Writing
Notes & experiments
Occasional posts on building things. Also available as RSS.
- 2026
Goodbye PEM files: moving to RDS IAM database authentication
How I replaced a shared .pem key and a bastion host with AWS RDS IAM auth: short-lived tokens, per-user identity, and nothing left to rotate by hand.
#aws #rds #iam #security #postgres #go #lambda
Building RBAC from scratch
Why I built a role-based access control module by hand for an enterprise platform, the model I landed on, and the gotchas that only show up in production.
#go #backend #architecture #rbac
Colophon — how this site is built
A tour of the Signal Path design behind this site: the Copper & Carbon palette, the Canvas service-mesh hero, and the small details underneath.
#meta #astro #design