Cloud-native backend & platform engineering
Building toward cloud/platform architecture through backend systems, infrastructure, and enterprise-grade reliability.
I write about Kubernetes, Terraform, Linux networking, backend APIs, secure data flows, and source-verified technology reporting.
Featured writing
Static Hosting with S3, CloudFront, and Terraform
A small infrastructure project that provisions static hosting with S3, CloudFront, Route 53, and Terraform.
Engineering topics
Platform, Backend, AI & Automation
Platform
10Cloud infrastructure, Kubernetes, Terraform, Linux, networking, security, and platform operations.
Static Hosting with S3, CloudFront, and Terraform
Backend
4Backend APIs, domain workflows, relational data, cache boundaries, and service implementation notes.
Web Frontend Foundations from a Backend Collaboration Perspective
AI & Automation
3AI/LLM workflows, automation, CI/CD, observability, and engineering productivity.
Daily Compass: Designing a Serverless Azure Data Pipeline
Tech Journalism
2Source-verified reporting on cybersecurity, software supply chains, AI, and the engineering impact of technology industry changes.
Suspected North Korea-Linked npm Malware Disguised as Rollup Polyfills
Featured series
Cloud Platform Foundations
Connect network addressing, Linux security, containers, and web guardrails as a platform operations foundation.
View series6 articlesCloud Delivery and Operations
Organize AWS and Azure infrastructure, IaC, high availability, and Kubernetes delivery into an operable system.
View series4 articlesBackend and Data Systems
Follow API boundaries, application structure, data layers, and frontend collaboration as one service design flow.
View series3 articlesAI and Data Automation
Trace automation boundaries from data collection and serverless processing to retrieval and LLM validation.
View seriesSelected notes
Latest posts
Tech Journalism
Suspected North Korea-Linked npm Malware Disguised as Rollup Polyfills
Six malicious npm packages imitated Rollup polyfills to target credentials on developer workstations and CI systems. Here is how teams should respond.
Tech Journalism
North Korea-Linked PolinRider Campaign Expands Beyond npm to Go and Chrome
The North Korea-linked PolinRider campaign expanded across npm, Go, Packagist, Chrome extensions, GitHub repositories, and developer tools.
AI & Automation
Daily Compass: Designing a Serverless Azure Data Pipeline
A record of designing Daily Compass with Azure Static Web Apps, Functions, Cosmos DB, Private Endpoint, and Application Insights.