Posts
All posts
Agent Auth on AWS: OIDC In, Access Keys Out
Agents on AWS should never hold long-lived keys. How OIDC federation, IRSA, Roles Anywhere, and AgentCore Identity turn signed proof into temporary credentials.
Agent Toolkit for AWS: The Docs Have a New Reader
AWS shipped the Agent Toolkit: an MCP server, curated skills, and IAM guardrails for coding agents. The primary reader of AWS docs is not human anymore.
FinOps: Budget Alerts with Terraform Before Your Next $2.5B AWS Bill
The July 17 Cost Explorer bug filled every feed with billion-dollar AWS bills. Ten lines of Terraform give you the budget alerts that caught it first.
Testing the Assumption Nobody Tests
AWS FIS can fail a zone and only approximate losing the control plane. How to run the game day, what to measure, and an honest scorecard for the series.
Checking Cloud with Cloud: M365 Security Posture Scanning 101
Your Microsoft 365 tenant is cloud infrastructure and it drifts. A 101 on posture scanning with CIS, EIDSCA, and CISA ScuBA, and why the scanner is SaaS too.
The Fix Shares Fate With the Outage
Lambda 2023, the DynamoDB DNS event, Azure's February control-plane failure: why recovery paths die with the incident, plus a lab measuring static stability.
AWS Lambda MicroVMs: Serverless Gets a Stateful, Isolated Sandbox
AWS Lambda MicroVMs bring VM-level isolation, snapshot-fast launch, and suspend-resume state to serverless. What changes, and where the Firecracker primitive fits.
No Phone, No Account: Google's QR Wall and GDPR
Google now gates new account creation behind a phone-based QR verification. No smartphone, no account. Here is why that collides with GDPR data minimization.
Two Zones, Eighteen Hours, One Cause
Drone strikes put AWS's me-central-1 region into months of recovery and its DR advice was: restore into Europe. Plus a lab mapping AZ names to real IDs.
AWS Multi-party Approval for Organizations
Multi-party approval in AWS Organizations gates high-risk operations behind a quorum of human approvers. Here is how it works and the security it buys.
AZ Isolation Held. Your Architecture Didn't.
A cooling failure killed racks in one us-east-1 zone and a quorum died with them. What the blast radius promise covers, plus a read-only detector for it.
Local DynamoDB Grew Up: A Hands-On Look at ExtendDB
ExtendDB v0.1.0 reimplements the DynamoDB wire protocol in Rust on PostgreSQL. A side-by-side lab against DynamoDB Local on SigV4, IAM policy and Streams.
How I Found a Hidden Cloudflare Bug on a Sunday mid-night (The joy of curl)
It was supposed to be a quick weekend project. You know the kind: "I'll just spin up an egress VM, route some traffic through it, sip my ...
Why Your SSH Is Yelling About Quantum Computers (And How to Fix It)
OpenSSH now warns when key exchange is not post-quantum. What store now, decrypt later actually threatens, and the Kex configuration that clears the warning.
IaC-First: Why I am Never Touch the AWS Console in Production
Console clicks change reality without changing Terraform state, so plan lies. The drift failure modes, the import workflow, and how to enforce IaC-first.
I dropped my Google Pixel 9 XL Pro from 6th floor balcony to the street
My phone slipped out of my hand and executed a textbook, no-hesitation, full-commitment dive from the 6th floor straight to the street.
AWS S3 New Feature: Re-encryption without Movement
S3's UpdateObjectEncryption rewraps the data key instead of copying bytes, so ETag and creation date survive and a 5 TB object re-encrypts in milliseconds.
I Built TrumpDaily to Track Donald Trump Without the Noise
Look, tracking Trump is exhausting. The man dominates headlines across BBC, Guardian, NPR, Al Jazeera, and even Babylon Bee. Checking 10+ ...
When Spotify’s Share-to-Instagram Flow Turns Into a Free Billboard
I dug into how Spotify generates story assets and wrote up the possible attack vectors + where the metadata pipelines might be vulnerabi...
AWS Monthly (Nov '25) The Stateful Serverless Revolution
November and re:Invent 2025 brought us the "holy grail" of serverless: AWS Lambda Durable Functions. This feature introduces...
