The 12 Factor Container

How do the Twelve Factors fit into a cloud-native world?

Remote Pair Programming

Some of the tools we’ve used for remote pair programming, tested and reviewed.

Git tips and tricks

A few Git tips I’ve learned the hard way.

Update your RDS SSL certificates

Have you recently logged into your AWS console and seen this message in RDS?

Security and Compliance in the Cloud

What’s useful, where to start and how this all relates to operational realities.

Multi Account AWS Infrastructures with tfctl

At The Scale Factory we’ve been building secure, multi-account AWS infrastructures for a long time – well before AWS Organizations was a thing. Today architects are spoilt for choice with solutions like Landing Zone, Control Tower and, coming soon, the Terraform Landing Zone. All of those let you provision new accounts at the press of […]

AWS Security Features for SaaS Workloads

As a cloud service provider, you’re responsible for making sure that the application code, the infrastructure to run it, and your customers’ data are all available when your customers expect them to be. You can make use of the security controls already available from your cloud infrastructure provider to help secure your workload. Here’s an […]

Cloud Tenancy Types to Suit Everyone

Pick the right model to suit your SaaS product and your set of customers.

Using Multiple kubectl Versions with Minimal Faff

In a previous article I explained how subcommands let developers make command line tools that other people can extend. Here’s a way to use that technique to support multiple versions of kubectl with minimal faff. kubectl only officially supports a version skew of one minor version; if you have the latest kubectl and want to […]

Securing S3 Buckets with s3audit

These days it can seem like we don’t have to wait very long for another data breach involving an insecure S3 bucket. Such data breaches generally involve private data being stored in an S3 bucket which allows public access. Photo by Gregory Culmer on Unsplash This year alone we’ve seen data breaches from Teletext Holidays, […]