Cloud cost
Your NAT Gateway bill is a routing problem
Why AWS-bound traffic ends up on the public path, how flow logs prove it, and what VPC endpoints are actually worth.
Insights
Notes from the work.
What we learn on engagements, written up plainly: what the bill was hiding, why the pipeline was slow, and which decisions were worth making twice.
Platform
Right-sizing Fargate without guessing
Reading utilization over a full cycle, choosing reservations from evidence, and letting autoscaling absorb the rest.
Infrastructure as code
Terraform state strategies that survive a team
Workspace layout, blast radius, and why the module boundary matters more than the module contents.
Security
Least privilege you can actually deploy
Writing IAM policies alongside the resources they serve, and the conditions that make a wildcard safe.
Delivery
The path to production is the product
Why one obvious deployment path beats three clever ones, and how to measure whether yours is working.
Reliability
Alerts that earn the interruption
Mapping alarms to failure modes, giving every alert an owner, and deleting the ones nobody acts on.
Articles are being written as engagements complete. If there is a topic you want covered, or a problem you would like a second opinion on, tell us — it is usually the fastest way to get an answer.
Rather ask than read?
Send us the actual problem. We will give you an honest read on it.