Search

Lessons (38)

• Authentication, Authorization & API Security

  … user.role }, process.env.JWT SECRET, { expiresIn: "15m" }); function authenticate(req, res, next) { const token = req.headers.authorization …

• API Contracts, Gateways and Security

  Make APIs evolvable and safe with explicit formats, versioning, idempotency, gateway policy, authentication and authorization. The problem in …

• CloudFront: Faster Websites and Safer File Delivery

  … It is a helpful layer, not a substitute for secure application code and authentication. Follow a cache hit …

• AWS Security Building Blocks

  … You do not need it merely to authenticate users to your own API. A customer request, step by …

• Providers and Your First AWS Resources

  … Further reading: [AWS provider documentation](https://registry.terraform.io/providers/hashicorp/aws/latest/docs), [AWS authentication](https://registry …

• Design a Logging and Monitoring Platform

  … The agent batches them to an authenticated gateway. The gateway validates quotas and schema, sends data to durable …

• Proxies, APIs and Real-Time Protocols

  … Persistent connections still need authentication, bounded buffers and reconnect behavior. 3. Use durable queues for work that must …

• Scalable Frontend Architecture

  … no order rules lib/http.ts authenticated transport, retries, errors Avoid a global components/ directory becoming the default …

• REST API Design

  … critical POSTs - [ ] Versioning strategy decided - [ ] Authentication on every non-public route (see Authentication & Security ) - [ ] Rate limiting (see Scaling …

• S3: Store Files Safely

  … A denied public request and a successful role-authenticated request are compatible outcomes. For a temporary authenticated download …

• Serverless: Lambda and API Gateway

  … Configure authentication before adding private customer data or writes. A Lambda execution role supplies the function's AWS …

• API Gateway, BFF & Service Discovery

  … api/orders/ → orders service, /api/users/ → users service Authentication Verify the JWT once; pass the user ID downstream …

• Edge, Platform & Frontend Delivery

  … to lightweight tasks such as locale negotiation, an authentication redirect, headers, or an experiment assignment. It should not …

• AI Evaluation, Safety, and Security

  … Never treat generated content as executable or trusted by default. - Abuse and misuse: apply authentication, rate limits, content …

• Behavioral Patterns II: Chain, Template, Iterator, Mediator, Memento, Visitor

  … app.use(authenticate); // may stop the chain with 401 app.get("/orders", listOrders); function authenticate(req, res, next …

• Design a File Storage Service

  … making the API a pipe The API should authenticate the user, create a file record in PENDING state …

• RBAC and Cluster Security

  … stored. mermaid flowchart LR R[kubectl / controller] -- A[Authentication: who are you?] A -- Z[Authorization: RBAC, may you …

• Extending Kubernetes: CRDs, Operators and Admission

  … them when the parent goes. Admission control After authentication and authorization, admission can modify or reject requests before …

• What Is Artificial Intelligence? A Developer's Guide

  … It still needs ordinary software to authenticate users, read messages, display results, and collect corrections. Artificial intelligence (AI …

• AWS Interview Questions: Clear Answers

  … Add user authentication, an authorized API, and a database suited to its queries. Keep the database private, scope …

• Monolith vs Microservices

  … becomes a network call needs timeouts, retries, idempotency, authentication, monitoring and versioning. The middle path: the modular monolith …

• Developer Learning Plan and Document-Assistant Capstone

  … Existing web developers can reuse API, authentication, testing, and deployment skills. Stage Learn Build Completion evidence --- --- --- --- Week 1 …

• Internals, Upgrades, Resilience and Interview Questions

  … What happens when you create a Deployment? The API server authenticates, authorizes, runs admission, and stores it in …

• NestJS Core Concepts

  … Middleware ❌ Request ID, raw logging, cookies Guard ✅ ( ExecutionContext ) Authentication, roles Interceptor ✅ Timing, caching, response mapping, timeouts Pipe ✅ (per …

• Practical Project: Deploy a Real CRM App on EKS

  … authenticationMode=API AND CONFIG MAP aws eks describe-cluster --name "$CLUSTER" --region "$REGION" \ --query 'cluster.accessConfig.authenticationMode' --output …

• Containers at Scale: ECS Deep Dive and EKS

  … by CIDR, and enable control plane logging (audit, authenticator). Image supply chain - Scan images with ECR enhanced scanning …

• Code Profiling

  … request - authenticate - verifyToken Investigate the wide path first, then repeat the profile after one change. Find a real …

• CloudWatch: Know What Your App Is Doing

  … Avoid recording payment details or authentication tokens in logs. Remember this - Logs explain individual events; metrics reveal trends …

• 10,000 Users Do Not Need 10,000 Database Connections

  … MySQL An HTTP request may be waiting on authentication, a cache, a queue, another service, or the database …

• Domains, Load Balancers and HTTPS

  … A health check should not require customer authentication or perform slow work. Add HTTPS step by step You …

• Run Containers on AWS with ECR and ECS

  … amazonaws.com/bookshop-web:1 The ECR login authenticates Docker's registry operations. It does not grant the …

• IAM: Who Can Do What

  … of your AWS account as an office building. Authentication checks a person's badge. Authorization decides which rooms …

• VPC Networking Without the Confusion

  … A PostgreSQL authentication error shows that the client reached a database process; investigate credentials and database privileges next …

• AWS Databases: Choose the Right One

  … A timeout suggests network/listening issues; an authentication error suggests credentials or database permissions. These require different fixes …

• Python Web APIs: FastAPI and Django

  … ORM, migrations, admin panel, authentication, forms, templates and security defaults are all included. "Batteries included." ![FastAPI vs Django …

• Domain-Driven Design: Strategic Design

  … 0.7] Returns handling: [0.55, 0.35] Authentication: [0.15, 0.7] Email sending: [0.1, 0 …

• Practical Lab: S3 File Upload and CloudFront Delivery with NestJS

  … In a real app, protect upload , presign and delete with an authentication guard and an admin role. An …

• C4 Architecture Diagrams: Context, Container, Component and Code

  … Good reasons to create a code diagram - An authentication, payment, pricing or permissions component has important security boundaries …