The platform, in Terraform.
Landing zones, drift, GitOps, Kubernetes, and credentials, in the order a funded SaaS, health-tech, or fintech team actually builds them. Audit evidence is the by-product. Start with the pillar, or jump to the job that is open.
- 01 Platform Engineering for Funded SaaS, Health-Tech, and Fintech Platform engineering for funded SaaS, health-tech, and fintech: four Terraform jobs, with audit evidence as the by-product.
- 02 Do You Actually Need an AWS Landing Zone? A single AWS account is fine until real data, a second environment, or a compliance obligation makes it a liability.
- 03 Building a Multi-Account AWS Landing Zone Account topology, a starter SCP set, and an honest Control Tower vs. Terraform call for regulated SMBs building an AWS landing zone.
- 04 AWS Control Tower vs. Terraform: The Landing-Zone Build-vs-Buy Call Control Tower is AWS's managed landing zone; Terraform is roll-your-own. For most regulated SMBs, Control Tower (or Control Tower + AFT) is the right call.
- 05 Detecting Infrastructure Drift Without Drowning in Alerts How to tier infrastructure drift by risk so you fix what matters and ignore what doesn't, instead of paging engineers about EBS tag mismatches.
- 06 GitOps and Progressive Delivery with Automated Rollback GitOps with Argo CD and SLO-gated canary rollouts for regulated teams: repo structure, sync policies, and rollback that writes its own audit trail.
- 07 Argo CD vs. Flux: Choosing a GitOps Controller for Regulated Kubernetes Argo CD and Flux both give a git audit trail and auto-heal drift. Pick Argo CD for the UI and multi-team RBAC, Flux for a lightweight toolkit.
- 08 What "Production-Ready" Actually Means for a Kubernetes Cluster Production-ready is a checklist, not a property. Forty items across five dimensions, scored honestly. The cluster either has them or it doesn't.
- 09 Killing Long-Lived Credentials with Workload Identity and Dynamic Secrets Replace stored AWS keys, CI secrets, and database passwords with OIDC federation, IRSA, and dynamic secrets: a phased migration plan for regulated SMBs.
- 10 Evidence Pipelines 101: How to Stop Reconstructing Audit Artifacts Quarterly Audits want proof a control operated. Terraform, CI, and CloudTrail can produce that evidence continuously.
A click-ops-to-code article is not in the library yet. If production is still changed in the console, the 7-day Assessment is that edition: read-only, and it includes a drift scan.
7-day Assessment
Want this map scored against your estate?
Read-only review of Terraform, CI/CD, Kubernetes, drift, and the evidence the repo already produces. Seven business days.
Book a call