<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Mohammad Rizky Prawira - Blog RSS Feed</title><description>Specializing in .NET Core, Angular, Flutter, Cloud Infrastructure, Kubernetes orchestration, and data engineering. Passionate about reengineering scalable web and mobile systems.</description><link>https://prawira.dev/</link><language>en-us</language><item><title>AWS CLI First #9: Zero-Trust Fleet Operations: AWS Systems Manager (SSM) Session Manager &amp; Run Command</title><link>https://prawira.dev/blog/aws-cli-ssm-session-manager-run-command-zero-trust-fleet/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-ssm-session-manager-run-command-zero-trust-fleet/</guid><description>Eliminate Port 22 SSH forever. Learn how to manage EC2 instances with zero open inbound ports using AWS Systems Manager (SSM) Session Manager, enable encrypted CloudWatch session auditing, tunnel private ports, and run fleet-wide remote commands via CLI.</description><pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate></item><item><title>AWS CLI First #8: Persistent Block Storage &amp; Golden Images: EBS Volumes, KMS &amp; Custom AMIs</title><link>https://prawira.dev/blog/aws-cli-ebs-volumes-kms-encryption-custom-amis/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-ebs-volumes-kms-encryption-custom-amis/</guid><description>Master enterprise AWS block storage and image lifecycle from the terminal. Learn how to provision gp3 EBS volumes, configure KMS encryption, format &amp; mount filesystems with UUIDs, live-expand storage without downtime, and bake reusable Golden AMIs.</description><pubDate>Mon, 31 Aug 2026 00:00:00 GMT</pubDate></item><item><title>AWS CLI First #4: AWS Global Infrastructure Mastery: Regions, Availability Zones &amp; AZ IDs via CLI</title><link>https://prawira.dev/blog/aws-cli-global-infrastructure-regions-availability-zones-az-ids/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-global-infrastructure-regions-availability-zones-az-ids/</guid><description>Master the physical foundation of AWS. Explore AWS global geography, the 4 golden rules of region selection, Availability Zone physical architecture, AZ-ID mapping across multi-account organizations, and managing opt-in regions entirely from the terminal.</description><pubDate>Sat, 29 Aug 2026 00:00:00 GMT</pubDate></item><item><title>AWS CLI First #6: Advanced VPC: S3 Gateway Endpoints, Flow Logs &amp; Reachability Simulator</title><link>https://prawira.dev/blog/aws-cli-advanced-vpc-s3-endpoints-flow-logs-reachability-analyzer/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-advanced-vpc-s3-endpoints-flow-logs-reachability-analyzer/</guid><description>Master enterprise VPC optimization and security auditing from the terminal. Learn how to eliminate NAT Gateway fees with zero-cost S3 Gateway Endpoints, capture traffic with VPC Flow Logs, apply Kubernetes subnet tags, and simulate packet routing with the Reachability Analyzer.</description><pubDate>Sat, 29 Aug 2026 00:00:00 GMT</pubDate></item><item><title>AWS CLI First #3: Crafting Granular JSON Policies, Boundaries &amp; Policy Simulator</title><link>https://prawira.dev/blog/aws-cli-granular-iam-policies-boundaries-policy-simulator/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-granular-iam-policies-boundaries-policy-simulator/</guid><description>Master AWS Least Privilege from the terminal. Learn how to write fine-grained JSON IAM policies, evaluate permissions using the IAM Policy Simulator CLI, enforce permission boundaries against privilege escalation, and implement account guardrails.</description><pubDate>Sat, 29 Aug 2026 00:00:00 GMT</pubDate></item><item><title>AWS CLI First #7: EC2 Virtual Machines, Stateful Firewalls (SG vs NACL) &amp; IMDSv2 Hardening</title><link>https://prawira.dev/blog/aws-cli-ec2-virtual-machines-security-groups-nacls-imdsv2/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-ec2-virtual-machines-security-groups-nacls-imdsv2/</guid><description>Master AWS compute provisioning from the terminal. Learn how to select Graviton ARM64 vs x86 architectures, generate ED25519 keys, configure stateful Security Groups vs stateless NACLs, bootstrap with User Data, deliver temporary STS credentials via IAM instance profiles, and enforce IMDSv2.</description><pubDate>Sat, 29 Aug 2026 00:00:00 GMT</pubDate></item><item><title>AWS CLI First #5: Production VPC Architecture &amp; Multi-AZ Routing from Scratch</title><link>https://prawira.dev/blog/aws-cli-production-vpc-architecture-multi-az-routing/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-production-vpc-architecture-multi-az-routing/</guid><description>Build an enterprise-grade, highly available cloud network from the command line. Provision custom VPCs, multi-AZ public and private subnets, Internet Gateways, NAT Gateways, and segregated Route Tables using pure AWS CLI scripts.