When the Cloud Sneezes, the World Catches a Cold - Lessons from the us-east-1 Meltdown
The us-east-1 outage took down Perplexity, Signal and even the status pages meant to report it. What a single-region dependency costs, and what to change now.
AWS Monthly (Sep '25): Vega OS & eBPF Observability
In a surprise move, AWS released Vega OS in September. Vega is a specialized, Linux-based OS optimized for the edge and high-performance UI...
AWS Monthly (Aug '25): Big Data, Zero Effort
August was all about "Data Gravity." Amazon Aurora storage limits jumped to 256 TiB, which effectively ends the "sharding" conversation for...
AWS Monthly (July '25): Kubernetes at the Edge of Sanity
July was a landmark month for the EKS (Elastic Kubernetes Service) crowd. AWS announced that EKS now supports 100,000-node clusters.
AWS Monthly (May '25): The Death of the War Room
May brought CloudWatch Investigations, which have fundamentally changed someone's on-call rotation. Instead of manual log correlation, ...
Automating AWS CloudWatch Log Group Tagging with Python and Boto3
A Boto3 script that finds untagged CloudWatch log groups and applies your tag set. The IAM permissions it needs, and why untagged groups distort cost reports.
Automating AWS ECR Tagging with Python and Boto3
A Boto3 script that paginates every ECR repository and tags only the ones with no tags. The three IAM permissions it needs, and why untagged repos break costs.
Automating ECR Image Cleanup with Bash
A bash script using the AWS CLI and jq to delete ECR images matching a 9.x.x tag pattern, with dry-run and apply modes so you read the list before it removes.
Update ECR Repositories with Bash Script
A short bash loop that sets image tag mutability to MUTABLE on every ECR repository in the account, and the trade-off you accept when tags become overwritable.
Why Automated Tests Are Essential in Your CI/CD Pipeline and Development Flow
Why tests belong in the pipeline and not just on your laptop: regressions caught on every push, and a GitHub Actions job running Playwright on a throwaway EC2.
AWS Monthly (April '25): Cooling the AI Heat
In April, AWS gave us a peek behind the curtain of their data center engineering. To handle the thermal output of the latest AI clusters, ...
AWS Monthly (Mar '25): The Proximity Power Play
Technically, this brings "Single-Digit Millisecond Latency" to almost every major tech hub. If you are building AR/VR backends, indust...
Streamline Your AWS ECR Management with This Powerful Bash Script
A bash script that applies a keep-the-last-three-images lifecycle policy to every ECR repository in a region, with a dry-run mode before it deletes anything.
AWS Monthly (Jan '25): Shattering the 6MB Ceiling
AWS raised Lambda response streaming to 200 MB in January, retiring the 6MB payload workaround. What it does for TTFB, plus S3 Express One Zone latency gains.
Setting up DKIM for Google Workspace (Gmail) using Terraform and AWS Route 53
DKIM (DomainKeys Identified Mail) is a critical email authentication technique that helps prevent email spoofing. By using DKIM, you ...
Automate AWS Site-to-Site VPN Monitoring
That’s exactly why I created the AWS Site-to-Site VPN Monitoring Script, a tool designed to automate the monitoring of VPN connections ...
Optimizing Docker Images: Tips for Reducing Image Size and Build Time
Hey, fellow Docker enthusiast! If you're here, you probably love Docker as much as I do, spinning up containers, packaging applications ...
Monitoring EC2 Disk Space with a Simple Bash Script and Slack Alerts
In the cloud infrastructure landscape, monitoring the health and resources of EC2 instances is essential. One common challenge for system...
Securing Docker Containers: Best Practices for Container Security
When we talk about containerization, Docker is often the first tool that comes to mind. It's revolutionized how we develop, ship, and ...
Mastering Dockerfile: Writing Efficient, Scalable Container Builds
Docker has revolutionized the way we develop, package, and ship applications. At the heart of this container magic is the Dockerfile, the ...
Migrating a Git Repository from GitLab to GitHub with GPG-Signed Commits
In today's DevOps-driven world, version control systems like Git are the backbone of software development. GitLab and GitHub are two of ...
