← All Work
↳ Deep dives25 case studies

Case Studies

Deep-dive write-ups on selected builds: the architecture decisions, the trade-offs, and how each system was deployed, demoed, and destroyed.

/01
Cost Intelligence DashboardCase Study
LambdaCost ExplorerDynamoDBFOCUSAWS BudgetsAPI GatewayCloudFrontReactTerraform
/02
Multi-Agent AI Coding OrchestratorCase Study
LambdaAPI GatewayDynamoDBAnthropic SDKTerraformPythonIAMSecrets Manager
/03
Multi-Region Failover (AWS + Azure)Case Study
Route 53Traffic ManagerRDS PostgreSQLPostgreSQL Flexible ServerLambdaAzure FunctionsEventBridgeManaged IdentityTerraform
/04
Azure FinOps DashboardCase Study
Azure FunctionsCosmos DBAzure AdvisorAzure PolicyFOCUSC# .NET 8Static Web AppsTerraform
/07
Cloud Security LabCase Study
GuardDutyOpenSearchFalcoOPA GatekeeperEventBridgeLambdaPacugatorCheckovTerraform
/13
AWS Developer PlatformCase Study
EKSArgoCDCrossplaneKyvernoIRSAExternal SecretsKMSOpenCostFinOpsBackstageTerraformGitOps
/14
Azure Developer PlatformCase Study
AKSFluxCrossplaneWorkload IdentityKyvernoTerraformGitOps
/15
Azure Landing ZoneCase Study
Management GroupsAzure PolicyHub-SpokeVNet PeeringTerraformGovernance
/16
Incident Responder (AWS + Azure)Case Study
ECS FargateContainer Appsn8nCloudWatchAzure MonitorClaude HaikuEntra IDTerraform
/19
AWS Landing Zone AutomatorCase Study
AWS OrganizationsSCPsIAM Identity CenterCloudTrailKMSS3 Object LockAWS BudgetsTerraform
/20
Azure AKS Runtime SecurityCase Study
AKSKyvernoFalcoDefender for ContainersLog AnalyticsWorkload IdentityTerraformMITRE ATT&CK
/23
Serverless LakehouseCase Study
S3Glue Data CatalogAthena CTASParquetIAMTerraform
/24
dbt Analytics EngineeringCase Study
dbtAthenaGlueS3ParquetData TestsGitOpsTerraform
/26
GPU Index API (FastAPI)Case Study
FastAPIPydantic v2SQLAlchemy asyncPostgreSQLRedisECS FargateTerraform
/27
Secrets Lifecycle & Rotation ReadinessCase Study
GoLambdaCloudTrailAthenaDynamoDBAmazon BedrockSecurity HubS3 Object LockEventBridgeTerraform
/28
Azure Secrets Lifecycle & RotationCase Study
Ruby on RailsContainer AppsKey VaultLog Analytics KQLEntra IDAzure OpenAIMicrosoft SentinelPostgreSQLTerraform
/29
Workload Identity Federation (GCP)Case Study
Workload Identity FederationOrg PolicySecret ManagerCloud KMSArtifact RegistryGitHub OIDCTerraform
/30
GCP Landing ZoneCase Study
Org PolicyResource ManagerShared VPCCloud LoggingBigQuerySecurity Command CenterCloud KMSTerraform
/31
Supply Chain Security (GCP)Case Study
Binary AuthorizationCloud BuildArtifact AnalysisCloud KMSArtifact RegistryCloud RunPackerOrg PolicyTerraform
/32
Zero Trust Access (GCP)Case Study
VPC Service ControlsAccess Context ManagerIdentity-Aware ProxyCloud RunOS LoginPrivate Google AccessIAM ConditionsTerraform
/33
GKE with Config Sync (GCP)Case Study
GKEConfig SyncPolicy ControllerGitOpsGatekeeperWorkload IdentityNetworkPolicyTerraform
/34
HPC Slurm Cluster (AWS)Case Study
ParallelClusterSlurmEFAFSx for LustreMPIOpen MPISSMRDSTerraform
/35
GPU Scheduling and FinOps (AWS)Case Study
EKSKarpenterKueueGPU OperatorDCGMSpotFISDynamoDBTerraform
/36
Golden-Path FinOps Copilot (AWS + Bedrock)Case Study
BedrockClaudeOPA / RegoInfracostTerraformFinOpsGravitonPythonFastAPI
/37
Multi-Vendor Firewalls as Code (Cisco · Palo Alto · Fortinet)Case Study
Palo Alto VM-SeriesFortiGate-VMCisco Merakipanos providerNVA / UDRTerraformPackerAzure
StatusCheckingDeployed2026-09-20 13:33 UTCVisitsOriginPrivate S3 + CloudFront OACPipelineGitHub Actions OIDCCounterAPI Gateway + Lambda + DynamoDB