July 1, 2026
How I cut AWS NAT Gateway costs by 30% with VPC endpoints
Replacing public egress for Kinesis and Firehose with VPC private endpoints eliminated unnecessary NAT Gateway traffic.
awsvpccost-optimizationkinesis
Blog
Lessons and patterns from production infrastructure work.
Replacing public egress for Kinesis and Firehose with VPC private endpoints eliminated unnecessary NAT Gateway traffic.
Patterns and trade-offs for operating many production Kubernetes clusters without a large platform team.
How Python automation, Athena queries, and encrypted restoration workflows brought 14k auth tokens back from DynamoDB during a production incident.