Blog

Articles, architectural field notes, and engineering guides on software systems, cloud infrastructure, and mobile engineering.

FEATURED • 16 min read

AWS CLI First #17: Zero-Secret CI/CD: Automating AWS Deployments with GitHub Actions & OIDC

Eliminate long-lived access keys in CI/CD: configure AWS IAM OpenID Connect (OIDC) identity provider, craft least-privilege trust policies for GitHub Actions, build an automated deployment pipeline, validate templates with cfn-lint, and invalidate CloudFront CDN caches from the terminal.

AWS CLI First #17: Zero-Secret CI/CD: Automating AWS Deployments with GitHub Actions & OIDC

AWS OpenTofu #201: From Lab Configuration to Infrastructure Project

AWS OpenTofu #202: Your First Reusable OpenTofu Module

AWS OpenTofu #203: Compose Infrastructure Modules

AWS OpenTofu #204: for_each, count, and Dynamic Infrastructure

AWS OpenTofu #205: Resource Lifecycle and Safe Changes

AWS OpenTofu #206: Remote State with S3

AWS OpenTofu #108: IAM Policies & Least Privilege

AWS OpenTofu #109: VPC Fundamentals

AWS OpenTofu #110: EC2 Inside Your Own VPC

AWS OpenTofu #111: Security Groups & Network Troubleshooting

AWS OpenTofu #114: Build a Mini AWS Environment

AWS OpenTofu #115: Final Level 100 Challenge

AWS OpenTofu #112: Understanding OpenTofu State

AWS OpenTofu #113: Drift Detection & Resource Import

AWS OpenTofu #102: Your First OpenTofu Project

AWS OpenTofu #103: Build a Proper S3 Bucket with Security Defaults

AWS OpenTofu #104: Variables, Outputs & Locals

AWS OpenTofu #106: Launch Your First EC2 Instance

AWS OpenTofu #107: Secure EC2 Management with IAM & SSM

AWS OpenTofu #105: Data Sources & AWS Discovery

AWS OpenTofu #101: AWS Fundamentals Before Infrastructure as Code

AWS CLI First #16: Infrastructure as Code: Deploying Multi-Tier Stacks with CloudFormation & SAM CLI

AWS CLI First #15: Serverless from the Terminal: Lambda Functions & HTTP API Gateways

AWS CLI First #14: Production Container Workflows: ECR Push & ECS Fargate Task Provisioning

AWS CLI First #13: Managed Relational & NoSQL Databases: RDS PostgreSQL Multi-AZ & DynamoDB via CLI

AWS CLI First #12: S3 Mastery & Distributed Files: Bucket Policies, Lifecycle, Encryption & EFS

AWS CLI First #11: Elastic High-Availability: EC2 Auto Scaling Groups (ASG), Launch Templates & Self-Healing Fleets

AWS CLI First #10: Layer 7 Traffic Distribution: Application Load Balancers, Target Groups & SSL Routing

AWS CLI First #9: Zero-Trust Fleet Operations: AWS Systems Manager (SSM) Session Manager & Run Command

AWS CLI First #8: Persistent Block Storage & Golden Images: EBS Volumes, KMS & Custom AMIs

AWS CLI First #6: Advanced VPC: S3 Gateway Endpoints, Flow Logs & Reachability Simulator

AWS CLI First #4: AWS Global Infrastructure Mastery: Regions, Availability Zones & AZ IDs via CLI

AWS CLI First #7: EC2 Virtual Machines, Stateful Firewalls (SG vs NACL) & IMDSv2 Hardening

AWS CLI First #3: Crafting Granular JSON Policies, Boundaries & Policy Simulator

AWS CLI First #5: Production VPC Architecture & Multi-AZ Routing from Scratch

AWS CLI First #2: Multi-Account Profiles, STS AssumeRole & MFA-Enforced Temporary Credentials

AWS CLI First #1: Installation, Root Setup & IAM Admin User Provisioning

Architecting Enterprise Super Apps with Microservices and CaaS

Scaling Flutter in Production: Achieving 1% Crash Rates Across Millions of Sessions

Engineering High-Throughput ETL Pipelines: Ingesting 41TB of Document Data

Unified Single Sign-On (SSO) Patterns for Multi-Tenant Government Systems

Performance Tuning .NET Core Microservices on Kubernetes

Building Maintainable Enterprise Frontends with Modular Angular

Zero-Downtime Deployment Pipelines for Mixed Linux and Windows Workloads