</description><pubDate>Sat, 29 Aug 2026 00:00:00 GMT</pubDate></item><item><title>AWS CLI First #2: Multi-Account Profiles, STS AssumeRole &amp; MFA-Enforced Temporary Credentials</title><link>https://prawira.dev/blog/aws-cli-multi-account-sts-assumerole-temporary-credentials/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-multi-account-sts-assumerole-temporary-credentials/</guid><description>Graduate from static access keys to enterprise-grade cloud security. Learn how to configure multi-account profiles, assume IAM roles via AWS STS, enforce MFA on the terminal, and automate profile chaining in ~/.aws/config using a simulated zero-privilege engineer.</description><pubDate>Fri, 28 Aug 2026 00:00:00 GMT</pubDate></item><item><title>AWS CLI First #1: Installation, Root Setup &amp; IAM Admin User Provisioning</title><link>https://prawira.dev/blog/aws-cli-installation-and-root-iam-admin-setup/</link><guid isPermaLink="true">https://prawira.dev/blog/aws-cli-installation-and-root-iam-admin-setup/</guid><description>Master AWS from the terminal. Learn how to install AWS CLI v2, securely bootstrap from the root account with MFA, configure named profiles, and provision a dedicated CLI admin IAM user purely with CLI commands.</description><pubDate>Thu, 27 Aug 2026 00:00:00 GMT</pubDate></item><item><title>Architecting Enterprise Super Apps with Microservices and CaaS</title><link>https://prawira.dev/blog/architecting-super-apps-microservices-caas/</link><guid isPermaLink="true">https://prawira.dev/blog/architecting-super-apps-microservices-caas/</guid><description>Practical architectural patterns for transitioning legacy monolithic enterprise portals into unified Super Apps with federated Single Sign-On and Container-as-a-Service orchestration.</description><pubDate>Thu, 24 Oct 2024 00:00:00 GMT</pubDate></item><item><title>Scaling Flutter in Production: Achieving 1% Crash Rates Across Millions of Sessions</title><link>https://prawira.dev/blog/scaling-flutter-apps-production-reliability/</link><guid isPermaLink="true">https://prawira.dev/blog/scaling-flutter-apps-production-reliability/</guid><description>How we reengineered government mobile apps into a single Flutter codebase with modular state management, automated error boundaries, and baseline coding standards.</description><pubDate>Sat, 12 Oct 2024 00:00:00 GMT</pubDate></item><item><title>Engineering High-Throughput ETL Pipelines: Ingesting 41TB of Document Data</title><link>https://prawira.dev/blog/high-throughput-etl-sql-server-python/</link><guid isPermaLink="true">https://prawira.dev/blog/high-throughput-etl-sql-server-python/</guid><description>Lessons learned from building batch and incremental ETL pipelines to extract, transform, and aggregate 41 terabytes of official document records for data science analytics.</description><pubDate>Sat, 28 Sep 2024 00:00:00 GMT</pubDate></item><item><title>Unified Single Sign-On (SSO) Patterns for Multi-Tenant Government Systems</title><link>https://prawira.dev/blog/enterprise-single-sign-on-oauth2/</link><guid isPermaLink="true">https://prawira.dev/blog/enterprise-single-sign-on-oauth2/</guid><description>Implementing seamless identity federation, token exchange, and granular role-based access control across distributed public-sector applications.</description><pubDate>Thu, 05 Sep 2024 00:00:00 GMT</pubDate></item><item><title>Performance Tuning .NET Core Microservices on Kubernetes</title><link>https://prawira.dev/blog/optimizing-dotnet-core-microservices-kubernetes/</link><guid isPermaLink="true">https://prawira.dev/blog/optimizing-dotnet-core-microservices-kubernetes/</guid><description>Garbage collection tuning, memory limits, connection pooling, and container lifecycle optimizations for .NET Core services in high-concurrency environments.</description><pubDate>Sun, 18 Aug 2024 00:00:00 GMT</pubDate></item><item><title>Building Maintainable Enterprise Frontends with Modular Angular</title><link>https://prawira.dev/blog/building-modular-enterprise-frontends-angular/</link><guid isPermaLink="true">https://prawira.dev/blog/building-modular-enterprise-frontends-angular/</guid><description>Structuring large-scale Angular applications with standalone components, state isolation, and shared UI design systems across multi-team environments.</description><pubDate>Mon, 29 Jul 2024 00:00:00 GMT</pubDate></item><item><title>Zero-Downtime Deployment Pipelines for Mixed Linux and Windows Workloads</title><link>https://prawira.dev/blog/zero-downtime-deployments-linux-windows/</link><guid isPermaLink="true">https://prawira.dev/blog/zero-downtime-deployments-linux-windows/</guid><description>Automating deployment pipelines from staging to production with blue-green rollouts, health checks, and config management across hybrid OS environments.</description><pubDate>Fri, 14 Jun 2024 00:00:00 GMT</pubDate></item></channel></rss>