Technical articles on Cloud, DevSecOps, Network, Security.
AWS now has both Security Hub and Security Hub CSPM. This article explains why they exist, how they differ, and when you should use each one.
Why using NAT Gateways for AWS-internal traffic is a costly architectural mistake, and how deploying 3 specific VPC Endpoints changes the pricing model entirely.
A practical breakdown of how ECS's two launch types actually differ — not just on paper, but in the 2am-pager kind of way.
A structured self-study path for Terraform — theory, hands-on labs, and a real project, from initial setup through production-grade infrastructure.
In this series
A deep dive into Denial of Service attack techniques at each OSI layer, with a hands-on TCP SYN Flood demo and a real iptables u32 defense rule.
