jordandesigns.ioCloud & Platform Engineering
Deep dives · 30 case studies

Case studies

Deep-dive write-ups on selected builds: the architecture decisions, the trade-offs, and how each system was deployed, demoed, and destroyed.

Showing 30 of 43

AWS 15

Case studyNetwork Segmentation Lab (EKS + Cilium)Amazon EKSCiliumHubbleeBPF+4Read the case study Case studyEKS Attack Range (red + blue)Amazon EKSKubernetesIRSAMITRE ATT&CK+6Read the case study Case studyCost Intelligence DashboardLambdaCost ExplorerDynamoDBFOCUS+5Read the case study Case studyMulti-Agent AI Coding OrchestratorLambdaAPI GatewayDynamoDBAnthropic SDK+4Read the case study Case studyCloud Security LabGuardDutyOpenSearchFalcoOPA Gatekeeper+6Read the case study Case studyAWS Developer PlatformEKSArgoCDCrossplaneKyverno+8Read the case study Case studyServerless LakehouseS3Glue Data CatalogAthena CTASParquet+2Read the case study Case studydbt Analytics EngineeringdbtAthenaGlueS3+4Read the case study Case studyGPU Index API (FastAPI)FastAPIPydantic v2SQLAlchemy asyncPostgreSQL+3Read the case study Case studySecrets Lifecycle & Rotation ReadinessGoLambdaCloudTrailAthena+6Read the case study Case studyHPC Slurm Cluster (AWS)ParallelClusterSlurmEFAFSx for Lustre+5Read the case study Case studyGPU Scheduling and FinOps (AWS)EKSKarpenterKueueGPU Operator+5Read the case study Case studyGolden-Path FinOps Copilot (AWS + Bedrock)BedrockClaudeOPA / RegoInfracost+5Read the case study Case studyAWS Landing ZoneAWS OrganizationsSCPsIAM Identity CenterTransit Gateway+7Read the case study Case studyRelease Guard (.NET on EKS)C#.NET 10EF CorePostgreSQL+9Read the case study

Azure 6

Case studyAzure FinOps DashboardAzure FunctionsCosmos DBAzure AdvisorAzure Policy+4Read the case study Case studyAzure Developer PlatformAKSFluxCrossplaneWorkload Identity+3Read the case study Case studyAzure Landing ZoneAKSManagement GroupsAzure PolicyFlux+8Read the case study Case studyAzure AKS Runtime SecurityAKSKyvernoFalcoDefender for Containers+4Read the case study Case studyAzure Secrets Lifecycle & RotationRuby on RailsContainer AppsKey VaultLog Analytics KQL+5Read the case study Case studyMulti-Vendor Firewalls as Code (Cisco · Palo Alto · Fortinet)Palo Alto VM-SeriesFortiGate-VMCisco Merakipanos provider+4Read the case study

Google Cloud 5

Case studyGCP Landing ZoneOrg PolicyVPC Service ControlsPrivileged Access ManagerShared VPC+5Read the case study Case studyWorkload Identity Federation (GCP)Workload Identity FederationOrg PolicySecret ManagerCloud KMS+3Read the case study Case studySupply Chain Security (GCP)Binary AuthorizationCloud BuildArtifact AnalysisCloud KMS+5Read the case study Case studyZero Trust Access (GCP)VPC Service ControlsAccess Context ManagerIdentity-Aware ProxyCloud Run+4Read the case study Case studyGKE with Config Sync (GCP)GKEConfig SyncPolicy ControllerGitOps+4Read the case study

Across clouds 4

AWS · AzureCase studySelf-Healing Kubernetes Platform (EKS + AKS + kind)Amazon EKSAzure AKSKarpenterKEDA+8Read the case study AWS · AzureCase studyMulti-Region Failover (AWS + Azure)Route 53Traffic ManagerRDS PostgreSQLPostgreSQL Flexible Server+5Read the case study AWS · AzureCase studyIncident Responder (AWS + Azure)ECS FargateContainer Appsn8nCloudWatch+4Read the case study AWS · Azure · Google CloudCase studyMulti-Cloud Developer PlatformCrossplane v2Argo CDKyvernoBackstage+12Read the case study