
Zero Trust for web apps: IAM, secret rotation, audit logs, and least privilege
A practical Zero Trust guide for web apps covering IAM, authorization, least privilege, secret rotation, audit logs, RLS, XSS, CSRF, and BOLA.
Notes on web development, software architecture, and running systems.
Found 18 notes

A practical Zero Trust guide for web apps covering IAM, authorization, least privilege, secret rotation, audit logs, RLS, XSS, CSRF, and BOLA.
A backend Redis guide covering cache-aside, TTL, invalidation, cache stampede, idempotent jobs, rate limiting, and production checks.
Design a professional CI/CD pipeline with quality gates, immutable artifacts, promotion, rollback, safe migrations, and release checklists.
A practical PostgreSQL backup and disaster recovery guide covering RPO, RTO, PITR, restore drills, backup security, and operations checklists.
Optimize production Docker images with multi-stage builds, layer cache, .dockerignore, runtime secrets, non-root users, and image scanning.
A practical Kubernetes guide for developers covering Deployments, Pods, Services, readiness/liveness probes, resource requests, limits, and autoscaling.