Deploying OpenClaw on AWS Without the Security Disasters
OpenClaw is everywhere right now. 247,000 GitHub stars, an AWS Lightsail blueprint, people running autonomous AI agents from their phones …
Read More// blog
Infrastructure Engineering
Deep dives into AWS, Terraform, CI/CD, and the craft of building reliable infrastructure for startups and growing teams.
Database Monitoring Built by DBAs, Not Dashboard Designers
We recently came in as consultants to a startup with PostgreSQL performance problems. They didn’t have a DBA on staff - not unusual …
Read MoreIf It Ain't Stress Tested, It's Broken
On Friday, December 26th, 2025, I released a bugfix for our private PyPI server. The server had been running for months in a degraded …
Read MoreStop Paying for Mediocre Code Reviews – Build Exceptional Ones Yourself
If you write or review infrastructure code-Terraform, AWS IaC, CI/CD pipelines, automation scripts - you’ve likely felt the pain …
Read MoreThree Days, Two Developers: How AI Pair Programming Transformed Good Code into Excellence
Discover how InfraHouse transformed a routine Lambda module into production excellence through disciplined AI collaboration. Same timeline, …
Read MoreFrom Keycloak to Cognito: Building a Self-Hosted Terraform Registry on AWS
A practical engineering story about replacing Keycloak with Cognito to create a self-hosted Terraform registry using Tapir, AWS ECS, and ALB …
Read MoreVulnerability Management in CI/CD: Balancing SLAs and Developer Velocity (Part 1: Dependency Scanning with OSV-Scanner)
Part 1 of the Vulnerability Management Series — how to manage dependency vulnerabilities with OSV-Scanner and ih-github while meeting SLAs …
Read MoreUpgrading Terraform Modules to AWS Provider v6 with Confidence
When HashiCorp releases a new major version of the AWS Terraform provider, engineering teams often brace themselves. Major upgrades bring …
Read MoreImplementing Compliant Secrets with AWS Secrets Manager
I had a conversation with a colleague other day, and he asked who has access to a specific password. We use
Read More