In Part-1 we built one virtual network with subnets, a network security group and a route table. Real environments never stop at one - you end up with a dev VNet, a test VNet, a hub with the firewall, a spoke per team - and the first question is always the same: how does a VM in VNet A talk to a VM in VNet B …
Read More
This is the project video people keep asking me to write up - a real, end-to-end DevOps pipeline with nothing mocked: a Jenkins server that Terraform builds in one AWS region, a Jenkins pipeline that runs Terraform to build a second region, and at the end a Python Flask REST API talking to MySQL on RDS, behind an …
Read More
Disclosure - this post and the video are sponsored by Trigger.dev. The architecture, the code and the opinions are entirely my own - I built and tested everything shown here myself, and the parts that broke are in here too. 👉 Want to build this yourself? Start with the Trigger.dev Chat Agent documentation (the link …
Read More
Every EC2 instance we have launched in this series had a disk, and we never looked at it. That disk is an Amazon EBS volume, and in this Part-20 we are going to give it the attention it deserves - because storage is where the two expensive mistakes live: picking the wrong volume type (slow or overpriced) and losing …
Read More
Everything we built so far answers on an ugly name - jhooq-web-alb-1234567890.eu-central-1.elb.amazonaws.com. Users need www.jhooq.com, and that is DNS. Amazon Route 53 is the AWS DNS service - a domain registrar, an authoritative DNS server with a 100% availability SLA, health checks, and the routing policies that …
Read More
This is the companion page to my Ansible Full Course - Zero to Hero, a free three-hour-twenty-minute video that takes you from "what is Ansible" to deploying a website with roles, templates, handlers and a vault-encrypted secret. The video is the course; this page is what the video cannot be - searchable, …
Read More
This is the companion page to my free AWS Advanced Networking full course - eight hours in which one lab environment is built layer by layer, from an empty VPC to a multi-VPC, multi-account network with load balancers, a firewall, private connectivity, DNS and TLS. Every chapter of the video has a detailed written …
Read More
In Part-1 we created IAM users with long-term credentials, and in Part-2 we switched into a member account with something called OrganizationAccountAccessRole. That "switch" is the single most important mechanism in AWS security - assuming an IAM role - and this Part-3 is all about it. A role is an identity …
Read More
In Part-15 jhooq.com started pointing at the Application Load Balancer - over plain HTTP. Browsers mark that "Not secure", search engines rank it lower, and nobody should log in over it. The fix on AWS costs nothing: AWS Certificate Manager (ACM) issues publicly trusted TLS certificates for free, validates …
Read More
In Part-2 we built a multi-account setup by hand - an organization, OUs, SCPs, a log-archive account, IAM Identity Center - and I ended with "or let Control Tower do it". This Part-24 is that. AWS Control Tower orchestrates Organizations, Service Catalog, IAM Identity Center, CloudTrail and Config to build a …
Read More