everything looked correct — I had given all the necessary permissions, and my Lambda function and API Gateway were configured. But still, I kept getting the dreaded browser error:
“CORS preflight request doesn't pass access control check.”

I double-checked all CORS headers, ensured that Access-Control-Allow-Origin was set to "*", and even re added methods like OPTIONS and POST to API Gateway. Despite all this, the error kept showing up, and I was genuinely anxious and confused.

After almost an hour of frustration, suddenly the request started working successfully, no code change, no config update. It turned out API Gateway changes can sometimes take a few minutes to propagate across regions. The moment I saw “Alert sent successfully”, my happiness was on cloud nine.
And as they say: “If it’s working, don’t touch it.” I took the advice to heart and let it be.

Fourth issue
During early testing, I occasionally got errors like "Location not found" or "Invalid lat/lon" from LocationIQ.
I added a retry block and logged all responses but still got failures for some valid-looking coordinates.
I discovered that the API would sometimes fail if the coordinates were passed as strings instead of numbers, or if the rate limit was exceeded. I corrected the format (parseFloat(lat)), and implemented a check to avoid overloading the API with too many rapid requests. I also added a fallback message like "Address not found" to gracefully handle API failures.

Future Scope
CareNest has laid the foundation for a real-time child safety solution, but its potential goes far beyond basic location tracking. In the future, we aim to integrate machine learning models to predict high-risk zones based on past movement patterns, time of day, and known crime data. This would allow the app to proactively suggest safer alternative routes and notify parents if the child enters a risky area.

We also plan to implement battery health monitoring on the child’s device. Parents would receive alerts if the battery level is critically low, ensuring that location tracking doesn’t fail unexpectedly.

To make CareNest even more accessible, we envision building a dedicated mobile app using React Native, enabling real-time notifications, background location tracking, and an improved user interface for both children and parents.

Lastly, we plan to expand alerting options by integrating WhatsApp, Telegram, or other messaging services via AWS Pinpoint or third-party APIs. This would ensure that emergency alerts reach parents on the platforms they use the most, making response times even faster.

Github link - https://sundus-hussain.github.io/MDBot_Alert_/

References
AWS Documentation
https://docs.aws.amazon.com/lambda/latest/dg/welcome.html
https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-cors.html
AWS Whitepapers
Serverless Architectures with AWS Lambda
https://docs.aws.amazon.com/whitepapers/latest/serverless-architectures-lambda/serverless-architectures-lambda.pdf

Security Best Practices for AWS Lambda
https://docs.aws.amazon.com/lambda/latest/dg/best-practices.html

Overview of Amazon Web Services (Well-Architected Framework)
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/aws-overview.pdf

LeafletJS Mapping Library
https://leafletjs.com/

LocationIQ API (Reverse Geocoding)
https://locationiq.com/docs

OpenStreetMap (Safe Zone Data)
https://www.openstreetmap.org/

Thankyou Note
This journey has been incredibly meaningful not just as a developer, but as a mother who deeply understands the importance of child safety.

Special thanks to the AWS tools and documentation, which empowered me to create a real-world impact with zero infrastructure management. This project has truly shown me how technology, when used with purpose, can protect what matters most.

If you’ve made it this far, thank you for reading, and I hope CareNest inspires more solutions that combine compassion with innovation.

Amazon AWS Database

Sundus Hussain — Tue, 30 Apr 2024 06:43:06 +0000

What is a database?
A database is an electronically stored, systematic collection of data. It can contain any type of data, including words, numbers, images, videos, and files. You can use software called a database management system (DBMS) to store, retrieve, and edit data. In computer systems, the word database can also refer to any DBMS, to the database system, or to an application associated with the database.

AWS Cloud Databases provides a broad selection of purpose-built databases for any enterprise. AWS databases support all database management tasks, such as server provisioning, patching, configuration, and backups. As a result, you can focus on application development while AWS continuously monitors your databases and automates scaling. The following are some examples of AWS database services:

Amazon Relational Database Service (Amazon RDS) is a managed service that makes it easy to set up, operate, and scale a relational database in the cloud.
Amazon Aurora is a relational database built for the cloud. As a fully managed service, it automates time-consuming tasks such as provisioning, patching, backup, recovery, failure detection, and repair.
Amazon Neptune is a graph-oriented database that can execute more than 100,000 queries per second.
Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud.
Amazon ElastiCache is an in-memory NoSQL database that is fully managed, scalable, and secure. It is a popular choice for mobile apps, gaming, e-commerce, and other applications where frequently accessed data must be stored in memory.

