Hands-on DevOps tutorials: AWS, Terraform, CI/CD and Kubernetes.https://devopswithumar.com/https://devopswithumar.com/blog/gp2-vs-gp3-ebs/https://devopswithumar.com/blog/gp2-vs-gp3-ebs/gp2 vs gp3 compared: gp3 costs 20% less per GB and gives 3,000 IOPS at any size. Find every gp2 volume, switch it live, and avoid the big-volume IOPS trap.Tue, 03 Nov 2026 00:00:00 GMThttps://devopswithumar.com/blog/base64-is-not-encryption-jwt/https://devopswithumar.com/blog/base64-is-not-encryption-jwt/Base64 is encoding, not encryption, so Kubernetes Secrets and JWT payloads are readable by anyone. What that means, how to decode safely, and safer options.Sat, 31 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/cron-vs-eventbridge-schedules/https://devopswithumar.com/blog/cron-vs-eventbridge-schedules/An EventBridge cron expression has 6 fields, a required question mark and different day numbers. How it differs from cron, CronJobs and GitHub Actions.Sat, 31 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/vpc-cidr-subnet-planning/https://devopswithumar.com/blog/vpc-cidr-subnet-planning/VPC CIDR planning in plain steps: pick a range and subnet sizes that leave room to grow, avoid overlaps, and allow for the 5 IPs AWS reserves per subnet.Sat, 31 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/yaml-mistakes-kubernetes-github-actions/https://devopswithumar.com/blog/yaml-mistakes-kubernetes-github-actions/Three YAML mistakes that break Kubernetes and GitHub Actions deploys: tabs and indentation, values that turn into the wrong type, and files nobody validated.Sat, 31 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/aws-charges-billing-you-for-nothing/https://devopswithumar.com/blog/aws-charges-billing-you-for-nothing/Does AWS charge for stopped instances? Not for compute, but their EBS volumes and public IPs keep billing. Find them, and idle IPs, with three CLI commands.Sun, 18 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/case-study-github-actions-oidc-startup/https://devopswithumar.com/blog/case-study-github-actions-oidc-startup/A GitHub Actions OIDC case study: a small team kept long-lived AWS keys in CI and never rotated them. How I moved them to OIDC in one day, and what changed.Fri, 16 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/aws-monitoring-alerts-before-customers/https://devopswithumar.com/blog/aws-monitoring-alerts-before-customers/Set up AWS alerts that reach you first. No alerts, alerts nobody sees, no dashboard: a small CloudWatch, SNS and Slack setup fixes all three, no new tool.Wed, 14 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/cut-your-aws-bill-quick-wins/https://devopswithumar.com/blog/cut-your-aws-bill-quick-wins/Reduce AWS costs without touching your app: delete idle resources that still bill you, let old data expire, and set a budget alert before the invoice.Wed, 14 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/github-actions-slow-pipeline/https://devopswithumar.com/blog/github-actions-slow-pipeline/GitHub Actions slow? Cache your dependencies, run only when the right files change, cancel stale runs, and put a real gate in front of production.Wed, 14 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/iam-mistakes-every-aws-account/https://devopswithumar.com/blog/iam-mistakes-every-aws-account/Three AWS IAM mistakes in most accounts: daily work as root, admin rights for everyone, no audit trail. The fixes: roles with MFA, read-only, CloudTrail.Wed, 14 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/kubernetes-mistakes-crash-pods/https://devopswithumar.com/blog/kubernetes-mistakes-crash-pods/Three Kubernetes mistakes behind real outages: missing resource requests and limits, no readiness probe, and the latest image tag. Each is a few lines to fix.Wed, 14 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/s3-bucket-never-public/https://devopswithumar.com/blog/s3-bucket-never-public/Public S3 buckets keep making headlines. My three-step setup instead: S3 Block Public Access, CloudFront with Origin Access Control, presigned URLs.Wed, 14 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/terraform-mistakes-that-cost-hours/https://devopswithumar.com/blog/terraform-mistakes-that-cost-hours/Three Terraform mistakes that cost me hours: local state, hardcoded secrets and unpinned providers. What each one cost and the small fix that prevents it.Wed, 14 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/terraform-state-lock-version-recover/https://devopswithumar.com/blog/terraform-state-lock-version-recover/Stuck on "Error acquiring the state lock"? Find the lock ID, check it is safe, run terraform force-unlock, and roll back a bad state from S3 versioning.Wed, 14 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/github-actions-aws-oidc/https://devopswithumar.com/blog/github-actions-aws-oidc/Stop storing AWS keys in GitHub secrets. With GitHub Actions and AWS OIDC, each workflow run gets short-lived credentials for a locked-down IAM role.Tue, 13 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/s3-cloudfront-terraform-static-site/https://devopswithumar.com/blog/s3-cloudfront-terraform-static-site/A private S3 bucket, CloudFront with Origin Access Control, a free ACM certificate and Route 53 records, all in Terraform. The exact setup behind this site.Tue, 13 Oct 2026 00:00:00 GMThttps://devopswithumar.com/blog/terraform-remote-state-s3-kms/https://devopswithumar.com/blog/terraform-remote-state-s3-kms/Set up a Terraform S3 backend for remote state: an encrypted, versioned bucket with a KMS key, native state locking, and a clean layout per environment.Tue, 13 Oct 2026 00:00:00 GMT