Tag archive
Practical writing on AWS foundations, account design, identity, networking, and cloud operating patterns.
Karpenter changes EKS node autoscaling by launching right-sized EC2 nodes from pending pods, then consolidating and replacing them as the fleet drifts.
How to securely deploy to AWS from GitHub Actions using OIDC
Use External Secrets Operator to sync AWS Secrets Manager values into Kubernetes with IRSA, sane refresh policies, and less secret material in git.
How to set up and use IAM Roles for Service Accounts in EKS to securely manage pod-level IAM roles
Lowdown on the AWS Load Balancer Controller for Kubernetes ingress.
Automatically update RDS credentials and application config on EC2 instances.
How to auto update security groups with Cloudflare IPs using AWS Lambda
Manage multiple AWS accounts with OpenTofu/Terraform, from super simple to leveraging AWS Control Tower AFT.
Learn how to protect your ALB with AWS WAF and CloudFront.
