Workload Identity on Kubernetes 2 of 2 – EKS

I discussed in my previous post on workload identity and dived into how it works in AKS (Azure Kubernetes Service). In this post I will continue the topic with AWS as the example. From the perspective of CSP, we consider any running process on the cloud resource as workload. Therefore, I’ll start with control plan … Read moreWorkload Identity on Kubernetes 2 of 2 – EKS

AWS Systems Manager is an Omnipotent Hodgepodge

Introduction to Systems Manager AWS Systems Manager addresses a lot of SysOps requirements for configuration management, including server automation. In this domain, there is another AWS service called OpsWorks. However, with OpsWorks Stack, OpsWorks Chef and OpsWorks Puppet all coming EOL in 2024, the entire OpsWorks service is mostly deprecated. By partnering with leaders such … Read moreAWS Systems Manager is an Omnipotent Hodgepodge

Orchestrate Landing Zone with Landing Zone Accelerator on AWS

As a continuation to the last post, we explore the Landing Zone Accelerator on AWS (LZA) as an orchestration tool in this post. LZA borrows a lot from the ASEA, an accelerator project to deploy the security reference architecture (SRA). LZA is a multi-purpose project that consists of both the orchestration engine (the accelerator itself) … Read moreOrchestrate Landing Zone with Landing Zone Accelerator on AWS

Orchestrate Landing Zone with AWS Control Tower

Following an introduction to AWS Landing Zone, I’ll dive deeper into Control Tower as an orchestration tool in this post. More on Landing Zone In data center operation, there are numerous tasks that other teams have to complete before the the deployment of an application. For example, the 42U server cabinet must be in place … Read moreOrchestrate Landing Zone with AWS Control Tower

Kubernetes with Multiple CPU Architectures 2 of 2 – Node and Workload

For server CPU, the most common architectures today are amd64 (aka x86_64) and arm64. Although AMD developed the former first, Intel names it as x86_64 (or x64 for short). In terms of compatibility, they are the same. In general, arm64 architecture consumes less power and therefore mobile systems first favour it. Its power efficiency now … Read moreKubernetes with Multiple CPU Architectures 2 of 2 – Node and Workload

Landing Zone in Azure – Introduction

I recently renewed my associate administrator certification, and feel it’s a good opportunity to brush up on Azure landing zone. The lame part of this is the semantics. I found many similar terms across cloud service provider (CSPs). In the context of Azure, it makes sense to clarify the terms again for Cloud Adoption Framework … Read moreLanding Zone in Azure – Introduction