Stop Writing Spaghetti Terraform: The Module Architecture That Scales to 50 TeamsMar 11, 2026·12 min read
Your Tools Are Sharp, But Is Your Culture? The Missing Link in Least PrivilegeSep 11, 2025·5 min read
The Terraform State Time Bomb: How to Defuse it Before Your Infra CollapsesThe Call You Don't Want to Get at 2 AM I've walked into this exact situation twice in my career, and it's the same story both times. A promising startup, six engineers, moving fast. Terraform was intrMar 12, 2026·15 min read
The Azure Role That Won’t Get You Fired: A Least-Privilege RBAC Strategy for Your DevOps TeamSep 9, 2025·8 min read
The Strategic IAM Policy: Mitigating High-Stakes Risks with Least Privilege for Your DevOps TeamSep 3, 2025·7 min read
SOC 2 for Engineers: What It Is and Why Your Terrible Tagging Strategy Is an Audit Failure Waiting to HappenI’ve walked into companies mid-way through their first SOC 2 audit, and the scene is always the same: a palpable sense of panic. A senior engineer, who usually commands a fleet of Kubernetes clusters with ease, is white-knuckling a mouse, desperately...Aug 28, 2025·6 min read
Stop Exposing Secrets: A Step-by-Step Guide to Securing Terraform State with AWS S3 and DynamoDBEvery DevOps engineer knows this story: You’re building infrastructure with Terraform. Things move fast. But then you realize your terraform.tfstate file—containing IAM ARNs, secrets, database connection strings, and even cloud resource IDs—is sittin...Jul 16, 2025·7 min read
Your First Reusable Module: Building a Production-Ready AWS VPC with TerraformYou’ve seen it. I’ve seen it. I’ve walked into companies where the network topology looks less like a deliberate architecture and more like a digital swamp. Multiple, disconnected VPCs, created manually through the AWS console, each a unique "snowfla...Jul 11, 2025·9 min read
The Blueprint: My Opinionated Terragrunt Project Structure for Scalable TeamsReal-World Problem Intro I’ve walked into too many organizations where the Terraform setup is a ticking time bomb. It starts with the best intentions—isolating components into their own directories. But then the rot sets in. Every single directory ha...Jul 9, 2025·7 min read
From Static Keys to Dynamic Secrets: A Modern SecOps BlueprintWe’ve all seen it. That one critical file production.tfvars or secrets.env, containing master database password or your cloud provider keys. It’s the skeleton in almost every setup, we convince ourselves that we will rotate it “later”, but we all kno...Jul 3, 2025·7 min read
Taming Kubernetes YAML Sprawl with Helm ChartsYAML Sprawl: Every DevOps engineer eventually faces “YAML sprawl.” Deploying even simple apps means juggling multiple Kubernetes resource files—Deployments, Services, ConfigMaps, Ingress, and more. Manually managing and updating these for every envir...Jun 25, 2025·4 min read
