The library

142 lessons. One library.

In-depth, expert-written guides on cloud cost, compliance, reliability and monitoring. Read in your browser. No signup, no paywall.

Cost

52 lessons

Cut cloud spend without slowing teams down. Rightsize workloads, lock in commitments, kill idle waste, and turn raw billing data into decisions leadership trusts.

Browse cost

Compliance

60 lessons

Make audits boring. Continuous controls for SOC 2, HIPAA, PCI and ISO 27001: encryption, IAM hygiene, evidence collection, and the daily habits that keep you in scope.

Browse compliance

Site Reliability

19 lessons

Build systems that don't wake you up. SLOs that mean something, error budgets that change decisions, and the operational practices behind reliable cloud platforms.

Browse site reliability

Monitoring

11 lessons

See your system clearly. Metrics, logs, traces and the questions worth asking. Instrument once, observe forever, and skip the dashboard sprawl.

Browse monitoring

Featured this month

6 lessons

Cost AWS

Migrate EBS volumes from gp2 to gp3

Same baseline performance, ~20% cheaper, online change — the EBS upgrade with no downside.

15 min

Cost AWS

Right-size EC2 instance

Match instance types to actual workload — stop overpaying for unused capacity.

15 min

Cost AWS

Delete unused NAT Gateways

A NAT Gateway with no traffic still bills $32/month — find the orphans and replace them with VPC endpoints where possible.

14 min

Compliance AWS

Enable MFA for root and IAM users

One capability across the root user, IAM console and programmatic users, and Cognito user pools: make a stolen password or key useless on its own by requiring a second factor everywhere an identity can sign in.

14 min

Compliance AWS

Block public access to AWS resources

One capability across S3, EC2, RDS, snapshots, queues and topics: make sure nothing is reachable from, or shareable with, the public internet unless you genuinely intend it.

14 min

Compliance AWS