Engineering essays from the bench.
War stories, architecture decisions, and the occasional tirade. Written by the engineers who shipped it.
Cloud IAM Best Practices Across AWS, Azure and GCP (2026 Guide)
How to integrate and manage IAM across AWS, Azure and GCP: one identity provider, least privilege as code, workload identity, and multi-cloud governance, from engineers who run it in production.
Is AWS Overkill for a Small Startup? When a VPS Is Enough
When one VPS is enough for a startup and when AWS earns its cost: a decision table by stage, a minimum production VPS setup, and a cheap path to AWS.
How to Find Unused Cloud Permissions in AWS, Azure and GCP
Find unused roles, keys and permissions in AWS, Azure and GCP with native tools, merge them into one report, and remove access without breaking production.
AI Agent Identity on AWS, Azure and GCP: What to Use
Entra Agent ID, Google Cloud Agent Identity and AgentCore Identity compared: credentials, on-behalf-of flows, sponsors, and when a service account fits.
az ad app list: Filter App Registrations by createdDateTime
Working az ad app list commands to filter, sort and export Entra app registrations by createdDateTime, why you only get 100, and when you need az rest.
Platform Engineering: Internal Developer Platforms That Get Adopted
Building internal developer platforms: golden paths, self-service infrastructure, Backstage, Crossplane, and how to measure platform success.
Just-in-Time Admin Access Across AWS, Azure and GCP
Replace standing cloud admin with time-bound access: Entra PIM, Google Cloud PAM and AWS Identity Center with TEAM, plus break-glass and access reviews.
Kubernetes vs Serverless: A Practical Decision Framework
Kubernetes vs serverless compared on cost, limits, latency and operations, with a decision tree, a cost model you can rerun, and the failure modes of each.
Docker in Production: Dockerfile and Image Best Practices
Production Docker done right: multi-stage Dockerfiles for Node.js and Go, non-root images, digest pinning, scanning, signing, and the failures to expect.
FinOps: A Practical Guide to Cloud Financial Management
How to run FinOps for real: tag enforcement in three layers, showback, unit economics, anomaly alerts in Terraform, commitment ownership and cadences.
