Blog category
Monitoring is visibility; alerting is interruption. Teams with 40+ CloudWatch alarms and an actionable page rate under 50% are monitoring loudly and alerting poorly. Fix ownership, SLO burn, and canaries before adding another metric.
Manoj V.Amazon Managed Grafana waste is rarely the $9 Editor seat itself. It comes from ten Editors who only view dashboards, orphan service accounts, and workspaces still on Grafana 9 while AWS shipped create and in-place upgrade support for 12.4 in April and May 2026. This is the workspace ops playbook: seats, IAM Identity Center, NAC/VPC, CMK, and a checklist you can run this week.
Manoj V.On a 120-stack AWS Organization, CloudFormation StackSets for platform baseline plus CDK for app teams cut org-wide guardrail rollout from 6 weeks to 2, with Application Composer for spikes and Blocks for greenfield TypeScript only at preview.
Manoj V.On a 40-account AWS Organization, platform baseline via CloudFormation StackSets (Hooks, GuardDuty enroll) plus app teams on Terraform/OpenTofu cut org-wide guardrail rollout from 9 weeks to 3, without forcing one tool for everything.
Manoj V.June 2026 benchmark on the same read-only AWS scaffold: OpenTofu 1.12 plan median 5.2s vs Pulumi 3.248 preview median 10.6s, plus when to pick HCL over TypeScript on landing zones.
Manoj V.Default Docker seccomp is not enough for regulated workloads. EKS Pod Security Standards, seccomp profiles, and Fargate platform version constraints.
Manoj V.Cluster upgrades and Karpenter consolidation look healthy in the console while PDB-blocked evictions freeze your node drain for 45 minutes. This guide covers minAvailable, maxUnavailable, and EKS managed node group semantics.
Manoj V.Ingesting every debug log to CloudWatch is how observability becomes a FinOps incident. Tail sampling with ADOT, Logs Insights, and Firehose to S3 for the long tail.
Manoj V.That `user_id` label on every HTTP metric turns Amazon Managed Prometheus into a five-figure line item. This guide explains cardinality mechanics, EMF vs remote write, and Application Signals defaults worth disabling.
Manoj V.App Mesh is a legacy path. New meshes should start with VPC Lattice for AWS-native east-west or Istio on EKS when you need full L7 policy. Traffic shifting without duplicating load balancers per service.
Manoj V.Generic DevOps maturity models score you on culture slides. This one maps L1 to L4 to AWS gates you can verify: IaC in Git, GitOps or gated CD, ADOT on EKS, FIS with stop conditions, and cost-aware CI. A composite 85-engineer SaaS moved from L2 to L3 in one quarter by fixing the CI/GitOps boundary alone, cutting deploy-related incidents from ~6/month to 2.
Manoj V.Running one AWS FIS experiment in a demo account is not chaos engineering. It is a screenshot. A program ties experiments to SLOs, scopes blast radius with tags, halts on CloudWatch alarm stop conditions, schedules via EventBridge, and closes the loop by re-testing the fix. FIS now ships AZ Power Interruption and cross-Region connectivity scenarios in its Scenario Library. This post covers the L0 to L3 maturity matrix, a GameDay runbook, and a stop-condition-wired experiment skeleton.
Manoj V.
