Technical articles, field manuals, and notes on secure software, cloud architecture, AWS security, and defensive engineering. I write when there is something useful to clarify, preserve, or make easier to operate.
A technical guide to AWS Resource Control Policies, Service Control Policies, and resource-side data perimeter design for secure multi-account AWS environments.
Deep technical articles on AWS security, IAM, data perimeters, cloud governance, and secure multi-account architecture.
A technical guide to AWS Resource Control Policies, Service Control Policies, and resource-side data perimeter design for secure multi-account AWS environments.
Practical references, checklists, and standards meant to be used while building.
A practical secure web application engineering standard for resilient React applications, review discipline, and durable security defaults.
Notes on engineering judgment, resilient systems, technical discipline, and the craft of building things that need to last.
Systems-thinking notes and decision models for engineering judgment, architecture, and disciplined technical work.
Older or less-current articles remain available here without presenting it as a current publishing pillar.
Older operating notes from a season of daily practice. Preserved as an archive, not a current primary pillar.
Older technical doctrine and practice notes preserved for reference.