Cloud, Kubernetes, and platform engineering.

Senior-engineer field notes on cloud, Kubernetes, AWS, Terraform, and platform engineering by Ercan Ermis.

All posts

111 posts

AZ Isolation Held. Your Architecture Didn't.

A cooling failure killed racks in one us-east-1 zone and a quorum died with them. What the blast radius promise covers, plus a read-only detector for it.

Jun 03, 2026 10 min

Local DynamoDB Grew Up: A Hands-On Look at ExtendDB

ExtendDB v0.1.0 reimplements the DynamoDB wire protocol in Rust on PostgreSQL. A side-by-side lab against DynamoDB Local on SigV4, IAM policy and Streams.

May 21, 2026 10 min

How I Found a Hidden Cloudflare Bug on a Sunday mid-night (The joy of curl)

It was supposed to be a quick weekend project. You know the kind: "I'll just spin up an egress VM, route some traffic through it, sip my ...

May 10, 2026 4 min

Why Your SSH Is Yelling About Quantum Computers (And How to Fix It)

OpenSSH now warns when key exchange is not post-quantum. What store now, decrypt later actually threatens, and the Kex configuration that clears the warning.

Apr 17, 2026 5 min

IaC-First: Why I am Never Touch the AWS Console in Production

Console clicks change reality without changing Terraform state, so plan lies. The drift failure modes, the import workflow, and how to enforce IaC-first.

Apr 16, 2026 6 min

I dropped my Google Pixel 9 XL Pro from 6th floor balcony to the street

My phone slipped out of my hand and executed a textbook, no-hesitation, full-commitment dive from the 6th floor straight to the street.

Feb 01, 2026 4 min

AWS S3 New Feature: Re-encryption without Movement

S3's UpdateObjectEncryption rewraps the data key instead of copying bytes, so ETag and creation date survive and a 5 TB object re-encrypts in milliseconds.

Jan 30, 2026 4 min