Search

Lessons (40)

• IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access

  … GetObject using temporary keys A role has two policies: - Trust policy : who may assume it. - Permissions policy : what …

• Testing, Preconditions, and Policy Checks

  Use validation, lifecycle conditions, Terraform tests, and policy checks to catch different classes of errors. Different checks answer …

• IAM: Who Can Do What

  … Then check whether a resource policy, permissions boundary, session policy, or organization policy further restricts access. An explicit …

• Practical Lab: S3 File Upload and CloudFront Delivery with NestJS

  … create the distribution The cache policy ID below is AWS's managed CachingOptimized policy. Use the regional bucket …

• API Contracts, Gateways and Security

  Make APIs evolvable and safe with explicit formats, versioning, idempotency, gateway policy, authentication and authorization. The problem in …

• Extending Kubernetes: CRDs, Operators and Admission

  Teach Kubernetes new resource types, automate them with controllers, and enforce policy before objects are saved. Kubernetes is …

• CloudFront: Faster Websites and Safer File Delivery

  … Use the full generated policy or place this statement into a valid policy document. Merge it deliberately with …

• Frontend Security

  … Direct DOM APIs element.innerHTML = userInput; // ✅ element.textContent = userInput; Content Security Policy (CSP): the safety net A CSP …

• Domain-Driven Design: Strategic Design

  … Then add commands, actors, policies and hot spots. Sticky note Colour Example --- --- --- Domain event 🟧 Orange Order Placed …

• Safe AWS Deployments with IaC and CI/CD

  … The trust policy controls who can obtain the role. Its permission policies control the deploy operations. Restrict both …

• Capacity, Availability, Latency and CAP

  … load, response time, uptime and partition-time policy. The problem in context A retailer serves 20 million reads …

• Practical Project: Deploy a Real CRM App on EKS

  … aws eks associate-access-policy \ --cluster-name "$CLUSTER" --region "$REGION" \ --principal-arn ROLE ARN \ --policy-arn arn:aws …

• VPC Endpoints, Transit Gateway and Hybrid Networking

  … Endpoint policies restrict what can be done through an endpoint: json { "Statement": [{ "Effect": "Allow", "Principal": " ", "Action": ["s3:GetObject …

• Multi-Account Strategy, Governance and Security Operations

  … per team, per environment (dev, staging, prod). AWS Organizations and SCPs Service Control Policies constrain principals in member …

• Networking, DNS and Traffic Routing

  … can return different healthy endpoints by region or policy. Anycast advertises one IP from multiple locations, so routing …

• S3: Store Files Safely

  … Do not delete valuable data until you understand the rule and recovery policy. Object storage through book covers …

• AI Specialties and Real-World Examples

  … Start in a simulation with explicit constraints and compare to a deterministic policy. This approach differs from an …

• Putting AI Systems into Production

  … For structured responses, parse against a schema and reject or repair invalid values within a limited policy. Do …

• Design a Polite Web Crawler

  … Honor host policy and configured crawl limits. 2. Workers lease bounded tasks, fetch with time/size limits, and …

• Design a File Storage Service

  … A reconciler checks the object/session and retries finalization; a lifecycle policy removes abandoned parts. Already-issued signed …

• The Hot SKU Alert Problem

  … The system needs a coalescing policy, not just a queue. Possible policies include: - Every version: one alert per …

• CI/CD and Reviewed Production Changes

  … HCP Terraform can provide managed runs, state, approvals, and policy integrations. If using a hosted execution platform, follow …

• Design a Ride-Sharing Service

  … release a newer assignment by mistake. Stadium surge policy In a stadium, one rider should not create 1 …

• Drift, Troubleshooting, and Disaster Recovery

  … if required Access denied Active identity, role policy, resource policy, organization controls Grant only the missing permission through …

• SQL Interview Query Drills

  … define grouping, compute an aggregate, then filter with a clear tie policy](/img/database-interviews/sql-drills.svg …

• Cluster Networking, DNS and NetworkPolicies

  … 5432 Notes: - Policies are additive allow lists . There is no "deny" rule; a pod selected by any policy …

• Containers at Scale: ECS Deep Dive and EKS

  … ip ). - Enforce NetworkPolicies with VPC CNI network policy support or Cilium, and attach security groups for pods when …

• Production Capstone and Interview Practice

  … A production variant may need KMS and bucket policies that require TLS; add those as explicit, reviewed requirements …

• Topics, Partitions & Offsets

  … It deletes them based on retention policy : Setting Meaning Example --- --- --- retention.ms Delete records older than this 604800000 …

• Internals, Upgrades, Resilience and Interview Questions

  … kubelets may be older than the API server by a few minors (check the current policy); never newer …

• AWS Interview Questions: Clear Answers

  … Write policies with the exact actions and ARNs needed, then test the expected workflow. I treat AccessDenied as …

• AI Evaluation, Safety, and Security

  … is sent to providers, follow retention and access policies, and avoid placing secrets in prompts or logs. - Output …

• Backend Design Scenarios

  … The dependency policy should be visible in traces so you can distinguish downstream time from application time. Design …

• Environments, Workspaces, and Multiple Accounts

  … They do not inherently provide separate credentials, permissions, or approval policies. For strong dev/prod isolation, use separate …

• Reusable Modules and Clear Interfaces

  … This is a useful abstraction because it bundles a policy and lifecycle boundary. Avoid modules that simply rename …

• Caching & Redis

  … Learn caching strategies, invalidation, eviction policies, the classic pitfalls, and what Redis can do beyond caching. The big …

• Providers and Your First AWS Resources

  … assets.id block public acls = true block public policy = true ignore public acls = true restrict public buckets = true …

• Dependencies, Data Sources, and Resource Lifecycle

  … reference, such as a service needing an IAM policy attachment to finish before it starts. Broad module-level …

• System Design Interview Framework

  … audience, load, group size, delivery promise or retention policy. What must be true Turn the ambiguous prompt into …

• Proxies, APIs and Real-Time Protocols

  … positions and payment commands use the same retry policy? --- Concepts and implementation details ![Communication choices: reverse proxy at …