Blog

Managing observability at scale has really changed with the rise of distributed systems, and the traditional three-pillar approach (metrics, logs, traces) has become one of the biggest bottlenecks for DevOps teams. As things get more complicated, it can be difficult to keep your observability stack efficient, cost-effective and genuinely useful for troubleshooting. Just as we’ve moved from monoliths to microservices, the world of observability is undergoing its own profound transformation. ...

AWS PrivateLink has long been the go-to solution for private connectivity of services within a region. Until recently, sharing services across regions required VPC peering or transit gateways — and sometimes even the creation of “outpost” VPCs to serve as transit VPCs. All that changes with the native Cross-Region PrivateLink solution. 1 — The “Gymnastics” of Terraform‑Based Inter‑Region PrivateLink Before December 2024, if you wanted a private interface endpoint in Region B for a service hosted in Region A, you have two options: ...

Managing cloud resources has really changed with the Infrastructure as Code (IaC) approach, and Terraform has become one of the best tools for the job. But as things get more complicated, it can be difficult to keep your Terraform code clean, efficient and secure. Just as software developers use tools such as linters and documentation generators, infrastructure engineers also need specific tools to ensure that their Terraform code is ready for production. ...

Kubernetes has revolutionized the way we deploy applications, but managing numerous Kubernetes resources for complex applications can quickly grow to become a heavy burden. That’s where Helm, the package manager for Kubernetes, comes in. However, as your deployments become more complex and approach production environments, vanilla Helm may not be enough. As with any production system, you need robust tooling to ensure that your Helm charts are clean, maintainable and secure. ...

Following our previous tutorial about using AWS KMS for secrets management, this second part explores how to leverage AWS Secrets Manager with Terraform/OpenTofu for more advanced secrets management capabilities. AWS Secrets Manager provides additional features like automatic rotation, fine-grained access control, and centralized secrets management. Prerequisites AWS Account with appropriate permissions Terraform/OpenTofu installed AWS CLI configured [Optional] Basic understanding of AWS KMS (covered in Part 1) 1 — Setting Up AWS Secrets Manager First, let’s create the necessary resources to store and manage our secrets: ...