Search

Lessons (22)

• VPC Networking Without the Confusion

  … allow app port, source = ALB security group App → Database: allow 5432, source = App security group Using a security …

• VPC Endpoints, Transit Gateway and Hybrid Networking

  … reference another security group as the source, such as "port 5432 from sg-app ", instead of IP ranges …

• Multi-Account Strategy, Governance and Security Operations

  … revoke sessions (attach an explicit deny with a TokenIssueTime condition), isolate the instance with a quarantine security group …

• EC2, Storage and Auto Scaling

  … AMI, instance type, security group, role, and startup instructions. Then let the Auto Scaling group create matching instances …

• AI Evaluation, Safety, and Security

  … Monitor real-world aggregate signals and investigate failures with privacy-respecting traces. Security and privacy - Prompt injection: user …

• RBAC and Cluster Security

  Control who can do what with RBAC, harden pods with security contexts and Pod Security Standards, and protect …

• Containers at Scale: ECS Deep Dive and EKS

  … ip ). - Enforce NetworkPolicies with VPC CNI network policy support or Cilium, and attach security groups for pods when …

• Domains, Load Balancers and HTTPS

  … Common explanations include the wrong target port, a security-group rule missing the ALB source, a process bound …

• Practical Project: Deploy a Real CRM App on EKS

  … Security group rule: allow TCP 5432 into the DB security group only from the cluster/node security group …

• Run Containers on AWS with ECR and ECS

  … The ALB security group accepts the intended viewer traffic. The task security group accepts port 80 from the …

• S — Single Responsibility Principle

  … accounting, marketing, the security team… "One reason to change" really means one group of people who would ask …

• Design a Chat Application

  … For a group with one million members, do not synchronously send one million socket writes from the original …

• AWS Databases: Choose the Right One

  … Allow its port only from the app security group. Feature Why it matters --- --- Automated backups Recover to an …

• AWS Interview Questions: Clear Answers

  … The task security group allows only the ALB's app-port traffic. Why is listing an S3 bucket …

• Structural Patterns: How to Connect Objects

  … in that controls access 🪪 security guard Composite Treat single items and groups the same 🗂️ folders & files …

• CloudWatch: Know What Your App Is Doing

  … CloudTrail records AWS account actions, such as who changed a security group. Start with useful application logs Write …

• What Is Software Architecture?

  … it quickly? Business rules testable without a database Security Is it protected? No customer can read another customer …

• Cost Optimization and the Well-Architected Framework

  … S3 data left in Standard forever, old log groups, over-provisioned IOPS. 5. Logging : CloudWatch Logs ingestion is …

• C4 Architecture Diagrams: Context, Container, Component and Code

  … Draw it when the internal design is genuinely hard to understand, risky to change, security-sensitive or shared …

• REST API Design

  … items are grouped logically, named clearly, and ordering works the same way for every dish. Once you've …

• IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access

  … types Policy Attached to Purpose --- --- --- Identity-based User, group, role What this identity may do Resource-based S3 …

• Serverless: Lambda and API Gateway

  … You still write, test, secure, and monitor the code; AWS manages the servers. mermaid flowchart LR B[Browser …