Latest from Mariusz
Why Plan Review Stopped Working
The control that held your infrastructure together was plan review, meaning a person reading a diff and deciding whether to approve it. Not the policy document and not the pipeline configuration. It worked because change arrived at human speed. That condition no longer holds. An agent opens 40 pull requests before lunch. Reviewers approve them […]
Sep 24, 2026 · 3 minAll articles by Mariusz Michalowski
Showing 1–13Configuration Drift in a Multi-Cloud World
Configuration drift is the gap between the infrastructure state declared in code and the state actually running in your environment. It occurs when resources are changed outside of your infrastructure as code (IaC) workflow, so the live system no longer matches its definition. In a single cloud, drift is usually straightforward to find and correct. […]
Policy as Code for Cost Control, Not Just Compliance
Policy as code can do more than enforce compliance. Learn how platform teams use guardrails, tagging and sizing policies to prevent cloud cost waste early.
Cultural Debt vs. Technical Debt in Infrastructure Automation
While technical debt, the accumulated cost of quick fixes and legacy code, is a familiar concept, cultural debt often goes unnoticed.
DevOps Security Metrics
In this article, we explore key metrics that can help bridge the gap between the speed of DevOps processes and the essential security requirements needed to protect systems effectively.
Benefits and Best Practices for Infrastructure as Code
By adopting IaC best practices, such as version control and automated testing, organizations can significantly enhance their operational agility and responsiveness to changes.
Scaling with Terraform: How to Manage Infrastructure at Scale
These key points can help you effectively manage Terraform infrastructure at scale, ensuring your systems are resilient, scalable and compliant with organizational policies and industry standards.
Navigating the Multi-Cloud Ecosystem
Multi-cloud environments involve businesses using services from multiple cloud providers to meet diverse operational needs.
The Benefits of Self-Service Infrastructure
Self-service infrastructure offers numerous advantages that help businesses become more efficient and agile.
The Differences Between DevOps, DevSecOps and SRE
DevOps, DevSecOps and SRE are all quickly gaining traction within the tech world due to their effectiveness and promise of reliability for companies. Each framework provides various levels of safety and scalability—DevOps is agile, DevSecOps prioritizes security above all else and SRE focuses on performance optimization. Together, these are changing how software gets deployed from […]
AWS Identity and Access Management (IAM) Roles and How to use Them
Amazon Web Services relies on the AWS IAM service to govern who is authenticated and authorized to use AWS resources. It plays a hugely significant role in AWS security–and so do its various identities. Let’s look in more detail at IAM roles and how they work. What is the Purpose of IAM? When you create […]
How DevOps Helps With Secure Deployments
DevOps is an approach to software development that emphasizes communication and collaboration between teams. It’s best known for bringing together people who previously worked in separate areas like engineering or testing; this allows them all to learn from each other as they work on projects together. DevSecOps helps organizations monitor and discover security risks throughout […]
How IaC Helps Relieve Development Pain Points
Developers spend much of their day digging into their systems’ guts, allocating storage to an application, connecting the security system to the user interface and tracking which version of the application is where in the development cycle, among other tasks. That’s why a new category of software has emerged, infrastructure-as-code (IaC), that promises to automate […]