Search

Lessons (23)

• AWS Security Building Blocks

  … Give the running workload role permission to read only its required secret. KMS KMS manages encryption keys used …

• Configuration, Secrets and Storage

  … In production, store the real values in AWS Secrets Manager, Vault, or another secret manager, then sync them …

• Practical Project: Deploy a Real CRM App on EKS

  … AWS SECRETS MANAGER SECRET ID value: backendenv resources: requests: { cpu: 250m, memory: 256Mi } limits: { memory: 512Mi } readinessProbe: receive …

• API Contracts, Gateways and Security

  … Use TLS, rate limits, audit logs and secrets management. A safe API contract For POST /orders , document request …

• Secrets, Ephemeral Values, and Least Privilege

  … See [write-only arguments](https://developer.hashicorp.com/terraform/language/manage-sensitive-data/write-only) and [ephemeral variables …

• RBAC and Cluster Security

  … real secret store with External Secrets Operator or the Secrets Store CSI driver (AWS Secrets Manager, Vault). 4 …

• Containers at Scale: ECS Deep Dive and EKS

  … role . - Inject secrets from Secrets Manager or SSM Parameter Store with the task definition secrets field. - Use awsvpc …

• IAM: Who Can Do What

  … Read a database secret secretsmanager:GetSecretValue The intended secret ARN Use a customer-managed encryption key Appropriate KMS …

• VPC Endpoints, Transit Gateway and Hybrid Networking

  … a task reads a secret A private app calls the Secrets Manager regional hostname over HTTPS. With an …

• Multi-Account Strategy, Governance and Security Operations

  … Mature organizations use many accounts , not one big one. mermaid flowchart TD Root[Management account] -- Sec[Security OU …

• Your Practical Kubernetes Workflow

  … non-root user where possible. - Keep secrets in a secret manager, not Git. - Pin images to a known …

• Run Containers on AWS with ECR and ECS

  Build a container, store it in ECR, and run it on ECS Fargate without managing servers. The simple …

• State, Remote Backends, and Locking

  … managed KMS key, grant the required key permissions as well. Restrict state access because state may include secrets …

• Internals, Upgrades, Resilience and Interview Questions

  … Deployment vs StatefulSet? Deployments manage interchangeable pods. StatefulSets give stable names, ordered rollout and per-pod persistent volumes …

• Authentication, Authorization & API Security

  … Never put secrets in a JWT. js import jwt from "jsonwebtoken"; const accessToken = jwt.sign({ sub: user.id …

• Resilience, Disaster Recovery and Multi-Region Design

  … AWS Elastic Disaster Recovery for servers Secrets / KMS Multi-region secrets and multi-Region KMS keys Traffic : Route …

• AWS Interview Questions: Clear Answers

  … security group, use encrypted backups, store credentials in Secrets Manager, and test restoration. When would you choose S3 …

• Deploying & Operating Microservices

  … autoscaling rules - [ ] Config through environment variables; secrets in a secret manager - [ ] API docs (OpenAPI) and versioning policy - [ ] Automated …

• CI/CD and Reviewed Production Changes

  … Avoid posting complete plans containing secret material into public PR comments. Detect drift bash terraform plan -detailed-exitcode …

• Python Web APIs: FastAPI and Django

  … python manage.py startapp tasks then add "tasks" to INSTALLED APPS python manage.py runserver A Django project …

• Extending Kubernetes: CRDs, Operators and Admission

  … cert-manager, Prometheus Operator, CloudNativePG, Strimzi (Kafka), Argo CD, Crossplane. Build your own with: Tool Language Notes --- --- --- Kubebuilder …

• Practical Lab: S3 File Upload and CloudFront Delivery with NestJS

  … Never publish real access keys, secret keys or account IDs in Git, screenshots, tickets or chat. bash Set …

• AWS Databases: Choose the Right One

  … Store credentials in a secret service rather than source code. Connect from an authorized application host inside the …