Skip to main content
emnode
Sign up

The library

268 lessons. One library.

In-depth, expert-written guides on cloud cost, compliance, reliability and monitoring. Read in your browser. No signup, no paywall.

Cost

111 lessons

Cut cloud spend without slowing teams down. Rightsize workloads, lock in commitments, kill idle waste, and turn raw billing data into decisions leadership trusts.

Browse cost

Compliance

96 lessons

Make audits boring. Continuous controls for SOC 2, HIPAA, PCI and ISO 27001: encryption, IAM hygiene, evidence collection, and the daily habits that keep you in scope.

Browse compliance

Site Reliability

44 lessons

Build systems that don't wake you up. SLOs that mean something, error budgets that change decisions, and the operational practices behind reliable cloud platforms.

Browse site reliability

Monitoring

17 lessons

See your system clearly. Metrics, logs, traces and the questions worth asking. Instrument once, observe forever, and skip the dashboard sprawl.

Browse monitoring

Featured this month

6 lessons
Cost AWS

Migrate EBS volumes from gp2 to gp3

Same baseline performance, ~20% cheaper, online change, the EBS upgrade with no downside.

15 min
Cost AWS

Right-size EC2 instance

Match instance types to actual workload: stop overpaying for unused capacity.

15 min
Cost AWS

Delete unused NAT Gateways

A NAT Gateway with no traffic still bills $32/month: find the orphans and replace them with VPC endpoints where possible.

14 min
Compliance AWS

Enable MFA for root and IAM users

One capability across the root user, IAM console and programmatic users, and Cognito user pools: make a stolen password or key useless on its own by requiring a second factor everywhere an identity can sign in.

14 min
Compliance AWS

Block public access to AWS resources

One capability across S3, EC2, RDS, snapshots, queues and topics: make sure nothing is reachable from, or shareable with, the public internet unless you genuinely intend it.

14 min
Compliance AWS

Enable VPC flow logs in every VPC

Security Hub EC2.6: without flow logs you have no network audit trail. Investigations and threat detection need them.

12 min

Learning paths

All paths
Cost AWS

Cut your storage bill

From gp2→gp3 and lifecycle policies to snapshot hygiene: squeeze the storage bill.

173 min 13 lessons
Cost AWS

Trim your network spend

NAT gateways, idle load balancers and public IPv4: the quiet network line items.

79 min 6 lessons
Cost AWS

Right-size your compute

Right-size, Graviton and idle instances: match spend to what you actually run.

216 min 15 lessons
Cost AWS

Lock in your commitments

Savings Plans, Reserved Instances and reservations: stop paying on-demand for steady-state workloads.

169 min 12 lessons
Cost AWS

Kill idle waste

Unattached volumes, idle endpoints, orphaned IPs and empty tables: delete what nothing uses.

112 min 9 lessons
Compliance AWS

Lock down access

Public S3, IAM hygiene, security groups and MFA: close the obvious doors.

249 min 18 lessons
Compliance AWS

Encrypt everything

Encrypt at rest and in transit across EBS, S3, RDS and load balancers.

135 min 10 lessons
Compliance AWS

Tighten your databases

Lock down RDS: private subnets, IAM auth, custom ports and logging.

95 min 7 lessons
Site Reliability AWS

Build in resilience

Multi-AZ, backups, restore testing and read replicas, to survive the bad day.

287 min 22 lessons
Monitoring AWS

See what's happening

Flow logs, access logs, CloudTrail and scanning: see what's happening.

123 min 9 lessons
Monitoring AWS

Get your alarms right

Coverage, dead alarms and noise: make CloudWatch alarms something you can actually trust.

136 min 11 lessons
Compliance AZURE

Close Azure network exposure

Public database access, Key Vault private link and VM exposure: close the Azure doors.

85 min 6 lessons
Compliance AZURE

Encrypt across Azure

Encrypt in transit and at rest across Azure SQL, Storage, Redis, VMs and Key Vault.

68 min 5 lessons
Compliance AZURE

Harden Azure identity

MFA, least-privilege RBAC and managed identities across Entra and your subscriptions.

70 min 5 lessons
Compliance AZURE

Turn on Azure detection

Turn on Defender plans, diagnostic logging and security alerting.

69 min 5 lessons
Compliance AZURE

Manage Azure posture and patching

Patching, vulnerability assessment and endpoint protection across your Azure machines.

71 min 5 lessons
Compliance AZURE

Harden Azure workloads

Harden App Service, Functions, AKS, container registry, SQL, Cosmos, APIM and messaging.

143 min 10 lessons
Cost AZURE

Right-size your Azure compute

Right-size and consolidate VMs, SQL, App Service, AKS and Cosmos to match real usage.

181 min 13 lessons
Cost AZURE

Lock in Azure commitments

Reservations and savings plans: stop paying pay-as-you-go for steady-state Azure workloads.

341 min 25 lessons
Cost AZURE

Cut your Azure storage bill

Blob tiering, snapshot hygiene, disk right-sizing and Log Analytics retention.

92 min 7 lessons
Cost AZURE

Kill idle Azure waste

Unattached disks, idle public IPs, empty load balancers and stopped-but-billing VMs.

164 min 13 lessons
Site Reliability AZURE

Build in Azure resilience

Availability zones, geo-replication, backup and failover, to survive the bad day on Azure.

341 min 25 lessons
Monitoring AZURE

See what Azure is doing

VM insights, metric and log alerts, Application Insights and action groups.

83 min 6 lessons

Setup guides

Step-by-step, console-by-console walkthroughs for connecting Emnode to your cloud.

All docs
Guide

Welcome to Emnode

What Emnode does, who it is for, and how to get the most from these docs.

 Guide

Set up an AWS FOCUS cost data export

Create an AWS FOCUS 1.2 cost and usage data export step by step in the Billing console, and record the bucket, Region and prefix your Emnode dashboard needs.

 Guide

Set up an AWS Cost Optimization data export

Create an AWS Cost Optimization recommendations data export step by step in the Billing console, so your Emnode dashboard can surface idle resources, right-sizing and cheaper equivalents.

 Guide

Set up AWS Security Hub and AWS Config

Turn on AWS Config and enable Security Hub CSPM step by step, so your Emnode dashboard can read your compliance findings. Includes setting up AWS Config if you have not already.

All lessons

268 lessons