Insights

Technical writing.

Architecture, cloud systems, and engineering practice.

  1. Designing Cross-Account CI/CD Deployments in AWS

    Learn how to design secure AWS cross-account CI/CD pipelines using deployment roles, isolated environments, artifact promotion, and production controls.

  2. Designing Environment Separation in AWS

    A practical approach to separating AWS development, staging, and production environments using accounts, governance, access controls, and IaC.

  3. When to Use SQS vs SNS vs EventBridge

    A practical guide to choosing SQS, SNS, or EventBridge based on buffering, fan-out, routing, reliability, and event-driven architecture needs.

  4. Why Lambda Scaling Can Overwhelm Your Database

    AWS Lambda can scale faster than a relational database can absorb connections. Learn how to protect RDS with concurrency limits, pooling, and queues.

  5. Multi-Tenant Authentication with Amazon Cognito

    A practical AWS pattern for multi-tenant authentication with Cognito, JWT claims, tenant isolation, API authorization, and role-based access.

  6. Reconstructing a Serverless SaaS Architecture

    A practical method for rebuilding an AWS serverless SaaS architecture from code, configuration, logs, infrastructure, and runtime evidence.

  7. Seven Signs Your Software Is Poorly Documented

    Seven practical signs that software documentation is failing, plus a simple method for identifying gaps and prioritizing what the team should fix.

  8. What an AWS Architecture Assessment Should Include

    A practical framework for assessing AWS workloads, identifying material risks, and producing a prioritized architecture improvement plan.

  9. How to Reconstruct an Existing Application’s Architecture

    Learn how to document AWS serverless systems using clear diagrams, event flows, contracts, decision records, failure paths, and operational runbooks.

  10. Multi-Tenant Authentication with API Gateway and Lambda

    Build tenant-aware AWS APIs using JWT claims, API Gateway authorizers, Lambda authorization checks, and tenant-scoped database access.

  11. How to Reconstruct an Existing Application’s Architecture

    A practical workflow for reconstructing an application’s architecture using repositories, AWS resources, runtime evidence, and critical business flows.

  12. What Belongs in an Application Risk Register—and What Does Not

    Learn what to include in an application risk register, how to write useful risk entries, assign ownership, and avoid common documentation mistakes.

The articles in this section reflect my personal opinions and professional perspectives. They do not represent the views of any current or former employer, client, or affiliated organization.