$ls -lah ~/blog/

Writing

Thoughts on infrastructure, DevOps practices, cloud architecture, and building reliable systems at scale.

Eliminating Static AWS Credentials in GitHub Actions with OIDC

Static credentials in CI/CD pipelines are a liability. Learn how to use OpenID Connect (OIDC) to let GitHub Actions authenticate to AWS without any stored secrets.

Jan 5, 202613 min read

terraformdevopsiacinfrastructure

Terraform Best Practices for Production Infrastructure

Essential patterns and practices for managing production infrastructure with Terraform. Learn how to structure your code, manage state, and avoid common pitfalls.

Apr 15, 20247 min read

observabilitymonitoringprometheusgrafana

Building Observability at Scale: Lessons Learned

Real-world lessons from building observability infrastructure that processes terabytes of data daily. Learn what works, what doesn't, and how to avoid common pitfalls.

Mar 10, 20245 min read

kubernetesdevopsproductionsre

Kubernetes Production Readiness Checklist

A comprehensive checklist for running Kubernetes in production. Ensure your cluster is secure, reliable, and maintainable before going live.

Feb 20, 20244 min read