Accessing AWS Services in Private Subnets Without 0.0.0.0/0
When working with AWS (Amazon Web Services), securing your infrastructure is paramount. One of the most common security practices is to ...
Understanding AWS Regions, Availability Zones, and VPCs: A Comprehensive Guide
In today's cloud computing landscape, Amazon Web Services (AWS) has established itself as a leader, offering a wide range of services to ...
AWS Network Load Balancers with Header Modification Techniques
AWS Network Load Balancers (NLBs) are a powerful tool for distributing incoming application traffic across multiple targets...
How to call multiple terraform modules in a single terragrunt file
in Terragrunt, you can call multiple Terraform modules from a single Terragrunt configuration file by using the terraform block in combi...
Leveraging Git Hooks for Enforcing Commit Message Standards: A Guide for Cross-Platform Development Teams
Enforcing Conventional Commits with a commit-msg hook on Mac, Linux and Windows, plus the distribution problem every hook has because .git/hooks stays local.
Simplifying SSL with Let's Encrypt and CLI.ini: A DevOps Guide
In the vast expanse of the internet, security is not just a luxury; it's a necessity. For web developers and system administrators, ...
TCP vs. UDP: Navigating the Protocols as Developers and DevOps
Understanding TCP and UDPBefore we dive into the differences, let's briefly understand what TCP and UDP are ...
AWS VPC IP Versions: IPv4 vs. IPv6
So, buckle up as we unravel the mysteries of IPv4 and IPv6 within AWS VPC, serving you a platter of insights, examples, and detailed ...
AWS S3 CORS Settings: A Deep Dive
Whether you're a seasoned AWS veteran or just starting, mastering CORS settings in S3 can greatly enhance your web applications' functiona...
Importance of Regions and Availability Zones on AWS
We're diving into a pivotal aspect of architecting robust, resilient, and efficient applications on Amazon Web Services (AWS): understand...
The Power of Bash For Loops: Streamlining Your Scripting Tasks
In the world of scripting and automation, Bash stands out as a versatile and widely-used shell in Unix and Linux systems. Among its ...
AWS VPC Design: Integrating Subnets, AZs, and Dual-Stack IP
Virtual Private Cloud (VPC) in AWS, meticulously weaving together subnets, availability zones (AZs), and the dual-stack configuration for...
7 Reasons to Consider Getting a Smartwatch
Seven reasons a smartwatch earns wrist space: health tracking, notification triage, payments and navigation, plus where the hardware still disappoints.
How to Enable SSH on Ubuntu: A Step-by-Step Guide
Secure Shell (SSH) is an essential tool for system administrators, developers, and IT professionals. It provides a secure way to access ...
Vim: Mastering the Essentials for Efficient Editing
In the world of text editing, Vim stands out as a powerful, keyboard-centric editor that prioritizes efficiency and speed. Originating ...
Understanding CAA DNS Records: What, Why, and How?
CAA, or Certificate Authority Authorization, is a type of DNS record that allows domain owners to specify which Certificate ...
Mastering AWS VPC: An Introduction to Virtual Private Cloud Routing
The world of cloud computing has never been more accessible or diverse. As organizations migrate to the cloud, AWS ...
Understanding the New AWS Public IPv4 Address Charge and Public IP Insights
AWS bills $0.005 per hour for every public IPv4 address from February 2024, attached or not. What it adds up to, the free tier carve-out, and how to audit it.
Docker Multi-Stage Builds: An In-depth Guide
Multiple FROM statements let you copy only build artifacts into the final image and leave compilers behind. Smaller images, and a much smaller attack surface.
Mastering Docker Run Command: A Comprehensive Guide
The docker run flags you actually reach for: --name, -p, -v, -e, -d and --rm, and what each default quietly costs you when you leave the container running.
MySQL 8: Understanding and Fixing Error 1819
As a beginner in MySQL, you might encounter an error message that reads "ERROR 1819 (HY000): Your password does not satisfy the current ...
Ctrl+C and Ctrl+V party with GitHub Clone Helper!
