Systems & Architecture Blog
Deep dives, developer logs, and technical writeups on building high-performance, containerized backend systems.
Keyless AWS Authentication in GitHub Actions with OIDC Federation
Build a production-grade CI/CD pipeline using GitHub Actions with IAM OIDC identity federation for keyless AWS authentication. No stored access keys, no secrets rotation — just short-lived tokens scoped to your repository. Covers OIDC setup, trust policy scoping, real-world claim matching bugs, and versioned S3 artifact deployment.
Production-Grade PostgreSQL on AWS RDS — Multi-AZ, Bastion Hosts & CloudWatch Alarms
Deploy a managed, highly available PostgreSQL database on Amazon RDS with Multi-AZ failover, private subnet isolation, SG-to-SG chaining, bastion host access, automated backups, and CloudWatch monitoring. Covers both manual console setup and full bash automation.
Building a Serverless Contact Form with API Gateway, Lambda & SES
Design and deploy a fully serverless, event-driven contact form backend on AWS using API Gateway, Lambda (Node.js), and SES. Covers IAM least-privilege, CORS, XSS sanitization, idempotent deployments, and the real-world debugging pitfalls of IAM resource policy conflicts.
Hardening a Linux Web Server on AWS EC2 — From Manual to Fully Automated
A hands-on walkthrough of launching, securing, and automating a production-grade Ubuntu web server on AWS EC2. Covers custom VPCs, security groups, Nginx reverse proxying, systemd services, Fail2ban, user-data bootstrapping, and full AWS CLI automation.
Hosting Secure Static Sites on AWS for $0/Month (S3, CloudFront, & OAC)
Architect a secure, production-grade static site hosting stack on Amazon Web Services using private S3 storage, CloudFront CDN, Origin Access Control, and ACM SSL certificates.
The "Lock and Key" of Kubernetes Scheduling
A deep dive into Kubernetes scheduling mechanics, showing how Taints, Tolerations, and Node Affinity establish the ultimate placement handshake for production clusters.
Cross-Namespace Communication in Kubernetes using Internal DNS (FQDN)
A practical look at how Kubernetes handles internal cross-namespace networking natively through Fully Qualified Domain Names (FQDN) without complex routing or external IPs.
Scaling NestJS APIs with Caching, Queues, and Connection Pooling
Learn architectural patterns to optimize NestJS API performance, scale throughput, and reduce PostgreSQL database latency under heavy request loads.
Ultimate Local Developer Environments with Docker & Docker Compose
A practical guide to configure fast, predictable local developer environments with Node.js, hot-reloading, and dedicated PostgreSQL caches using Docker.