Container Security — Docker and Kubernetes Hardening
A hands-on guide to securing Docker and Kubernetes — image scanning, rootless containers, network policies, and runtime threat detection.
The Archive of
Intentional Thought
Technical essays, architectural deep-dives, and practical guides at the intersection of code and design.
Page 2 of 28
Compliance Automation — SOC2 and ISO 27001
Automate SOC2 and ISO 27001 compliance with infrastructure as code, continuous monitoring, and policy-as-code tools like AWS Config and OPA.
Code Signing — Why and How
Why code signing matters and how to implement it — signing Git commits, Docker images with cosign, and building a chain of trust to production.
CloudTrail and Security Observability
How to build security observability in AWS using CloudTrail, CloudWatch, and Athena — audit logging, anomaly detection, and SIEM integration.
Building a Security Pipeline — DevSecOps in Practice
How to build a complete security pipeline into your CI/CD — SAST, DAST, SCA, secret scanning, and infra scanning without slowing developers down.
Build a Cloud Security Scanner — Hands-On Project
Build a real cloud security scanner from scratch with Python and AWS APIs — scan for open security groups, public S3 buckets, and bad IAM policies.
AWS IAM Security — Beyond Basic Roles
A deep dive into AWS IAM security — permission boundaries, SCPs, assume-role chains, and how to audit IAM for least-privilege access.
Auto-Remediation with Lambda — Fix Security Issues Automatically
Build automated security remediation with AWS Lambda, EventBridge, and Config Rules — auto-close open security groups and revoke public S3 access.
WebSockets with Socket.io in Node.js
Build real-time applications with WebSockets and Socket.io in Node.js — rooms, namespaces, scaling with Redis adapter, and handling reconnection
Testing Node.js — Unit, Integration, and E2E
Comprehensive testing strategies for Node.js applications with Jest, Supertest, and Testcontainers — from unit tests to end-to-end API testing
Redis — Caching, Sessions, Pub/Sub in Node.js
Use Redis with Node.js for caching, session storage, pub/sub messaging, rate limiting, and distributed locks using ioredis
Database Integration — PostgreSQL with Node.js
Connect Node.js to PostgreSQL using pg, Knex.js, and Prisma ORM. Learn connection pooling, migrations, transactions, and query optimization