When you copy the clone URL, you're actually copying the entire 'git clone' command. It's the Ctrl+C and Ctrl+V party you always wanted ...
Unveiling the Mystery: Decoding IP Address Retrieval in Linux
Understanding how to retrieve an IP address in Linux can be a bit tricky, especially for beginners. The good news? It's not as complicated...
The AWS Well-Architected Framework: A Key to Cloud Success
The cloud has revolutionized the way businesses operate, and Amazon Web Services (AWS) has consistently led the charge in cloud ...
Telnet Movies - A Nostalgic Look at the Dawn of Internet Movie Streaming
Long before Netflix, Hulu, and Amazon Prime Video transformed the way we consume content, there was a fascinating, lesser-known method...
Secure Your Media Files by Removing Metadata with AWS Lambda
Enhance privacy and security across various industries by stripping EXIF and other metadata from uploaded images and videos
CORS in Nginx: Configuration Guide for Enhanced Security
Cross-Origin Resource Sharing (CORS) is a crucial mechanism for enabling secure communication between web servers and browsers.
List your S3 bucket objects easily with S3 Directory Listing
Introducing S3-Directory-Listing, a simple and easy-to-use JS script and HTML combo that will turn your S3 bucket directory listing into ...
Keeping Composer Packages Up-to-Date with Composer Guardian: Why It's Essential
Outdated Composer packages are security debt that compounds quietly. How Composer Guardian scripts the update check so it runs without anyone remembering it.
What is Carrier Gateway on AWS?
Amazon Web Services (AWS) offers many services to provide a seamless and secure cloud computing experience to its users. One of these ...
Creating SSH Keys for Secure Access to AWS EC2 Instances with Terraform
When working with cloud infrastructure, security is of utmost importance. One critical aspect of security is controlling access to cloud ...
What is an Egress only internet gateways in AWS?
Within a VPC, an Egress-Only Internet Gateway is an essential component that enables outbound traffic from the VPC to the Internet.
What is an Internet Gateway in AWS?
An internet gateway is horizontally scaled and redundant, but attaching one is not enough: the route table entry is what actually moves traffic out of your VPC.
What are Route Tables on AWS VPC?
How VPC route tables decide where subnet traffic goes: local versus internet gateway routes, the one-table-per-subnet rule, and when a custom table pays off.
What is Subnet on AWS VPC?
Subnets in AWS VPC are used to divide a VPC into multiple logical networks. This allows users to isolate resources and control access to ...
What is AWS VPC?
Learn about Amazon Web Services (AWS) Virtual Private Cloud (VPC), a service that allows users to create and manage their own virtual pri...
Prevent nginx from caching DNS for proxy
If you are having problems with nginx proxy DNS caching, you can see the config for flush and/or clear DNS caching continuously...
Scaling PHP Applications on AWS
You can understand the running highly available, performant, and secure PHP applications on AWS with easy 14 steps...
Create an S3 Bucket and Set a Policy via CLI
I really like to use CLI commands and it's my daily routine. Today, I'll tell to you "How do you create an S3 Bucket on AWS" and "Put an ...
Issue a Let's Encrypt SSL with the AWS Route53
In this article, I want to tell you how you can issue a Let's Encrypt SSL with the AWS Route53 service. Let's start to learn.
Automate Let's Encrypt SSL on AWS Application Load Balancer
In this article, you can automate all of Let's Encrypt issuing operations for AWS Application Load Balancer and learn how you can manage the..
Deploy a website to S3 and CloudFront with Bitbucket Pipelines
In this article, you will learn how you can deploy your static website to the S3 Bucket and Cache Invalidation automatically...
Protect your AWS Account with specified IPs
You will learn, how you can protect your AWS account and the resources in the cloud with IAM Policy. Security is the first th...
Differences between AWS CLI v1 and v2
What v2 gives you that v1 does not: no Python interpreter to install, auto-prompt, config import, YAML output and ddb commands. Plus when upgrading is worth it.
SSL CA Problem on CentOS7 Docker and Solution
CentOS 7 containers on Apple Silicon fail every HTTPS call with curl error 77. The fix is one empty file under /etc/sysconfig, and here is what it triggers.
