Cloud, Kubernetes, and platform engineering.

Checking Cloud with Cloud: M365 Security Posture Scanning 101

Your Microsoft 365 tenant is cloud infrastructure and it drifts. A 101 on posture scanning with CIS, EIDSCA, and CISA ScuBA, and why the scanner is SaaS too.

AWS Lambda MicroVMs: Serverless Gets a Stateful, Isolated Sandbox

AWS Lambda MicroVMs bring VM-level isolation, snapshot-fast launch, and suspend-resume state to serverless. What changes, and where the Firecracker primitive fits.

No Phone, No Account: Google's QR Wall and GDPR

Google now gates new account creation behind a phone-based QR verification. No smartphone, no account. Here is why that collides with GDPR data minimization.

AWS Multi-party Approval for Organizations

Multi-party approval in AWS Organizations gates high-risk operations behind a quorum of human approvers. Here is how it works and the security it buys.

Local DynamoDB Grew Up: A Hands-On Look at ExtendDB

DynamoDB Local has been the laptop stand-in for AWS DynamoDB since 2013. It's a Java JAR, runs in memory or against a SQLite file, accepts almost any request shape, has no real …

How I Found a Hidden Cloudflare Bug on a Sunday mid-night (The joy of curl)

It was supposed to be a quick weekend project. You know the kind: "I'll just spin up an egress VM, route some traffic through it, sip my ...

Why Your SSH Is Yelling About Quantum Computers (And How to Fix It)

You SSH into your server and see this:

** WARNING: connection is not using a post-quantum key exchange algorithm.
** This session may be vulnerable to "store now, decrypt later" …

IaC-First: Why I am Never Touch the AWS Console in Production

"Never touch the AWS console in production" sounds like an extreme rule. It is not. It is the most important operational discipline in a cloud-native team, and the cost of …

I dropped my Google Pixel 9 XL Pro from 6th floor balcony to the street

My phone slipped out of my hand and executed a textbook, no-hesitation, full-commitment dive from the 6th floor straight to the street.

AWS S3 New Feature: Re-encryption without Movement

The recent release of the UpdateObjectEncryption API marks a significant shift in how we manage data security at scale. Historically, changing the encryption of an S3 object was a …