Videos

Every decision, on the record.

The full archive — filter by topic. Each video ships with working code on GitHub.

▶ 24:12
AzurePrivate Networking·

Private Endpoints vs Service Endpoints: the decision nobody explains

Why private DNS zones are the real decision, and how to centralise them in a hub.

▶ 19:48
AWSIdentity·

Killing long-lived secrets with workload identity federation

OIDC from GitHub Actions to AWS, scoped roles, and the trust-policy mistakes to avoid.

▶ 31:05
GCPLanding Zones·

Designing a landing zone you won't regret in year two

Folder hierarchy, org policies and project vending for a multi-team organisation.

▶ 27:30
AzureTerraform at Scale·

Terraform state boundaries: one big state is a decision too

Splitting state by blast radius and ownership, with a working multi-stack repo.

▶ 22:41
AWSCI/CD·

Promotion pipelines with policy gates

Build once, promote everywhere — with OPA checks that block risky changes.

▶ 18:55
GCPCost Optimisation·

Cost as an architecture constraint

Committed use, egress traps and the design choices that drive the bill.

▶ 26:17
AzureAI Agents·

Should an AI agent touch your production infra?

A guarded agent for drift triage — read-only by default, with human approval.

▶ 29:02
AWSPrivate Networking·

Hub-spoke on AWS with Transit Gateway

Centralised egress, inspection VPCs and route-table design at enterprise scale.