Eliminating Bastion Hosts in AWS: A Cleaner Way to Access Private EC2 InstancesIt Started With a Simple Requirement I was building a small AWS environment recently. Nothing fancy. Just: A VPC A private subnet An EC2 instance running Amazon Linux The requirement sounds straiJul 10 · 6 min readsanmarg.hashnode.dev
AI Model Versioning and Rollbacks in Production: Building Recoverable AI Systems at ScaleAlright, let me tell you something that still keeps me up. We've gotten really good at shipping software. Like, really good. Git, CI/CD, automated tests, canary deploys, blue-green releases, kubectl rJun 14 · 8 min readsanmarg.hashnode.dev
Detect Cryptominers on Kubernetes with Custom Falco RulesThink of a scenario a cryptominer landed in your staging cluster. It ran for sometime before anyone noticed, not because monitoring was missing, but because the alerts were too generic to trigger a re1Jun 2 · 6 min readsanmarg.hashnode.dev
How I Built a Zero-Trust LLM Security ProxyA few weeks ago, I found myself staring at a problem that kept getting worse. Every team in the org was spinning up their own LLM integrations — some through OpenAI, a few through Ollama, one team eve1May 31 · 9 min readsanmarg.hashnode.dev
Deep Dive on Distroless + Multi-Stage Build PatternsMost people switch to distroless because someone on Twitter said it’s “more secure.” That’s not engineering. So I did what engineers should do I built the same Go service four different ways, scanned 1Feb 25 · 5 min readsanmarg.hashnode.dev
