Blog
DevOps, tools, tips, and tech
Website Hosting for Customer Workloads - AWS Amplify Done Properly
Part 11 of the AWS account structure series. How the customer-facing website is hosted on AWS Amplify with cross-account deployment roles, DNS integration, and an operational runbook.
DNS Management at Scale - Route 53 with Terraform
Part 10 of the AWS account structure series. Managing Route 53 hosted zones and records with Terraform, email delegation patterns, and cross-account DNS access for certificate validation.
Organizational Guardrails with Service Control Policies
Part 9 of the AWS account structure series. Using Service Control Policies (SCPs) to set permission boundaries across your organization, with practical examples and common patterns.
IAM Identity Center - Why It Replaces IAM Users
Part 6 of the AWS account structure series. Setting up AWS IAM Identity Center for human access, understanding the identity store, and why it's the recommended approach over IAM users.
Permission Sets - Designing Access Patterns
Part 7 of the AWS account structure series. Creating permission sets in IAM Identity Center with managed policies, inline policies, and appropriate session durations.
Cross-Account Access Patterns - Deployment Roles and Role Chaining
Part 8 of the AWS account structure series. Designing cross-account deployment roles, understanding role chaining, and implementing external ID protection.
How Maptrics Found 1,000+ SEO Issues on My Site Before Google Did
A real-world walkthrough of using Maptrics to crawl a Next.js site, uncover 24 unique SEO issues across 81 URLs, and fix the high-priority problems — missing H1 tags, short titles, incomplete Open Graph metadata — before they impacted search rankings.
Keyless CI/CD with GitHub Actions OIDC
Part 5 of the AWS account structure series. Eliminating long-lived AWS credentials by using GitHub Actions OIDC for secure, keyless authentication.
Running Ollama with GPU Acceleration in Podman on Windows
A complete guide to running Ollama in Podman Desktop on Windows with NVIDIA GPU passthrough via WSL2, including CDI setup, verification steps, CPU-only mode, and a GPU VRAM compatibility table.
Solving the State Problem - Terraform Backend Bootstrap
Part 4 of the AWS account structure series. The chicken-and-egg problem of Terraform state storage, and how to bootstrap an S3 backend with DynamoDB locking.