Modern Engineering Insights
Articles covering modern software development, AWS, cloud architecture, distributed systems, backend engineering and AI.
The Drift You Didn't Cause, Detecting Infrastructure Drift from AWS-Managed Changes
Not all infrastructure drift comes from manual changes. AWS itself modifies resources constantly. Here's how to detect and manage the drift you didn't cause.
Latest Articles
Infrastructure Code Review Is More Consequential Than Application Code Review. Treat It That Way
A bad infrastructure merge doesn't just introduce a bug it can delete a database or open your network. Here's what rigorous infrastructure code review actually looks like.
Version Your Infrastructure Like Software
Infrastructure without release management is just code nobody can safely update. Here's how to version IaC the way software teams version libraries and why it matters.
The Terraform Module Mistake I See in Almost Every Codebase
Over-abstracted Terraform modules are harder to use than the resources they wrap. Here's how to spot the pattern and design modules that actually reduce complexity.
Your CI/CD Pipeline Should Catch Infrastructure Mistakes Before a Human Reviewer Ever Sees Them
Human reviewers catch what they catch. CI catches what it's programmed to. Here's how automated infrastructure validation stops the mistakes humans miss every time.
Every Manual AWS Change Is Configuration Drift You'll Pay for Later
Here's how configuration drift compounds silently and the detection and prevention patterns that stop it.
Terraform Isn't Infrastructure as Code. It's Infrastructure Documentation
Terraform's real value isn't automation it's documentation. Readable HCL is the difference between infrastructure your team can own and infrastructure only you understand.
Cloud Infrastructure Maturity Isn't Measured by Terraform
Terraform doesn't make infrastructure mature. Governance, standards, and operational discipline do. Here's what actually separates mature cloud orgs from the rest.
What an AWS Landing Zone Actually Does
An AWS landing zone isn't just account scaffolding, it's operational risk reduction at scale. Here's what a real baseline looks like and what it enforces.