INTRODUCTION: Kubernetes makes application management simple: we define the deployments, services and configurations of our services in YAML and Kubernetes is taking care of maintaining the desired state. However, applications usually require infrastructure to run on – databases, s3 buckets, iam roles, load balancers, vpc’s etc. We manage these resources with separate tools, usually terraform, […]
If you run Amazon OpenSearch Service in production, automated hourly snapshots sound like a good safety net. In reality, they have major operational catches: Backups sit in a hidden, AWS-managed bucket you cannot inspect or download. You cannot export them across accounts or regions for disaster recovery. You cannot retain them past 14 days for […]
Why a GKE Ingress can look fine in kubectl and still have no IP — and how that differs from EKS and ALB If you have used EKS, HTTP Ingress usually means an Application Load Balancer. Someone installs the AWS Load Balancer Controller, you set ingressClassName: alb, and AWS creates an ALB. Certificates often come […]
Introduction This blog provides step-by-step instructions to implement centralised AWS Backup across an AWS Organisation using Terraform. Backup policies are managed from a dedicated DevOps Tooling account using Delegated Administration. A CloudFormation StackSet automatically deploys the required IAM role and backup vault to all member accounts. Org-level backup policies are attached to the Production and […]
Introduction If you have ever spent 20 minutes writing a Kibana query just to find one error, this post is for you. I built a small project on a single AWS server where I could just type “show me the last 502 errors” in plain English, and get a real answer pulled straight from Elasticsearch. […]
A note before this starts: I used AI to help write this piece. The observations in it aren’t generated, though — they’re what our DevOps team has actually watched happen over the past while. I’m upfront about the tool because the argument here is that the shift itself is real and lived, even if the […]
Introduction Relying on a single AWS account for enterprise workloads creates a critical structural bottleneck that limits security and scalability. At the beginning of your cloud journey, a single account is perfect: developers have agility, networks are simple, billing is straightforward. However, as your footprint grows, a single account is a recipe for disaster. You’ll […]
Locking Down the Front Door: IAM and Access Control in AWS Most AWS breaches don’t start with a zero-day exploit. They start with an over-permissioned role, a leaked access key, or a policy that grants *:* (a wildcard meaning “every action, on every resource”) because it was faster than scoping it properly. Identity and Access […]
Introduction: Imagine receiving a critical production alert at 2 AM. Instead of manually checking logs, metrics, dashboards, and deployment history, what if an AI assistant could instantly analyze the issue, identify the probable root cause, and suggest the next troubleshooting steps? Modern DevOps teams manage increasingly complex cloud environments, making incident investigation both time-consuming and […]