Compare AWS database services

Database Use cases AWS services
Relational

Traditional applications, enterprise resource planning (ERP), customer relationship management (CRM), e-commerce

Amazon Aurora — Designed for unparalleled high performance and availability at global scale with full MySQL and PostgreSQL compatibility

Amazon RDS — Set up, operate, and scale a relational database in the cloud with just a few clicks

Amazon Redshift — Accelerate your time to insights with fast, easy, and secure cloud data warehousing at scale

Key-value

High-traffic web applications, e-commerce systems, gaming applications

Amazon DynamoDB — Fast, flexible NoSQL database service for single-digit millisecond performance at any scale

In-memory

Caching, session management, gaming leaderboards, geospatial applications

Amazon ElastiCache — Unlock microsecond latency and scale with in-memory caching

Amazon MemoryDB for Redis — Redis-compatible, durable, in-memory database service for ultra-fast performance

Document

Content management, catalogs, user profiles

Amazon DocumentDB (with MongoDB compatibility) — Scale JSON workloads with ease using a fully managed document database service

Wide column
High-scale industrial apps for equipment maintenance, fleet management, and route optimization

Amazon Keyspaces — A scalable, highly available, and managed Apache Cassandra–compatible database service

Graph

Fraud detection, social networking, recommendation engines

Amazon Neptune — Build and run graph applications with highly connected datasets

Time series
Internet of Things (IoT) applications, DevOps, industrial telemetry

Amazon Timestream — Fast, scalable, serverless time series database

Ledger

Systems of record, supply chain, registrations, banking transactions

Amazon Ledger Database Service (QLDB) — Maintain an immutable, cryptographically verifiable log of data changes

Submission for Frontend Challenge Earth-Day-Edition: different elements of Earth: CSS Card animation

Sundus Hussain — Fri, 26 Apr 2024 12:14:32 +0000

This is a submission for Frontend Challenge v24.04.17, Glam Up My Markup: Earth Day Celebration Landing Page

Inspiration
really worked hard on this, I badly want the gift from the DEV shop 🙂🙃🙂🙃

What I Built
The inspiration for this CSS animation project is drawn from the various elements of earth (soil, water, fire, air, and space).

Demo
Below given is live link for the submission.
Live Link: https://sundus-hussain.github.io/final_earth_day/

Source code: https://github.com/Sundus-hussain/final_earth_day

Journey
The journey begins with finding the right concept.
This design embraces a whimsical yet sophisticated aesthetic, revealing hidden treasures with every click.
Witness creativity blossoming in every pixel, inviting exploration and discovery at every click.
This design is created keeping in mind about the color contrast and opacity of the images(I am still doubtful about it.... hope you like it!!!), and screen reader compatibility.
Responsive design ensures a flawless viewing experience across devices, from desktops to smartphones.
image links:(https://www.craiyon.com/image/sKXNCYtIR5GwfYl4bfKIZg , https://www.istockphoto.com/photo/burning-earth-gm174702179-9948965 , https://sm.mashable.com/mashable_in/photo/default/gw-copy_87rn.jpg, https://w0.peakpx.com/wallpaper/740/461/HD-wallpaper-earth-view-from-space-earth-space-digital-universe.jpg , https://t4.ftcdn.net/jpg/05/55/32/99/360_F_555329972_7CNEDOvl34YykCyeoRe8dMbF5yNTcDRE.jpg, https://encrypted-tbn2.gstatic.com/images?q=tbn:ANd9GcR125PDJbp3L8zOWWTIfke2E4kft5TzVpBsq3LyeJePs2LKkBN5)

Thank you!

AWS Cloud Practitioner Certification

Sundus Hussain — Tue, 23 Apr 2024 08:57:58 +0000

Preparing for practitioner certifications could be harder than imagined...

Nobody talks about how much time and dedication these exam preparations can take. So in this article I will be talking about the strategies which I used and also how I got overwhelmed and stuck in the middle of the preparations!!!

Let's break this problem down into parts.

Dedication & Consistency

"Being consistent means dedicating yourself to your goals and staying focused on the things and activities to achieve them."

So, dedicate your time and then be consistent as without consistency nothing will work.

AWS official website / AWS Educate

AWS Educate is open to any individual, regardless of where they are in their education, technical experience, or career journey.

If you’re overwhelmed by too many choices when it comes to learning about the cloud, AWS Educate is here to help. Cloud beginners like you are invited to check out their free, self-paced online training resources and labs designed to help you learn, practice, and evaluate your cloud skills without having to create an Amazon account.

