Shane Law, cloud engineer in Jakarta. AWS architecture, identity and access design, and the Terraform that puts it in place.https://shanelaw.tech/https://shanelaw.tech/blog/eks-deployment-sequencing/https://shanelaw.tech/blog/eks-deployment-sequencing/Most failed Kubernetes platform rollouts aren't a tooling problem — they're a sequencing problem. A tool-agnostic way to think about what has to exist before what.Tue, 28 Jul 2026 00:00:00 GMThttps://shanelaw.tech/blog/cloud-comparison-reality/https://shanelaw.tech/blog/cloud-comparison-reality/Every 'AWS to Azure to GCP' cheat sheet does the same thing: it gives you a table. S3 equals Blob Storage. EC2 equals Compute Engine. Done, ship it. Except it's not done. The table tells you where to start, not where you'll get burned.Fri, 17 Jul 2026 00:00:00 GMThttps://shanelaw.tech/blog/decoupling-and-securing-web-app-storage/https://shanelaw.tech/blog/decoupling-and-securing-web-app-storage/When hosting a scalable, multi-AZ 3-tier web application (like WordPress), storing media files locally on the EC2 instances is an architectural dead end. The moment your auto-scaler destroys an instance, your user uploads vanish.Fri, 10 Jul 2026 00:00:00 GMThttps://shanelaw.tech/blog/least-privilege-is-a-design-problem/https://shanelaw.tech/blog/least-privilege-is-a-design-problem/IAM policies get written last and reviewed never. Treating blast radius as an architecture constraint changes what you build, not just what you document.Mon, 15 Jun 2026 00:00:00 GMT