November 23, 2020
Architecture for embedding security throughout the software delivery lifecycle including shift-left patterns, automated testing, and continuous compliance
October 19, 2020
Architectural patterns for building internal developer platforms including self-service infrastructure, golden paths, and team topologies
September 21, 2020
Architectural approaches to cloud migration including modernization strategies, data migration patterns, hybrid architecture, and risk mitigation
July 20, 2020
Architectural patterns for embedding security controls throughout continuous integration and deployment pipelines including secrets management, artifact signing, and vulnerability scanning
May 18, 2020
Framework design patterns for automated security posture assessment, policy enforcement, and compliance validation across cloud infrastructure
April 20, 2020
Architectural approaches to embedding observability into system design from inception, enabling production debugging and operational insights
January 15, 2020
Building effective remote engineering teams with cloud-native practices, asynchronous collaboration, and robust communication patterns
December 27, 2019
Lessons learned running cloud-native infrastructure in production throughout 2019
November 19, 2019
Implementing safe deployment strategies with gradual rollouts
October 21, 2019
Building resilient event-driven systems with message queues and streams
September 16, 2019
Strategies for reducing cloud spending while maintaining performance
August 19, 2019
Systematic approaches to debugging complex distributed applications
July 23, 2019
Implementing SRE principles for reliable cloud-native services
May 20, 2019
Production-tested patterns for managing infrastructure as code with Terraform across multiple environments and teams
April 17, 2019
Designing scalable and maintainable GraphQL APIs for microservices, covering schema design, resolvers, and performance optimization
February 14, 2019
Real-world patterns and practices for building production serverless applications that handle millions of requests
January 16, 2019
Comprehensive guide to hardening Kubernetes clusters beyond default configurations, covering RBAC, network policies, and admission control
December 28, 2018
Reflecting on the major milestones, trends, and lessons learned in cloud-native technologies throughout 2018
November 22, 2018
Exploring container runtime security from kernel namespaces to security policies, covering vulnerabilities and hardening strategies
September 17, 2018
How monitoring practices have evolved in cloud-native environments, embracing metrics, logs, traces, and the observability mindset
July 25, 2018
An introduction to chaos engineering principles and practices for testing and improving system resilience in production environments
June 14, 2018
Comprehensive strategies for managing sensitive data in cloud-native applications, from basic practices to advanced secret management systems
May 22, 2018
Implementing GitOps practices for declarative infrastructure and application deployment in Kubernetes environments
February 12, 2018
Exploring the unique security challenges and best practices for serverless architectures and FaaS platforms
January 15, 2018
A deep dive into building Kubernetes operators and custom controllers to automate complex application management at scale
December 28, 2016
Reflecting on the major cloud security developments of 2016—from container security to multi-cloud adoption, GDPR preparation, and the evolution of DevSecOps culture.
September 22, 2016
Building comprehensive observability into microservices architectures with distributed tracing, metrics, and structured logging to understand complex system behavior.
August 18, 2016
Integrating security into DevOps workflows without slowing down development, from automated security testing to security-as-code practices.
July 15, 2016
Practical security strategies for containerized applications in production environments, from image hardening to runtime protection.
May 19, 2016
Building continuous integration and deployment pipelines for security-critical microservices while maintaining rigorous security controls and compliance requirements
March 22, 2016
Taking Kubernetes from experimental to production for key management microservices, sharing lessons learned from six months of real-world operation
August 20, 2015
Exploring Kubernetes for orchestrating containerized key management microservices and evaluating if it's ready for production security workloads
July 30, 2015
Implementing centralized logging and monitoring for distributed systems using the ELK stack, with practical patterns for security services and microservices.
July 16, 2015
Exploring how Docker containers can be used for security-sensitive microservices while addressing unique challenges around secrets management and HSM access
May 28, 2015
An early exploration of Kubernetes and its potential for orchestrating containerized workloads, including security services and distributed systems.
April 22, 2015
How we're using Docker to deploy and manage security-critical services, including key management and encryption services, with a focus on isolation and security.