Engineering essays from the bench.
War stories, architecture decisions, and the occasional tirade. Written by the engineers who shipped it.
FinOps: A Practical Guide to Cloud Financial Management
How to run FinOps for real: tag enforcement in three layers, showback, unit economics, anomaly alerts in Terraform, commitment ownership and cadences.
Cloud Security Posture Management (CSPM): A Practical Guide
What CSPM is, what it catches, how it differs from CNAPP and IaC scanning, and how to roll it out on AWS, Azure and GCP without drowning in findings.
Scaling a Startup on AWS: A Cost-Conscious Architecture
A startup AWS architecture that starts lean and scales by symptom: day-one foundations, ECS on Fargate, Terraform, NAT and database traps, cost controls.
Istio Service Mesh Guide: mTLS, Traffic and Ambient Mode
A production guide to Istio: when a mesh pays off, ambient vs sidecar, strict mTLS and authorization, canary routing, telemetry, and what breaks.
How to Choose a Tech Stack for Your Startup
A decision framework for a startup tech stack: which choices are hard to reverse, default stacks by product type, a one-week spike and an ADR template.
WebSockets vs SSE: Building Real-Time Apps That Scale
When to use WebSockets or Server-Sent Events, with server and client code for auth, resume after reconnect, Redis fan-out, proxies and graceful deploys.
Building AI Customer Support That Actually Resolves Issues
How to build AI customer support that resolves issues: grounded answers, policy-checked actions, clean human handoff, and metrics beyond deflection.
Terraform in Production: State, Modules, CI/CD and Drift
How to run Terraform in production: repo layout, S3 state with native locking, versioned modules, OIDC plan and apply in CI, policy checks, drift alerts.
API Security Best Practices: A Production Checklist
API security best practices that hold up in production: object-level authorization, full token validation, strict schemas, rate limits and logging, with code.
SIEM and Security Operations: Building a SOC That Works
How to build a SOC around a SIEM: which logs to collect first, detection as code with Sigma, alert tuning, automation, staffing, and when to choose MDR.
