Tagged “tutorial”
8 posts
Cutting NAT gateway costs with VPC endpoints that actually help
How gateway and interface VPC endpoints replace NAT gateway traffic for AWS API calls, what they cost instead, and which traffic still has to go through NAT.
CI/CD for a static site: build, sync, and invalidate
How to structure a GitHub Actions pipeline that builds a static site, syncs it to S3 with correct cache headers, and invalidates CloudFront without overpaying.
CloudFront invalidations without nuking your AWS bill
How CloudFront invalidation pricing actually works, why fingerprinted asset filenames let you skip it almost entirely, and when surgical invalidation is still required.
Ditch IAM access keys: GitHub Actions OIDC to AWS
A step-by-step guide to replacing long-lived IAM access keys in GitHub Actions with short-lived OIDC credentials, including the trust policy gotchas that bite people.
IAM Identity Center: kill per-account IAM users for good
A practical guide to setting up AWS IAM Identity Center for multi-account SSO with Terraform, including the SCIM sync and provisioning-delay gotchas that catch people.
Diagnosing and fixing Lambda cold starts that matter
A practitioner guide to measuring Lambda Init Duration, trimming package bloat, and deciding when provisioned concurrency is worth its always-on cost.
Scoping IAM Policies with Tag, IP, and MFA Conditions
A practical guide to IAM condition keys — aws:ResourceTag, aws:SourceIp, and MFA presence — with JSON examples and the Deny-with-exceptions gotchas that trip people up.
Terraform S3 native locking: kill your DynamoDB table
How to configure Terraform S3 backend state locking without DynamoDB using use_lockfile, plus the safe migration path from an existing lock table.