All 36 articles, sorted alphabetically
AWS API Gateway -- the managed front door for APIs
Deep-dive on AWS API Gateway: the managed front-door role, REST vs HTTP APIs (features vs cost/latency), integrations (Lambda/HTTP/AWS services), auth…
Read article →AWS AppSync architecture
Deep-dive on AWS AppSync managed GraphQL: a single typed endpoint that authorizes each request per field, resolves individual fields via VTL or JavaSc…
Read article →Amazon Aurora storage architecture
Deep-dive on Aurora's storage layer: 10GB protection groups, six-way three-AZ quorums, VCL/VDL commit semantics, storage-node…
Read article →AWS CloudFront
How CloudFront distributes content globally via edge locations.
Read article →AWS Config
Track resource state over time. Compliance rules.
Read article →AWS Data Lake Architecture in Depth
A 2500-word walkthrough of AWS data lake: ingest, S3 raw/curated, Glue Catalog, Lake Formation, ETL, Athena, BI, observability, cost governance.
Read article →Amazon DAX architecture
Deep-dive on DynamoDB Accelerator (DAX): a managed in-memory cache speaking the DynamoDB API, separate item and query caches, the write-through path t…
Read article →AWS DynamoDB
How DynamoDB provides serverless NoSQL with predictable performance, why partition keys matter, and how streams enable event-driven patterns.
Read article →DynamoDB global tables
Deep-dive on DynamoDB global tables: full writable replicas per region serving local reads and writes, Streams-based change capture and the managed cr…
Read article →AWS EBS
How EBS provides persistent block storage for EC2: volume types, snapshots, encryption.
Read article →AWS EC2
How EC2 provisions virtual machines: instance types, AMIs, EBS, placement groups, and the operational patterns for running fleets.
Read article →AWS ECS / Fargate -- running containers without managing servers
Deep-dive on AWS ECS/Fargate: the run-containers-without-server-ops need, task definitions (blueprint), services (declarative desired count/scaling), …
Read article →AWS EFS
How EFS provides managed NFS for multiple EC2 instances to share storage.
Read article →Amazon EventBridge
Serverless event bus. Rules route to targets.
Read article →AWS Glue
Deep-dive on AWS Glue as an architecture: a Hive-compatible Data Catalog that every AWS analytics engine reads as the single source of truth, plus a s…
Read article →AWS IAM
How IAM controls access to every AWS API: users, groups, roles, policies, and how STS enables temporary credentials.
Read article →AWS IAM conditions architecture
Deep-dive on AWS IAM conditions: context keys, tag conditions, MFA + IP, SCP interaction, resource policies, boundaries, and policy simulator.
Read article →aws_kinesis
A 2500-word walkthrough of AWS Kinesis: Data Streams, shards, retention, enhanced fan-out, Firehose, Managed Flink, auto-scale.
Read article →AWS KMS architecture
Deep-dive on AWS KMS: CMKs, envelope encryption, key policy + grants, aliases + rotation, Multi-Region keys, CloudHSM, CloudTrail.
Read article →AWS Lambda
How Lambda runs code without managing servers, cold starts, execution model, and the patterns that make Lambda work at scale.
Read article →Lambda cold start architecture
Deep-dive on Lambda cold start: sandbox + runtime + function init phases, SnapStart, provisioned concurrency, VPC ENIs, and observability.
Read article →AWS MSK
How MSK provides managed Apache Kafka.
Read article →AWS Multi-Region Architecture in Depth
A 2500-word walkthrough of AWS multi-region: Route 53 routing, regional stacks, async data replication, failover, and global observability.
Read article →AWS Overview
What AWS is, how regions and availability zones organize its infrastructure, and how the service catalog composes into modern applications.
Read article →AWS PrivateLink
Endpoint to AWS/SaaS services without internet. Cross-VPC private access.
Read article →AWS RDS
How RDS manages database engines (Postgres, MySQL, MariaDB, Oracle, SQL Server) with backups, HA, and read replicas.
Read article →AWS S3
How S3 stores objects durably and at scale, storage classes, access patterns, and the operational realities of huge S3 workloads.
Read article →AWS Secrets Manager Rotation
Automated password rotation. RDS + custom.
Read article →AWS Serverless Architecture in Depth
A 2500-word walkthrough of AWS serverless: API Gateway, Lambda, Step Functions, DynamoDB, S3, Aurora Serverless, IAM, and observability.
Read article →AWS SQS
How SQS provides managed message queues: standard vs FIFO, dead-letter, visibility timeout.
Read article →aws_step_functions
Deep-dive on AWS Step Functions: ASL state machines, Task/Choice/Parallel/Map states, direct service integrations, declarative error handling (retry/catch), Standard vs Express, callback patterns for human-in-the-loop, state data flow, execution-history observability, and cost/payload/idempotency operations.
Read article →AWS Transit Gateway architecture
Deep-dive on AWS Transit Gateway: VPC/VPN/Direct Connect/peering attachments, the association and propagation model, route-table segmentation, applian…
Read article →AWS VPC
How VPCs isolate network space in AWS: subnets, route tables, gateways, security groups, and NACLs.
Read article →EBS Volume Types
Right disk for right workload. IOPS vs throughput vs cost.
Read article →Amazon QuickSight
Serverless BI. SPICE in-memory. Q for NLQ.
Read article →S3 Encryption
Who holds keys + who encrypts. Choose per security policy.
Read article →