DevOps Blog
Insights on cloud platform engineering, DevOps, and infrastructure automation
Building a Zero-Trust Internal Developer Platform on AWS
2024-11-12
Internal developer platforms don't have to mean complex Kubernetes clusters and six-figure tooling budgets. Here's how we built a secure, invite-only IDP on AWS using Cognito, ECS Fargate, and DynamoDB โ with a multi-stage approval workflow for production deployments.
Read ArticlePulumi vs Terraform: A Practitioner's Comparison for AWS Infrastructure
2024-10-08
After running Terraform in production for three years and migrating AWS infrastructure to Pulumi TypeScript, here is an honest practitioner's comparison โ covering type safety, state backends, team ergonomics, and the real tradeoffs that vendor comparison pages won't tell you.
Read ArticleCutting AWS Costs 60% Without Sacrificing Reliability
2024-09-15
A practical breakdown of the specific changes that reduced AWS costs by 60% in three months โ Fargate Spot for non-production workloads, shared ALB listeners, right-sizing, and eliminating idle resources. No hand-waving, just the actual numbers.
Read ArticleGitLab CI/CD for AWS ECS: From Code to Production in 8 Minutes
2024-08-20
A complete walkthrough of a GitLab CI/CD pipeline that builds a Docker image, pushes to ECR, and deploys to ECS Fargate โ with a manual gate for production. The full pipeline runs in under 8 minutes on the develop branch.
Read ArticleAWS Organizations and Landing Zone: Multi-Account Strategy for Startups
2024-07-03
Most AWS guides tell you to use a single account until you 'need' multi-account. They're wrong. Here's why multi-account is the right starting point even for startups, how to set it up with AWS Organizations in a day, and why you should skip Control Tower in favour of hand-crafted SCPs.
Read ArticleContainer Security on Fargate: Inspector, ECR Scanning, and Runtime Defence
2024-06-10
Running containers on ECS Fargate removes the undifferentiated heavy lifting of host management, but it doesn't remove your security responsibilities. Here's a layered approach to container security: image scanning with ECR enhanced scanning and Inspector2, runtime controls, least-privilege task roles, and ECS Exec for secure debugging.
Read ArticleAbout the Author
Senior cloud platform engineer and DevOps consultant building infrastructure-as-code, CI/CD pipelines, and internal developer platforms.