Cloud & AWS
VPC, EC2, S3, RDS, ECS, Route 53, cost, architecture and disaster recovery.
Cloud & AWS articles
EC2 Instance Metadata and IMDSv2
The 169.254.169.254 metadata endpoint hands out temporary IAM credentials. IMDSv1 let any SSRF bug steal them; IMDSv2 fixes that with a token handshake.
October 24, 2026Security Groups vs Network ACLs
Security groups are stateful and attached to ENIs; NACLs are stateless and attached to subnets. Mixing up which needs a return rule causes most VPC connectivity bugs.
October 24, 2026An AWS Tagging Strategy for Cost Allocation
You can't attribute cloud spend you can't tag. Here's a minimal tag schema, how to enforce it, and how to deal with the costs tags can't reach.
October 24, 2026Disaster Recovery: RPO, RTO, and the Four Strategies
RPO is how much data you can lose; RTO is how long you can be down. Pick numbers first, then the strategy and cost follow.
October 24, 2026ECS Fargate Task Networking
Every Fargate task gets its own ENI, IP, and security group. Understanding that clears up load balancer target types, egress, and 'task can't pull the image'.
October 24, 2026CloudWatch Logs and Metric Filters
CloudWatch Logs is cheap to write and expensive to forget about. Here's retention, turning error patterns into metrics and alarms, and Logs Insights for ad-hoc queries.
October 24, 2026An S3 Static Site Behind CloudFront
The right way to host a static site on AWS: a private S3 bucket, CloudFront with OAC in front, HTTPS via ACM, and SPA fallback routing. Plus the 403s that trip everyone.
October 24, 2026AWS VPC: Subnets, Route Tables, and What 'Public' Actually Means
The mental model for VPC routing — IGW vs NAT, route table association, and the usual reasons an instance has no outbound access.
October 24, 2026AWS Step Functions Basics
Step Functions orchestrates multi-step workflows as a state machine with built-in retries, error handling, and visual history. Here's the states, the two types, and when to use it.
September 10, 2026