This is the project video people keep asking me to write up - a real, end-to-end DevOps pipeline with nothing mocked: a Jenkins server that Terraform builds in one AWS region, a Jenkins pipeline that runs Terraform to build a second region, and at the end a Python Flask REST API talking to MySQL on RDS, behind an …

Disclosure - this post and the video are sponsored by Trigger.dev. The architecture, the code and the opinions are entirely my own - I built and tested everything shown here myself, and the parts that broke are in here too. 👉 Want to build this yourself? Start with the Trigger.dev Chat Agent documentation (the link …

Every EC2 instance we have launched in this series had a disk, and we never looked at it. That disk is an Amazon EBS volume, and in this Part-20 we are going to give it the attention it deserves - because storage is where the two expensive mistakes live: picking the wrong volume type (slow or overpriced) and losing …

Everything we built so far answers on an ugly name - jhooq-web-alb-1234567890.eu-central-1.elb.amazonaws.com. Users need www.jhooq.com, and that is DNS. Amazon Route 53 is the AWS DNS service - a domain registrar, an authoritative DNS server with a 100% availability SLA, health checks, and the routing policies that …

This is the companion page to my Ansible Full Course - Zero to Hero, a free three-hour-twenty-minute video that takes you from "what is Ansible" to deploying a website with roles, templates, handlers and a vault-encrypted secret. The video is the course; this page is what the video cannot be - searchable, …

This is the companion page to my free AWS Advanced Networking full course - eight hours in which one lab environment is built layer by layer, from an empty VPC to a multi-VPC, multi-account network with load balancers, a firewall, private connectivity, DNS and TLS. Every chapter of the video has a detailed written …

In Part-1 we created IAM users with long-term credentials, and in Part-2 we switched into a member account with something called OrganizationAccountAccessRole. That "switch" is the single most important mechanism in AWS security - assuming an IAM role - and this Part-3 is all about it. A role is an identity …

In Part-15 jhooq.com started pointing at the Application Load Balancer - over plain HTTP. Browsers mark that "Not secure", search engines rank it lower, and nobody should log in over it. The fix on AWS costs nothing: AWS Certificate Manager (ACM) issues publicly trusted TLS certificates for free, validates …

In Part-2 we built a multi-account setup by hand - an organization, OUs, SCPs, a log-archive account, IAM Identity Center - and I ended with "or let Control Tower do it". This Part-24 is that. AWS Control Tower orchestrates Organizations, Service Catalog, IAM Identity Center, CloudTrail and Config to build a …

One EC2 instance (Part-4) is a lab. A real application needs at least two instances in two Availability Zones, something to replace an instance when it dies, and something to add instances when traffic spikes and remove them when it drops. That something is Amazon EC2 Auto Scaling, and in this Part-10 we build it from …