Cloud computing
Google Cloud best practices: organization, security, reliability and costs
Best practices for operating Google Cloud: organization and folders, projects per environment, IAM through groups, keyless service accounts, private netwo…
Guides & insights
A library for curious minds
Cloud computing
Azure storage: storage accounts, Blob, Files, disks and redundancy
Store data on Azure: storage accounts, Blob (hot, cool, archive tiers, lifecycle), Files, Queue and Table, managed disks, LRS, ZRS and GRS redundancy opti…
Cloud computing
Storage on AWS: S3, EBS, EFS and backup
Store data on AWS: Amazon S3 (buckets, storage classes, versioning, lifecycle, encryption, policies and public access blocking), EBS volumes, EFS file sys…
Cloud computing
Monitoring and securing AWS: CloudWatch, CloudTrail, Config, KMS and GuardDuty
Operate and protect an AWS environment: CloudWatch metrics, logs and alarms, the CloudTrail API call log, compliance with AWS Config, encryption with KMS,…
Cloud computing
AWS best practices: security, reliability, costs and operations
The essential best practices for running AWS in production: multi-account organization, identities and least privilege, networking, encryption, high avail…
Observability
eBPF in production: security, prerequisites and limits
What to know before deploying eBPF agents: privileges and capabilities, kernel versions, managed environments, overhead, TLS encryption and security obser…
Proxy & networking
HAProxy and SSL: TLS termination, SSL passthrough and hardening
HAProxy and SSL/TLS: SSL termination, SSL passthrough in TCP mode with SNI routing, re-encryption to backends, ciphers, HSTS and securing the HAProxy serv…
Learning never stops