August 9, 2026 • 5 min read
Designing an end-to-end traffic inspection architecture with AWS WAF, Network Firewall, ECS, and Firewall Manager to enforce north-south and east-west control.
aws networking security ecs vpc
July 1, 2026 • 1 min read
Replacing public egress for Kinesis and Firehose with VPC private endpoints eliminated unnecessary NAT Gateway traffic.
aws vpc cost-optimization kinesis
June 15, 2026 • 1 min read
Patterns and trade-offs for operating many production Kubernetes clusters without a large platform team.
kubernetes eks platform-engineering gitops
May 20, 2026 • 1 min read
How Python automation, Athena queries, and encrypted restoration workflows brought 14k auth tokens back from DynamoDB during a production incident.
incident-response aws python dynamodb