Home Resume
Engineering & Life

Jayanth's Blog

Thoughts on AWS, Terraform, Kubernetes, platform engineering, and the quieter things in life.

143Posts
19Topics
1223Min of reading
Aug 23, 2026Latest
$ |
143 posts
GCP Architecture Series #10 — Premium and Standard Network Tiers: Where Traffic Leaves Google's Backbone
A platform team is asked to bring the egress bill down. They find Network Service Tiers, read that Standard Tier is cheaper than Premium Tier, and switch a regi…
Azure Architecture Series #10 — Billing Profiles and Invoice Sections: Where the Org Chart Starts Costing Money
Finance asks a reasonable question: can each department get its own invoice? The platform team opens Cost Management + Billing, finds that a Microsoft Customer…
AWS Architecture Series #30 — Glue Catalog and Schema Drift: A Table Has Four Schemas
Every account of schema drift starts in the same place: an upstream team added a field, or renamed one, or changed an integer to a string, and now the das…
Week 1 — The Policy Was Perfect and It Governed Nothing
Azure gives you three nested scopes: management groups, subscriptions and resource groups. Almost every landing zone that goes wrong goes wrong because somebody…
AWS Weekly Intelligence #3 - 17-21 August 2026
22 August 2026 · Everything AWS shipped, 17–21 August
GCP Weekly Intelligence #2 - 17-21 August 2026
A week with more structural change in it than the note count suggests. Google announced that from November it will start applying project liens on your behalf w…
GCP Architecture Series #9 — Dual-Region and Multi-Region: Choosing How Stale the Surviving Copy May Be
A team creates a bucket for a reporting pipeline. The location dropdown offers a region, a dual-region and a multi-region; multi-region sounds the most robust,…
Azure Weekly Intelligence #2 - 17-21 August 2026
Fourteen announcements across five days and no new services among them. What arrived divides cleanly into three groups: cost levers for people running licensed…
AWS Daily Intelligence #16 - Glue 6.0 Is Cheaper, and Its Headline Feature Makes Tables Athena Cannot Read
AWS Glue 6.0 is generally available with lower pricing than previous Glue versions andApache Iceberg v3support, described by AWS as the most complete v3 impleme…
AWS Architecture Series #29 — Strangler Fig: The Routing Layer Is the Migration
The strangler fig is the least controversial pattern in migration work. Put a routing layer in front of the old system, build each new capability behind i…
Azure Architecture Series #9 — Subscription Types: How the Agreement You Signed Shapes the Estate You Can Build
A platform team designs the landing zone properly. Subscription per team per environment, management groups by governance posture, the whole shape from#1. Then…
Week 1 — A GCP Landing Zone, and Why It Is Not Two Accounts
In AWS I run two accounts. One is governance — Organizations, SCPs, Identity Center, the audit trail. The other runs workloads. That split is the backbone of ev…
Week 15 - CloudTrail Organization Trail + Audit Forensics: Nobody Could Tell Me Who Deleted It
During Week 12 of this series, the account’s AWS Config recorder was deleted in the middle of a build. Not by me, and not by anything in that week’s Terraform —…
GCP Architecture Series #8 — Global, Regional, Zonal: The Property That Decides Every Later Design
A team is asked to make an application multi-region. It runs happily in one zone of one region, and the plan they write is the one their instincts hand them: st…
AWS Daily Intelligence #15 - Network Firewall Counts Rule Hits, and Why Zero Does Not Mean Unused
21 August 2026 · AWS Network Firewall
AWS Architecture Series #28 — When the Network Is the Bottleneck, You Now Drive to AWS
Every large migration eventually runs the same sum. Petabytes on one side, a link measured in gigabits on the other, and a number of days that does not fi…
Azure Architecture Series #8 — Paired Regions: What Pairing Promises, and What It Very Clearly Does Not
A disaster recovery plan contains a sentence that has survived three annual reviews: "In the event of a regional outage, services fail over to the paired region…
GCP Architecture Series #7 — Liens: The Brake With Somebody Else's Hand On It
A platform team is decommissioning a retired environment. The Terraform run fails on the last step: the project will not delete. The error names a lien.
AWS Daily Intelligence #14 - Twenty Managed Policies Per Role, and the Three Limits That Did Not Move
20 August 2026 · AWS Identity and Access Management
AWS Architecture Series #27 — DataSync and Transfer Family: Who Starts the Transfer
Two services, one sentence of requirement. "We need to move files into S3" is answered by AWS DataSync and by AWS Transfer Family, and the comparison tabl…
Azure Architecture Series #7 — Availability Zones: What a Zone Is, and What Zone-Redundant Actually Promises
An auditor asks a simple question: if one availability zone in your region fails, does this service keep running? The team checks that the region supports zones…
GCP Architecture Series #6 — Deleting a Project: The Undo Button That Only Half Works
A platform team is retiring an old data pipeline. The project is clearly dead — no deployments in eight months, no traffic — and somebody has read that deletion…
AWS Daily Intelligence #13 - Policy Autopilot Reads Your Terraform Plan, Not Your Runtime
19 August 2026 · AWS Identity and Access Management
AWS Architecture Series #26 — Mainframe Modernisation After Both Doors Closed
Mainframe modernisation is the longest, most expensive and least reversible programme most organisations will run. It is also the one where the reference…
How was your experience?
Your feedback helps improve this site.
PoorExcellent