From Keycloak to Cognito: Building a Self-Hosted Terraform Registry on AWS
A practical engineering story about replacing Keycloak with Cognito to create a self-hosted Terraform registry using Tapir, AWS ECS, and ALB …
Read More// blog
Infrastructure Engineering
Deep dives into AWS, Terraform, CI/CD, and the craft of building reliable infrastructure for startups and growing teams.
Vulnerability Management in CI/CD: Balancing SLAs and Developer Velocity (Part 1: Dependency Scanning with OSV-Scanner)
Part 1 of the Vulnerability Management Series — how to manage dependency vulnerabilities with OSV-Scanner and ih-github while meeting SLAs …
Read MoreUpgrading Terraform Modules to AWS Provider v6 with Confidence
When HashiCorp releases a new major version of the AWS Terraform provider, engineering teams often brace themselves. Major upgrades bring …
Read MoreImplementing Compliant Secrets with AWS Secrets Manager
I had a conversation with a colleague other day, and he asked who has access to a specific password. We use
Read More