Notes from the engineering desk.
Opinionated, evidence-led writing on the systems we build — AI engineering, cloud and FinOps, modernization, and architecture.
Agentic DevOps: How AI Agents Are Changing Cloud Operations
Agentic DevOps agents observe, decide, and act within governed limits. See the maturity model, architecture, and cost controls that keep it safe.
Read more
Kubernetes Workload Identity: How Pod-to-Cloud Auth Works
How IRSA and EKS Pod Identity actually authenticate pods to AWS, the trust policy mistake that grants cluster-wide access, and why Fargate still needs IRSA.
Read more
Cloudflare Workers vs AWS Lambda: Which Fits Your Workload?
Compare Cloudflare Workers and AWS Lambda across architecture, runtime, scaling, networking, storage, security, and cost to choose the right serverless platform.
Read more
Kubernetes 1.37 Pod-Level Resource Managers Explained
Learn how Kubernetes 1.37 Pod-Level Resource Managers improve CPU and memory allocation across multi-container Pods.
Read more
AWS Elastic IP: How It Works and When to Use It
Learn how AWS Elastic IPs provide stable public IPv4 addresses, covering lifecycle, failover, allowlisting, costs, quotas, and alternatives.
Read more
Amazon Bedrock AgentCore: Build, Deploy & Scale AI Agents
A practical guide to Amazon Bedrock AgentCore: architecture, components, security, and when to use it for building and scaling production AI agents.
Read more
Running Kafka on Kubernetes: What Strimzi Actually Does
Why Strimzi replaced StatefulSets with its own pod controller, how KRaft finally removed ZooKeeper, and the real production tradeoffs of Kafka on Kubernetes.
Read more
Kubernetes Policy Enforcement: VAP vs Kyverno vs Gatekeeper
Compare ValidatingAdmissionPolicy, Kyverno, and Gatekeeper to understand their differences and choose the right Kubernetes policy approach in 2026.
Read more
How CDN Works: Request Routing, Caching, and Edge Delivery
A CDN speeds up websites by routing users to nearby edge servers and delivering cached content closer to them. Learn how CDN request routing, edge caching, TTLs, cache invalidation, and content delivery work together.
Read more