Security Hub deep dive: the score that rises without fixing anything (and the new Security Hub)

IAM Access Analyzer deep dive: who can get into your AWS account (and who shouldn't anymore)

Kubernetes from ZERO to production: explained with drawings (2026)

The AWS bill: FinOps for people who pay out of their own pocket (full course)

An incident from start to finish: 5 incidents caused, diagnosed and written up in a postmortem

Networking for DevOps people: 7 traps that throw no error, in containers (full course)

Backups that actually restore: 9 drills destroying the original (full course)

Your own GitHub and your own CI: Forgejo and Woodpecker, without leaving the door open

Secrets with OpenBao: no passwords in the code, and the traps that throw no error

Supply chain: Trivy, signatures with cosign and your own registry (full course)

Zero to production: a whole project, stitching together what you already know (full course)

Bash course for system administrators: the language, not the commands

GuardDuty deep dive (1/4): read a finding and act in the first minutes

GuardDuty deep dive (2/4): every finding type and how to remediate each resource

GuardDuty deep dive (3/4): run it without surprises on the bill

GuardDuty deep dive (4/4): the JSON, filters and rules, field by field

Python for being on call: reading logs at three in the morning

Basic Python course for system administrators

Python for automating deployments (a course for sysadmins)

Terraform tests and CI: success, zero tests passed, exit code zero (8/8)

Change without destroying in Terraform: moved, import and removed (7/8)

Terraform modules and versions: the file almost nobody commits (6/8)

count or for_each in Terraform: you remove beta and gamma falls (5/8)

Terraform variables and secrets: (sensitive value) is in plain text (4/8)

Terraform state: a plain plan deleted one of my containers (3/8)

Reading a Terraform plan: the warning that it is about to destroy something (2/8)

Terraform 2026 from scratch: your first infrastructure, no cloud account (1/8)

The test that fails once in twenty: same starting state, proven with a hash

Lambda scaling fits in three lines, and scale to zero is the same rule

Your Lambda does not receive requests. It goes looking for them

SignatureDoesNotMatch: reproduce AWS's cruellest error on your own machine

Zero available, one invisible: the whole SQS model in two numbers

Two AWS services on the same port do not speak the same language

S3 has no folders: proven with three commands on your own laptop

Your AWS lab stopped being free for work. Let us write the replacement

Amazon GuardDuty in 6 minutes: what it detects and how to read a finding

What is AWS CDK, and when should you NOT use it? (2026)

Lambda internals: your function does not receive requests, it goes looking for them

Your health check takes 6 seconds to lie to you (goroutines and channels in Go)

Why study Prometheus and Grafana in 2027? The verdict

The 4 Invisible Charges on Your Cloud Bill (with 2026 Prices)

I wrote an OpenTofu provider and found out why the state file exists

Living at $0: Free Serverless for every cloud (Lambda vs. Functions vs. Cloud Run, 2026)

Write your own Prometheus exporter in Go (it is 35 lines)

Open Docker's source code and find what you are after (without knowing Go)

Managed Kubernetes: The fee AWS charges and Azure waives (EKS vs AKS vs GKE, 2026)

Why everything you administer is written in Go (and what that changes for you)

The FREE virtual machine on every cloud in 2026 (and the cut nobody talked about)

Make AI Deploy Your App ALONE: 5 Ways (2026)

Security Group or NACL? The difference that confuses everyone

Caddy vs nginx: I measured it, and nginx uses 6 times less memory

Leak-proof S3: Secure your buckets in 4 layers

Stop Storing AWS Keys in GitHub: OIDC in CI/CD

Nomad vs Kubernetes: the two arguments for Nomad are false

Loki vs Elasticsearch: Elasticsearch won both searches

What is Amazon Detective? The AWS incident investigator

What is AWS Config? Your infrastructure's black box

AWS CDK: 16 lines of Python generate 338 of template, and 79% is not yours

What is Amazon Macie? Find sensitive data lost in S3

Your Git repo weighs a gigabyte because of a file deleted three years ago