What do I have?
Apple MacBookPro M1, Dell XPS13 4K, Juniper SRX-110, Xiaomi 4A Router, Dell Pivot Monitor, Logitech MX Keys, Logitech MX Master 3.
I'm officially AWS Community Builder!
This morning, I've got an e-mail from @JasonDunn about the AWS Community Builder program. I don't remember when I applied to this program but
Deploy HA nginx to AWS ECS with Geolocation Routing via Terraform
You can deploy the nginx docker image in two different regions in AWS. If you need, you can add more region support by yout self...
Deploy nginx docker to AWS ECS with Terraform Automation
You can understand how you can deploy nginx docker to AWS ECS with terraform easily. The terraform will handle everything what you need.
How to Install Node Exporter on Linux Server
You can monitor your Linux Server easily with Node Exporter. Node Exporter installation it little bit different but just follow the article..
FortiClient Problem on M1 MacBookPro Problem Solution
I found a quick fix solution for FortiClient VPN client connectivity issue with Apple M1 MacBookPro. It's not a big deal...
Connect your AWS to GCP with Terraform via IPSec Site-to-Site VPN
You can deploy the VPN infrastructure easily with this article. Terraform is a automation tool you can do everyting in the cloud era.
Google Cloud Platform Automation with Terraform Easily
You can deploy your load balancer, instance template, instance group and firewall rules easily with terraform.
How to secure your Amazon Web Services account
Learn how to secure your Amazon Web Services account. Root level account has got full access to all resources running in the cloud enviro...
Install UGREEN USB Ethernet Adapter on macOS
Today, I need to connect my Apple MacBookPro Silicon to the internet via the same USB adapter but macOS doesn't like this.
Redirect 301 HTTPS on App Engine with nginx on Google Cloud Platform
You can learn how to redirect http requests turn to https easily. AppEngine and nginx will work smoothly after this tutorial.
Set two different Target Groups on AWS Load Balancer with Terraform
You will learn how you can use more than one target group behind Elastic Load Balancer in aws services with Terraform.
Extend your ec2 Linux disk without reboot on Amazon Web Services
Just follow the steps and learn how to extend without reboot. Normally, It's realy hard to extend the Linux servers root disk.
Create a New Grant User on AWS RDS (MariaDB)
You will learn, how to create a grant user for your RDS. It's little bit complicated process but just follow the article and know.
Amazon S3 CORS Settings with CloudFront on Amazon Web Services
Learn how to set for your aws S3 Bucket CORS settings on CloudFront in Amazon Web Services. CORS settings is taking security for your bucket.
Take your GitLab backup everyday if it works in Docker
Learn how to automate your Docker GitLab backup. You should make a backup for your repository security. Let's automate the process...
Find large files in CentOS, ubuntu and MacOS easily
Sometimes, it's really hard to find the big files path Linux. In this tutorial, you will learn how you can find it easily.
Fix "Error: rpmdb open failed" on CentOS or Amazon Linux 2
If you having rpmdb issues with your yum, you can easily follow the same steps and fix your package manager in a minute.
Error: No space left on the device when starting/stopping services only
Learn how to fix "No space left on the device" error when starting and/or stopping services only on Amazon Linux 2
Juniper SRX110H-VA VDSL2 Configuration Step by Step
Set a VDSL2 connection for Juniper SRX-110 easily. I've already created a main configration and you can use if you need. Just edit few lines..
Enable Logrotation for Docker Containers
Docker on your system, the container running in the docker can generate a large number of logs while you are not aware of the background.
Download specific file extension via wget easily on terminal
Sometimes, there may be files with more than one extension in a directory or folder. For example, .jpg, .png, .gif, .mp3, .mp4 etc.
Find the exact size of certain files in Linux via terminal
You may be wondering about the size of these files or just want to see the size of the files with the corresponding extension for a ...
Disable SELinux on CentOS 7 or CentOS 8
This tutorial shows you how you can disable SELinux on your CentOS server. The CentOS version should be CentOS 7 or CentOS 8.
Hello Blog!
My blog address contains my first name and my last name. So, you know my name I guess : )