-
AWS IAM PassRole Explained: A Hands-On Privilege Escalation Lab
Learn how AWS IAM iam:PassRole can create a privilege escalation path. Build a practical EC2 lab, restrict role passing with least-privilege policies, and test access safely using AWS CLI dry runs.
-
AWS SaaS Tenant Isolation: RLS, IAM, and Background Jobs (Part B)
Adding a tenant ID to your database is only the beginning. Explore practical ways to enforce tenant boundaries with PostgreSQL Row-Level Security, Amazon S3, DynamoDB IAM conditions, and asynchronous background jobs on AWS.
-
How to Design Tenant Isolation in a Multi-Tenant SaaS on AWS
When multiple customers use the same SaaS application, keeping their data separate is one of the most important design decisions. Learn how to approach tenant isolation on AWS, from shared databases to dedicated resources, without making the architecture unnecessarily complicated.
-
AWS IAM Roles and Temporary Credentials: A Practical Production Guide
Learn AWS IAM roles, STS AssumeRole, temporary credentials, trust policies, permission policies, and IAM evaluation using a practical EC2 production-style demo.
-
Zero Trust Architecture: A Practical Guide for SMEs
Learn what Zero Trust Architecture means for SMEs, with real-world examples across ERP, AI, automation, remote work, vendors, and business data.
-
Context Engineering: Why AI Agents Are Moving Beyond Prompts
Learn what context engineering means, why AI agents need memory, and how Anthropic’s “dreaming” approach helps AI systems improve over time.
-
From a Broken Payment Flow to a Resilient Registration System: What I Learned Building Zeron Academy Payments from Scratch
This article is a walkthrough of what happened when nobody watching, what broke, how I investigated it, how I redesigned the deployment process, why Razorpay became a problem, why I moved to Cashfree, and finally how I built a manual QR fallback so that payment-provider problems can no longer block student registrations.
-
Closures vs Private in TypeScript: If We Have private and #, Why Do We Still Need Closures?
When TypeScript gets converted to JavaScript, the private keyword is not preserved as a JavaScript runtime privacy mechanism.
-
AWS Lambda Just Got Faster: What the New Network Bandwidth Increase Means for Developers
A function might need to download a large file from Amazon S3, call another service, process the response, and upload the result somewhere else. In such cases, giving the Lambda more CPU does not necessarily solve the problem if the function is spending most of its execution time waiting for data to move across the…
-
Terraform State Lock: A Common CI/CD Pipeline Challenge and How to Resolve It
Terraform uses state locking to prevent multiple operations from modifying the same state file simultaneously.
Got any book recommendations?