Posts
All the articles I've posted.
-
Your VPN Is a Flat Network You Dial Into. That Is the Whole Problem.
A VPN authenticates you once and then drops you onto the internal network with reach to everything. That is not access control. It is a flat network with a login screen, and I have written before about what flat networks cost.
-
AWS Multi-Account Is Not About Accounts. It Is About Boundaries.
One AWS account feels simple until production, staging, logs, experiments and the monthly bill start sharing the same blast radius.
-
How a Packet Actually Reaches Your Pod
A visual walk through every hop a request takes from load balancer to pod, why the service is a fiction, and why so many cluster network failures are silent.
-
A Terraform provider for AWS WorkMail, because ClickOps was not an option
AWS WorkMail is not in the official AWS provider. I needed to manage it in a fully Terraform environment, so I built the provider that was missing.