Home Resume
Engineering & Life

Jayanth's Blog

Thoughts on AWS, Terraform, Kubernetes, platform engineering, and the quieter things in life.

143Posts
19Topics
1223Min of reading
Aug 23, 2026Latest
$ |
143 posts
AWS Architecture SeriesJul 31, 2026
AWS Architecture Series #7 — CUR 2.0 + Athena: Self-Service Cost Intelligence That Actually Works
A SaaS company runs 80 AWS accounts — one per product environment, plus shared services. Their monthly AWS bill is $600,000. Finance sends a PDF on the 5th of e…
12 min readRead
AWS Architecture SeriesJul 30, 2026
AWS Architecture Series #6 — Aurora Global Database: The Multi-Region Pattern Teams Get Half Right
A financial services platform processes transactions in us-east-1. The compliance team requires a documented RTO of under 5 minutes and RPO of under 1 minute fo…
9 min readRead
AWS Architecture SeriesJul 29, 2026
AWS Architecture Series #5 — KMS: The Encryption Layer Enterprises Get Half Right
A financial services company runs 40 AWS accounts under AWS Organizations. Their security review finds that the platform team created one KMS CMK in the managem…
9 min readRead
AWS Architecture SeriesJul 28, 2026
AWS Architecture Series #4 — EventBridge: The Enterprise Event Bus Enterprises Get Wrong
An e-commerce platform processes orders through a monolithic Order Service. When a customer places an order, the service makes four synchronous HTTP calls: rese…
13 min readRead
AWS Architecture SeriesJul 27, 2026
AWS Architecture Series #3 — ECS vs EKS: The Enterprise Decision Framework Beyond Buzzwords
A retail e-commerce company migrated from VMs to containers two years ago. They chose EKS because the engineering blog posts they read were all about Kubernetes…
11 min readRead
AWS Architecture SeriesJul 26, 2026
AWS Architecture Series #2 — IAM Identity Center: How Enterprises Replace 1,000 IAM Users with One Identity
A financial services firm has grown from five AWS accounts to fifty over two years. Each account was provisioned with its own set of IAM users — one per enginee…
10 min readRead
AWS Architecture SeriesJul 25, 2026
AWS Architecture Series #1 — Transit Gateway Hub-and-Spoke: The Networking Pattern That Scales to 100+ Accounts
A financial services company lands on AWS with five accounts: management, security, shared-services, prod, and dev. VPC peering works. Six months later th…
9 min readRead
AWS Weekly LabJul 23, 2026
Week 11 - Security Hub + GuardDuty: Findings That Fix Themselves
The dangerous cloud misconfigurations are also the most common and the most mechanical: a security group left open to0.0.0.0/0on SSH or RDP, an S3 bucket with p…
14 min readRead
AWS Weekly LabJul 19, 2026
Week 10 - Centralised Logging Platform: One Query Across Every Account
By Week 10 this lab's organization has real shape: a management account, a Dev OU with an active workload account, and Week 6's account vending machine ready to…
18 min readRead
AWS Weekly LabJul 12, 2026
Week 9 - ECS Fargate Self-Service: Ticket-to-Container in Minutes
A team wants to deploy a containerized service. Today that means someone hand-builds an ECS cluster, task definition, ALB target group, listener rule, security…
17 min readRead
AWSJul 3, 2026
EBS Savings Dashboard — Phase 1: Turning CUR 2.0 Billing Data Into a Live Cost Intelligence Platform
EBS volumes are one of the most reliably wasteful line items in any AWS bill — not because engineers are careless, but because the cost is invisible until someo…
14 min readRead
AWS Weekly LabJul 2, 2026
Week 8 - S3 Intelligent Storage Platform: Tiering, Lifecycle, and Cost Automation
Every S3 bucket accumulates objects over time. Log files written daily, data exports from pipelines, backups, media uploads — they all go in at Standard storage…
15 min readRead
AWS Weekly LabJun 27, 2026
Week 7 - IAM Identity Center SSO: Multi-Account Permission Sets
Week 6 built an Account Vending Machine — a ServiceNow ticket now produces a real AWS account inside the right Organizational Unit in minutes, with SCP guardrai…
14 min readRead
AWS Weekly LabJun 26, 2026
Week 6 - Building an Account Vending Machine with AWS Organizations, SCPs & Step Functions (No Control Tower)
Every growing AWS footprint eventually hits the same wall:someone needs a new AWS account, and giving them one safely is more work than it sounds.A new team nee…
15 min readRead
AWS Weekly LabJun 22, 2026
Week 5 - Cost Anomaly Detection with AWS Cost Explorer, SNS, and Lambda
You set a monthly AWS budget of $500. You get an alert when you hit $450. Job done, right?
13 min readRead
AWS Weekly LabJun 18, 2026
Week 4 - Building a Fleet Intelligence Platform with AWS Glue, Step Functions & ServiceNow
Every AWS account running EC2 instances has the same invisible problem:you cannot answer basic fleet questions without logging into dozens of consoles, running…
16 min readRead
AWSJun 15, 2026
I Built a RAG-Powered Search for My Blog — Here's Why and How
I have been writing on this blog for a while now. Posts about AWS, Terraform, GitOps, investing, health, and life in general. Over time the archive has grown to…
9 min readRead
AWS Weekly LabJun 6, 2026
Week 3 - Self-Service EC2 Fleet Patching with AWS SSM
Every enterprise inherits a fleet, not a blank slate. Servers were launched months ago by different teams — no consistent tagging, unknown patch state, no basel…
8 min readRead
AWS Weekly LabMay 30, 2026
Week 2: Automating PostgreSQL Provisioning with ServiceNow and AWS
In my 14 years as a DBA, I've seen this scene play out hundreds of times. A developer raises a ticket:"Need a PostgreSQL database for my new service."The ticket…
9 min readRead
AWS Weekly LabMay 25, 2026
Week 1: From Ticket to EC2 in 6 Minutes: Enterprise Self-Service Infrastructure on AWS
Every large enterprise has this problem: a developer needs a VM. They open a ticket. It goes to a queue. Someone reads it three days later, asks clarifying ques…
9 min readRead
30 Days of AWS TerraformMay 18, 2026
Day 30 - Multi-Environment GitOps Drift Detection with Automated Remediation
To conclude my30-Day AWS Terraform Challenge,I tackled a critical problem for modern cloud architectures:managing infrastructure drift across multiple environme…
5 min readRead
30 Days of AWS TerraformMay 17, 2026
Day 29 - GitOps Patient Zero — Continuous Delivery on AWS EKS with Argo CD and Kustomize
Today's project moves away from manual, ad-hoc cluster provisioning and embraces true modern cloud operations by setting up a production-gradeGitOps Continuous…
6 min readRead
30 Days of AWS TerraformMay 16, 2026
Day 28 - Building a Highly Available 3-Tier AWS Application with Terraform and GitHub Actions
For Day 28, the goal was to build a highly available 3-tier application on AWS. The application included a Node.js frontend, a Go backend API, and a PostgreSQL…
6 min readRead
30 Days of AWS TerraformMay 15, 2026
Day 27 – Production Style AWS Infrastructure with Terraform and GitHub Actions CI/CD
For Day 27 of my AWS and Terraform learning journey, I wanted to move beyond basic Terraform deployments and simulate a more production style Infrastructure as…
5 min readRead
How was your experience?
Your feedback helps improve this site.
PoorExcellent