Notes from building secure, reliable cloud platforms: AWS, Kubernetes, Terraform, DevSecOps and platform engineering.https://satnam.is-a.dev/blog/en-auhttps://satnam.is-a.dev/blog/posts/self-service-ai-agent-platform/https://satnam.is-a.dev/blog/posts/self-service-ai-agent-platform/How developers ship internal AI agents from a template, inside approved models, a hard spend cap and encrypted audit logs, without touching the infrastructure.Fri, 30 Oct 2026 04:30:00 GMTaiawsbedrockplatform-engineeringsecurityhttps://satnam.is-a.dev/blog/posts/lead-engineer-on-a-small-team/https://satnam.is-a.dev/blog/posts/lead-engineer-on-a-small-team/What changes when you're the lead for security, reliability and the platform on a small team, and the habits that keep it from becoming a bottleneck.Fri, 30 Oct 2026 04:00:00 GMTleadershipdevsecopssecurityreliabilityplatform-engineeringhttps://satnam.is-a.dev/blog/posts/how-this-site-is-built/https://satnam.is-a.dev/blog/posts/how-this-site-is-built/Why the portfolio and the blog are separate sites on different hosts, how they share one domain, and how GitHub became the only CMS I need.Fri, 30 Oct 2026 03:00:00 GMTplatform-engineeringcloudflarenetlifyastrodeveloper-experiencehttps://satnam.is-a.dev/blog/posts/platform-is-not-only-kubernetes/https://satnam.is-a.dev/blog/posts/platform-is-not-only-kubernetes/Platform engineering talks often start and end with a cluster. The foundations of a good platform work the same on serverless, ECS or plain Docker, and some of my best platforms had no cluster at all.Fri, 30 Oct 2026 02:00:00 GMTplatform-engineeringkubernetesserverlessawsdeveloper-experiencehttps://satnam.is-a.dev/blog/posts/terraform-gitops-terragrunt/https://satnam.is-a.dev/blog/posts/terraform-gitops-terragrunt/How I run an AWS platform through Git so teams can build their own infrastructure safely, and why I wrap Terraform with Terragrunt instead of copying folders.Fri, 30 Oct 2026 01:00:00 GMTterraformterragruntgitopsawsplatform-engineeringhttps://satnam.is-a.dev/blog/posts/full-stack-pr-previews/https://satnam.is-a.dev/blog/posts/full-stack-pr-previews/How every pull request at a non-profit organisation got its own working copy of the whole application, so testers, engineers and product could try a change before it was merged.Thu, 29 Oct 2026 00:00:00 GMTawsci-cdserverlessplatform-engineeringdeveloper-experience