Building a Security Pipeline — DevSecOps in Practice
How to build a complete security pipeline into your CI/CD — SAST, DAST, SCA, secret scanning, and infra scanning without slowing developers down.
The Archive of
Intentional Thought
Technical essays, architectural deep-dives, and practical guides at the intersection of code and design.
Page 5 of 30
Compliance Automation — SOC2 and ISO 27001
Automate SOC2 and ISO 27001 compliance with infrastructure as code, continuous monitoring, and policy-as-code tools like AWS Config and OPA.
AWS IAM Security — Beyond Basic Roles
A deep dive into AWS IAM security — permission boundaries, SCPs, assume-role chains, and how to audit IAM for least-privilege access.
Auto-Remediation with Lambda — Fix Security Issues Automatically
Build automated security remediation with AWS Lambda, EventBridge, and Config Rules — auto-close open security groups and revoke public S3 access.
WebSockets with Socket.io in Node.js
Build real-time applications with WebSockets and Socket.io in Node.js — rooms, namespaces, scaling with Redis adapter, and handling reconnection
Testing Node.js — Unit, Integration, and E2E
Comprehensive testing strategies for Node.js applications with Jest, Supertest, and Testcontainers — from unit tests to end-to-end API testing
Redis — Caching, Sessions, Pub/Sub in Node.js
Use Redis with Node.js for caching, session storage, pub/sub messaging, rate limiting, and distributed locks using ioredis
Database Integration — PostgreSQL with Node.js
Connect Node.js to PostgreSQL using pg, Knex.js, and Prisma ORM. Learn connection pooling, migrations, transactions, and query optimization
Performance Optimization and Profiling in Node.js
Profile and optimize Node.js applications — find memory leaks, reduce event loop lag, use worker threads, cluster mode, and caching strategies
Node.js Architecture — Event Loop Deep Dive
Understand the Node.js event loop, its phases, microtasks vs macrotasks, and how non-blocking I/O actually works under the hood with libuv
MongoDB with Mongoose — Patterns and Pitfalls
Master MongoDB with Mongoose in Node.js — schema design, indexing strategies, population, aggregation pipelines, and common anti-patterns to avoid
Error Handling and Logging in Production Node.js
Build robust error handling and structured logging for production Node.js apps using Winston, Pino, custom error classes, and centralized error middleware