AWS Cloud Practitioner Essentials - Sign up for this course and go through this very detailed and super engaging videos by AWS trainers, It will give you an Idea that what exactly you all have to study for this examination.

https://explore.skillbuilder.aws/learn/course/134/aws-cloud-practitioner-essentials

WAIT!!! WAIT!!! WAIT!!!

don't forget to go through exam guide first, to get the better understanding of the exam.

https://d1.awsstatic.com/training-and-certification/docs-cloud-practitioner/AWS-Certified-Cloud-Practitioner_Exam-Guide.pdf

Power of writing down everything you Learn

Writing about what you learn helps in retaining the information for a longer time. The process of translating thoughts into words engages multiple cognitive faculties, reinforcing memory.

don't forget to share the notes!!! ;)

Practice Test

Must buy any practice test before appearing for exam, as it is highly important to check your knowledge before taking the real exam.

there are many practice test available online, you can check and go through them to gain confidence.

My free course

I have created a course for the beginners which is available for free on Udemy.

But you need to learn more than this course, as it is designed only for beginners with easy explanation.

https://www.udemy.com/course/aws-from-scratch/?referralCode=40A977B050DB8C662410

GOOD LUCK!!! HAPPY LEARNING!!!

AWS Cloud Practitioner Certification

Sundus Hussain — Sun, 21 Apr 2024 17:03:26 +0000

AWS Cloud Practitioner Certification
Preparing for practitioner certifications could be harder than imagined...

Let's break this problem down into parts.

Dedication & Consistency

"Being consistent means dedicating yourself to your goals and staying focused on the things and activities to achieve them."

So, dedicate your time and then be consistent as without consistency nothing will work.

AWS official website / AWS Educate

AWS Educate is open to any individual, regardless of where they are in their education, technical experience, or career journey.

AWS Cloud Practitioner Essentials - Sign up for this course and go through this very detailed and super engaging videos by AWS trainers, It will give you an Idea that what exactly you all have to study for this examination.

https://explore.skillbuilder.aws/learn/course/134/aws-cloud-practitioner-essentials

WAIT!!! WAIT!!! WAIT!!!

don't forget to go through exam guide first, to get the better understanding of the exam.

https://d1.awsstatic.com/training-and-certification/docs-cloud-practitioner/AWS-Certified-Cloud-Practitioner_Exam-Guide.pdf

Power of writing down everything you Learn

Writing about what you learn helps in retaining the information for a longer time. The process of translating thoughts into words engages multiple cognitive faculties, reinforcing memory.

don't forget to share the notes!!! ;)

Practice Test

Must buy any practice test before appearing for exam, as it is highly important to check your knowledge before taking the real exam.

there are many practice test available online, you can check and go through them to gain confidence.

My free course

I have created a course for the beginners which is available for free on Udemy.

But you need to learn more than this course, as it is designed only for beginners with easy explanation.

https://www.udemy.com/course/aws-from-scratch/?referralCode=40A977B050DB8C662410

GOOD LUCK!!! HAPPY LEARNING!!!

Submission for Frontend Challenge Earth-Day-Edition: Elements of Earth: CSS Card animation

Sundus Hussain — Sun, 21 Apr 2024 07:02:02 +0000

This is a submission for Frontend Challenge v24.04.17, CSS Art: Earth Day 2024

AIMING FOR DEV SHOP GIFT(TEE)

Inspiration
The inspiration for this CSS animation project is drawn from the various elements of earth (soil, water, fire, air, and space).

Demo

Below given is live link for the submission.
Live Link: https://sundus-hussain.github.io/Dev_Earth_day/

Source Code : https://github.com/Sundus-hussain/Dev_Earth_day

Journey

The journey begins with finding the right concept.
This design embraces a whimsical yet sophisticated aesthetic, revealing hidden treasures with every click.
Witness creativity blossoming in every pixel, inviting exploration and discovery at every click.
This design is created keeping in mind about the color contrast and opacity of the images(I am still doubtful about it.... hope you like it!!!), and screen reader compatibility.
Responsive design ensures a flawless viewing experience across devices, from desktops to smartphones.

image links:(https://www.craiyon.com/image/sKXNCYtIR5GwfYl4bfKIZg , https://www.istockphoto.com/photo/burning-earth-gm174702179-9948965 , https://sm.mashable.com/mashable_in/photo/default/gw-copy_87rn.jpg, https://w0.peakpx.com/wallpaper/740/461/HD-wallpaper-earth-view-from-space-earth-space-digital-universe.jpg , https://t4.ftcdn.net/jpg/05/55/32/99/360_F_555329972_7CNEDOvl34YykCyeoRe8dMbF5yNTcDRE.jpg, https://encrypted-tbn2.gstatic.com/images?q=tbn:ANd9GcR125PDJbp3L8zOWWTIfke2E4kft5TzVpBsq3LyeJePs2LKkBN5)

Thank you!

Newbie

Sundus Hussain — Sat, 20 Apr 2024 11:13:13 +0000

Hi, I am an enthusiastic learner and I am here to learn new things related to tech world...
I believe in "Learning is a process that continues throughout life, and learning has no age limit"