Stop Reusing the Same CIDR Everywhere: VPC Peering Will Bite You
Overlapping CIDRs block VPC peering and make growth painful. Here’s a practical plan for org-wide CIDR design, Terraform guardrails, and zero-downtime migration.
Articles by Andrew Ghobrial
🧠 Cognito in Multi-Region AWS Architectures — What’s the Right Approach?
Cognito is AWS’s managed authentication service, but it comes with a critical limitation: user pools are region-bound. In this post, I explore why this matters in multi-region designs and the approaches you can take to solve it.
🚀 Ways to Access Your Database in a Private Subnet in AWS VPC
Databases should live in private subnets for security — but how do you access them when they’re not exposed to the internet? In this post, I cover bastion hosts, Session Manager, VPC peering, VPN/Direct Connect, and PrivateLink.
🌟 The Power of Tagging Resources in AWS
Learn how AWS resource tagging can improve cost management, operations, security, and compliance in your cloud environment.
🌟 How I Decreased Docker Image Size by Half with Distroless Images
Discover how switching to distroless images can drastically reduce Docker image size, improve security, and accelerate deployments.
How I Cut AWS Deployment Time in Half with GitHub Actions Matrix Strategy
Discover how leveraging the GitHub Actions matrix strategy helped streamline multi-region AWS deployments, cut deploy times by 50%, and keep workflows maintainable.
🚨 Docker on ECR Costs Alert! 🚨 Managing Hidden Storage Charges
ECR charges $0.10 per GB/month for stored Docker images. Learn how lifecycle policies can keep your costs under control and prevent runaway storage bills.
🚨 AWS Lambda Costs ALERT! 🚨 Optimizing Memory and Node.js Garbage Collection
Learn how improper memory allocation in AWS Lambda with Node.js can lead to crashes and inflated costs, and how tuning memory with NODE_OPTIONS can save you money.
💸 When AWS NAT Gateway Costs Spike Out of Control (and How to Be Prepared)
A sudden spike in AWS NAT Gateway costs can be painful — and without VPC Flow Logs, you’re left in the dark. Here’s why it happens, how to investigate, and what to do next.