Jayanth's Blog

A fintech company has 12 AWS accounts managed by a single platform engineer running a bespoke Python script that calls Organizations and Service Catalog APIs. N…

Security Hub's FSBP standard checks roughly 300 controls, and by Week 11 it already covered nearly every security-relevant misconfiguration in this account — op…

A payments platform processes card authorisations across two AWS regions: us-east-1 (active) and us-west-2 (passive). Their RTO target is 3 minutes, RPO is 30 s…

A SaaS company runs 80 AWS accounts — one per product environment, plus shared services. Their monthly AWS bill is $600,000. Finance sends a PDF on the 5th of e…

A financial services platform processes transactions in us-east-1. The compliance team requires a documented RTO of under 5 minutes and RPO of under 1 minute fo…

A financial services company runs 40 AWS accounts under AWS Organizations. Their security review finds that the platform team created one KMS CMK in the managem…

An e-commerce platform processes orders through a monolithic Order Service. When a customer places an order, the service makes four synchronous HTTP calls: rese…

A retail e-commerce company migrated from VMs to containers two years ago. They chose EKS because the engineering blog posts they read were all about Kubernetes…

A financial services firm has grown from five AWS accounts to fifty over two years. Each account was provisioned with its own set of IAM users — one per enginee…

A financial services company lands on AWS with five accounts: management, security, shared-services, prod, and dev. VPC peering works. Six months later th…

The dangerous cloud misconfigurations are also the most common and the most mechanical: a security group left open to0.0.0.0/0on SSH or RDP, an S3 bucket with p…

By Week 10 this lab's organization has real shape: a management account, a Dev OU with an active workload account, and Week 6's account vending machine ready to…

A team wants to deploy a containerized service. Today that means someone hand-builds an ECS cluster, task definition, ALB target group, listener rule, security…

EBS volumes are one of the most reliably wasteful line items in any AWS bill — not because engineers are careless, but because the cost is invisible until someo…

Every S3 bucket accumulates objects over time. Log files written daily, data exports from pipelines, backups, media uploads — they all go in at Standard storage…

Week 6 built an Account Vending Machine — a ServiceNow ticket now produces a real AWS account inside the right Organizational Unit in minutes, with SCP guardrai…

Every growing AWS footprint eventually hits the same wall:someone needs a new AWS account, and giving them one safely is more work than it sounds.A new team nee…

You set a monthly AWS budget of $500. You get an alert when you hit $450. Job done, right?

Every AWS account running EC2 instances has the same invisible problem:you cannot answer basic fleet questions without logging into dozens of consoles, running…

I have been writing on this blog for a while now. Posts about AWS, Terraform, GitOps, investing, health, and life in general. Over time the archive has grown to…

Every enterprise inherits a fleet, not a blank slate. Servers were launched months ago by different teams — no consistent tagging, unknown patch state, no basel…

In my 14 years as a DBA, I've seen this scene play out hundreds of times. A developer raises a ticket:"Need a PostgreSQL database for my new service."The ticket…

Every large enterprise has this problem: a developer needs a VM. They open a ticket. It goes to a queue. Someone reads it three days later, asks clarifying ques…

To conclude my30-Day AWS Terraform Challenge,I tackled a critical problem for modern cloud architectures:managing infrastructure drift across multiple environme…

Today's project moves away from manual, ad-hoc cluster provisioning and embraces true modern cloud operations by setting up a production-gradeGitOps Continuous…

For Day 28, the goal was to build a highly available 3-tier application on AWS. The application included a Node.js frontend, a Go backend API, and a PostgreSQL…

For Day 27 of my AWS and Terraform learning journey, I wanted to move beyond basic Terraform deployments and simulate a more production style Infrastructure as…

For Day 26 of my AWS Terraform learning journey, I explored HCP Terraform Cloud and workspace management.

Today I worked on Terraform import as part of Day 25 of my AWS Terraform learning series.

Today I worked on deploying a highly available and scalable Django application on AWS using Terraform. The goal of this project was to understand how production…

For Day 23 of my AWS Terraform journey, I built a security monitoring solution for Amazon S3 using Terraform modules.

