Engineering Blog
Insights on Azure architecture, cloud security, Infrastructure as Code, and AI.
When Your FinOps Tool Becomes Your Biggest Cost: The AWS Cost Explorer Trap
I built a Grafana dashboard to track AWS costs. The Cost Explorer API calls ended up costing more than all other AWS services combined. Here's what happened and how I fixed it.
From Kubernetes to $0.50/month: Migrating a Real-Time App to AWS Serverless
How I replaced a Node.js + Socket.io + Kubernetes deployment with API Gateway WebSocket, Lambda, and DynamoDB, cutting costs to near-zero while improving reliability.
Serverless Observability for $0: CloudWatch Logs to Grafana via k3s CronJobs
How I added full business metrics to a serverless AWS app without any additional infrastructure cost. A CronJob queries CloudWatch Logs Insights and pushes structured events to Loki: totals, trends, and distributions in Grafana.
YAML-Driven Terraform: Building a Self-Service Infrastructure Catalog
How to turn your Terraform codebase into a self-service platform. A YAML-driven approach that lets teams provision cloud resources without writing HCL - and keeps your platform team sane.
Azure APIM v2 vs Classic: What Changed and What Breaks
Azure API Management is moving to a new platform. The StandardV2 and BasicV2 tiers bring real improvements, but also breaking changes that catch teams off guard. Here is what you need to know before migrating.
Why Every Azure Enterprise Needs a WAF Analysis Methodology
Azure WAF protects your web applications, but without a structured analysis methodology, you are flying blind. Learn how to turn WAF from a checkbox into a security asset.
When Your Platform Team Can't Agree on the Stack
A real story from an enterprise platform team split over infrastructure tooling. The technical debate was the easy part. The human side, sunk cost, identity, and fear of starting over, is where it gets hard.
Terraform AzureRM 4.0: What Breaks and How to Migrate
The AzureRM provider 4.0 just dropped with breaking changes to resource naming, attribute defaults, and provider configuration. After migrating several production codebases, this is what you need to know.
Azure Verified Modules: Microsoft's Answer to the Terraform Module Mess
Azure Verified Modules provide Microsoft-maintained, tested, and standardized Terraform and Bicep modules for Azure resources. After using them in production, this is what works, what doesn't, and when to use your own modules instead.
