TL;DR Certifications are not bad; chasing them is. A badge proves you reached the passing mark on one exam on one day. It does not prove you have run the service in production, and the terms attached to every badge say so. The four reasons from the video: certification overload (AWS, Azure, GCP, Kubernetes, AI, …

TL;DR Question 1, migrate web, batch and legacy apps with scalability and security: legacy and web tiers on EC2 in an Auto Scaling group across multiple Availability Zones, network ACLs plus security groups for defence in layers, and AWS Batch for the batch jobs, because it provisions and releases the compute per job. …

TL;DR Six skills, none of them cloud-specific, all of them used every day: 1) one programming language you can read the documentation of, plus Git and an editor; 2) scripting in bash first and Python second; 3) a CI/CD tool, Jenkins, GitHub Actions or GitLab; 4) automation with Ansible, with bash as the fallback; 5) …

TL;DR A Google Cloud external HTTP load balancer is five objects in a chain: global forwarding rule (one anycast IP on Premium Tier) → target HTTP proxy → URL map → backend service with a health check → instance group of VMs. In the console the wizard creates all of them as "frontend, routing rules, backend"; …

TL;DR IAM is "who gets to do what on which resource": a principal (a user, group, service account or domain) is granted a role (a bundle of permissions) on a resource (organization, folder, project or a single resource), and grants on a project apply to everything in it. The test in the recording: I granted …

TL;DR The symptom: pods stuck in ContainerCreating, a managed node group failing with InsufficientFreeAddresses, or a cluster update refusing because a subnet has fewer than 6 free addresses. The cause is the same: the subnet was sized for nodes and the Amazon VPC CNI consumes addresses per pod and per ENI. The …

TL;DR A /24 is 256 addresses, 254 hosts in a textbook, and 251 on AWS and Azure or 252 on Google Cloud. Every cloud reserves addresses in every subnet: AWS and Azure the first four and the last (5), Google Cloud the first two and the last two (4). Subtract that number, not 2, from the block size. The table you came …

TL;DR The tool: Kubernetes IP Calculator. Pick EKS, GKE or AKS, the instance type or pods per node, the node count and the zones; get max pods per node, the addresses every node takes, the subnet per zone and the pod and service ranges. Free, one HTML file, nothing leaves your browser. EKS numbers that matter: an …

TL;DR Overlap means one of three things: the ranges are identical (10.0.0.0/16 and 10.0.0.0/16), one contains the other (10.0.0.0/16 contains 10.0.128.0/17), or they are both inside a bigger block you treat as one (10.1.0.0/16 and 10.2.0.0/16 do not overlap; 10.0.0.0/15 contains both 10.0.0.0/16 and 10.1.0.0/16). What …

TL;DR Five tools, one network: 10.0.0.0/16, public and private tiers, several Availability Zones, tested in my browser on 2026-10-19. All five run client-side and all five subtract AWS's five reserved addresses (251 usable per /24). Visual Subnet Calculator is the best tool for exploring an address space: split and …