Search

Lessons (4)

• Multi-Account Strategy, Governance and Security Operations

  … immutable, centralized CloudTrail and Config logs. - Security tooling : GuardDuty, Security Hub and Access Analyzer administration. - Network : Transit Gateway …

• VPC Endpoints, Transit Gateway and Hybrid Networking

  … not transitive; Transit Gateway scales hub and spoke; PrivateLink shares one service. - Security groups are stateful; NACLs are …

• Internals, Upgrades, Resilience and Interview Questions

  … How would you secure a cluster? Least-privilege RBAC, dedicated ServiceAccounts with workload identity, Pod Security restricted , default …

• Docker & Containers

  … small and secure ---- FROM node:22-alpine WORKDIR /app ENV NODE ENV=production COPY package.json package-lock …