Skip to content
tezvyn:

All bites

The whole library, newest first. Filter by what you are here for, or pick a topic if you already know.

8668 bites

Page 67

Cloud Platforms2 min read

Offload long-running tasks from web requests

Enqueue the job to a queue, return immediately, process with separate workers, report status out of band.

Cloud Platforms2 min read

CI/CD pipeline for a container PaaS

Run tests, build the image, push the tag to a registry, then deploy it to Cloud Run. The registry is the build-to-deploy handoff.

Cloud Platforms1 min read

Securely supplying secrets to an app

Never hardcode credentials, inject them as environment variables or pull from a secrets manager, and rotate them.

Cloud Platforms1 min read

Deploying to Heroku via Git

Push to the remote, a buildpack detects the language, builds a slug, and runs the Procfile process.

Cloud Platforms2 min read

Why not store uploads on local PaaS disk?

PaaS instances are ephemeral and unshared, so local files vanish on restart and are invisible to peers; store uploads in object storage.

Cloud Platforms1 min read

The cloud shared responsibility model

The provider secures the cloud (hardware, OS, runtime), you secure what runs in it (code, data, config, access).

Cloud Platforms2 min read

CAP theorem and real database tradeoffs

During a partition you pick consistency or availability, CP systems reject requests, AP systems stay available but stale.

Cloud Platforms1 min read

Design a global low-latency database

A distributed store with replicas near users, a tuned consistency level, accepting lag, conflicts, and cross-region cost.

Cloud Platforms2 min read

Add a second access pattern to a key-value store

Add a global secondary index on EmailAddress, weighing extra storage, write amplification, and eventual consistency.

Cloud Platforms1 min read

Data warehouse versus OLTP database

Warehouses use columnar storage for analytical scans, OLTP uses row storage for fast transactions, each fits a different workload.

Cloud Platforms2 min read

Strong versus eventual consistency in NoSQL

Strong reads see the latest write at higher latency and cost, eventual reads may be stale but are cheaper and faster, match the choice to stakes.

Cloud Platforms1 min read

RDS Multi-AZ versus Read Replicas

Multi-AZ is a synchronous standby for failover, replicas are async for read scaling, combine both when needed.

Cloud Platforms1 min read

How does caching reduce database load?

Cache-aside reads, RAM-speed lookups, TTL plus invalidation.

Cloud Platforms1 min read

Read replicas in managed relational databases

A read replica is an async copy of the primary that serves read-only queries, offloading the primary and scaling read-heavy workloads; expect replication lag.

Cloud Platforms1 min read

Choosing relational vs NoSQL managed databases

Choose relational for complex relationships, joins, flexible queries, and strong transactions; choose NoSQL for known access patterns needing massive horizontal scale.

Cloud Platforms2 min read

Architecting for HIPAA or PCI DSS compliance

Isolate sensitive data in restricted networks and accounts, encrypt at rest and in transit with managed keys, enforce least-privilege access, and keep immutable audit logs.

Cloud Platforms1 min read

Centralized logging and threat detection across accounts

Organization-wide trails ship logs to a locked-down central security account, store in immutable append-only storage, and aggregate threat detection findings centrally with least-privilege…

Cloud Platforms1 min read

Dynamic database credential rotation for microservices

A secrets manager issues short-lived per-service credentials, services authenticate by workload identity and fetch or refresh secrets without restart, leases expire and rotate automatically.

Cloud Platforms2 min read

Shared responsibility model across service tiers

Provider secures the cloud infrastructure; you secure what you put in it; the line shifts with abstraction. For OS patching, you patch IaaS VMs but the provider patches a managed database OS.

Cloud Platforms1 min read

Automating a no-public-IP governance rule

Use organization-level policy guardrails (SCP, Azure Policy, Org Policy) to deny public IP attachment before creation, applied across all accounts.