For Day 22 of my 30 Days of AWS Terraform challenge, I built a small but complete web application stack using Terraform modules.

For Day 21 of my AWS Terraform learning journey, I worked on a mini project focused on AWS policy creation and governance setup. The goal was to build a small b…

In this project, I deployed a complete Amazon EKS environment using Terraform custom modules. The goal of this implementation was to understand how production s…

For Day 19 of my challenge, I explored Terraform Provisioners using AWS EC2.

For Day 18 of my AWS Terraform learning journey, I built a backend only serverless image processing pipeline using Amazon S3, AWS Lambda, Lambda Layers, and Ter…

Today I worked on Blue Green Deployment using AWS Elastic Beanstalk and Terraform.

Today I worked on managing AWS IAM users using Terraform with a CSV-driven approach.

There’s something powerful about watching two completely separate networks start talking to each other… quietly, privately, without the internet even noticing.

Today I worked on my first mini project in my AWS Terraform journey. The goal was to deploy a static website using S3 and CloudFront.

Today’s learning felt like a shift from “building everything” toworking intelligently with what already exists.

Today I continued my Terraform journey by working with advanced built-in functions.

Today I worked on Day 11 of my AWS Terraform learning journey. The focus was Terraform built-in functions and how they help clean, transform, validate, and reus…

There is a moment in learning Terraform where it stops feeling like writing static code, and starts feeling like shaping logic. Day 10 was that moment for me.

In the previous days, I focused on creating resources using Terraform.Today was different.

Today was Day 08 of my AWS Terraform challenge. The topic was Terraform meta arguments.

Terraform has been feeling smooth so far.

On Day 6, I learned something simple but powerful: Terraform code should not just work, it should also be easy to read.

Today felt different. Terraform started feeling less like writing config and more like writing logic.

Until now, Terraform was just creating resources.But today, I learned how Terraformrememberswhat it creates, and how to manage that memory safely using a remote…

Day 3 felt like the first real interaction with AWS.

On Day 2 of my 30-Day AWS Terraform Challenge, I moved from understanding concepts to actually running Terraform against AWS.

I recently started the 30 Days AWS Terraform Challenge to strengthen my understanding of Infrastructure as Code and cloud automation.

The other day, I was looking at a pair of sunglasses. Same model, same lenses, same performance, yet two very different prices:$244and$162. That’s when somethin…

When people talk about money, they usually talk innumbers.

A Practical Way to Refresh DEV and TEST from PROD

Today I ran into one of those issues that looks complex, but turns out to be beautifully simple.

There’s a question I often reflect on: Why am I more inclined toward long‑term, consistent investments instead of rushing into real estate or chasing fast retur…

Cloud costs do not always rise because of growth. Sometimes they rise because of configuration. That was exactly the case in our environment.

Backups are one of those things we rarely think about—until the moment we need them the most.

Why do I have adult conversations with Ameya?

Change is hard… but it is possible.

When I was growing up, money was always spoken about with one main instruction.

When people talk about giving their children a good life, they often talk about education, money, or opportunities. Those things matter. But the older I get, th…

Investing, for me, is not about excitement. It is about patience.

In your twenties, the body forgives almost everything.

Modern diets are built around convenience.

There comes a moment in life when you stop chasing short-term comfort and begin investing in long-term vitality.

There comes a moment in life when you realize that learning alone is not enough.

Life brings unexpected tragedies that are beyond our control. It's heartbreaking to witness people facing circumstances they never chose. We react with tears an…

The error messagePRCT-1225: failed to verify Oracle Automatic Storage Management (Oracle ASM) user credentials using the command 'asmcmd credverify'indicates th…

Whether or not you need to lock tables while backing up MariaDB depends on a few factors, including the type of backup you are performing and the tools you are…

There are two main ways to archive MongoDB data in Azure:

Studio 3T is a graphical user interface (GUI) and integrated development environment (IDE) for MongoDB. It provides a variety of features to help you manage you…