Writing on AWS cloud fundamentals and best practices.

All my recent blog posts for fundamentals on working with the cloud, collected in chronological order.

Networking Is Still Hard

Networking Is Still Hard

A Kubernetes cluster can quietly move itself into other availability zones when Spot capacity runs out, and the cross-AZ traffic that follows shows up on the bill with no health…

Read article

Your IAM Wildcards Are a Tooling Problem

Your IAM Wildcards Are a Tooling Problem

Developers keep shipping s3:* and AdministratorAccess, and it is not laziness. The deploy loop, indirect permissions, policy size limits, and Access Analyzer gaps all push you toward wildcards. Here is…

Read article