Blog

Insights & Best Practices

Thought leadership on cloud modernization, federal delivery, and secure infrastructure — from 9+ years of hands-on AWS delivery.

AllCloudSecurity

Cloud

Compliance as a Programmable Control Plane

Stop treating compliance as a document. With cfn-guard policy-as-code wired into CI/CD, violations fail the build before infrastructure reaches an environment — the same way unit tests stop bad code.

Oskar Otoya2026-06-208 min read

Cloud

FinOps as Guardrails, Not Reports

Monthly cost dashboards tell you what already happened. Encoding spend discipline into Terraform and Terragrunt — instance class constraints, lifecycle rules, budget alarms as code — stops the waste before it bills.

Oskar Otoya2026-06-107 min read

Cloud

Designing a Multi-Account AWS Landing Zone for Federal Scale

The decisions that actually matter when you are building a landing zone for a large-scale, multi-environment workload serving millions of users: account topology, shared-VPC networking, IAM federation, and lessons from a large on-premises-to-AWS migration.

Oskar Otoya2026-05-2810 min read

Security

Retiring Legacy LDAP for Entra ID Zero Trust on a Regulated Enterprise Platform

Modernizing identity and access management on a large enterprise data platform — moving off legacy LDAP authentication to Entra ID conditional access without disrupting active workloads or audit continuity.

Oskar Otoya2026-05-129 min read

Cloud

Operating Petabyte-Scale Kafka Pipelines for Mission-Critical Federal Reporting

Lessons from running Confluent-based streaming data platforms behind containerized batch workloads in a federal environment — partition design, consumer group management, and the operational realities of high-throughput pipelines that cannot go down.

Oskar Otoya2026-04-309 min read