EventBridge Retry Policies and DLQ Handling in Production on AWS
Silent event loss is one of the most deceptive failure modes in event-driven architectures on AWS. This tutorial walks through configuring EventBridge retry policies and dead letter queues correctly — from IAM permissions to CloudWatch alerting and replay strategies.
Jenkins to AWS Authentication with OIDC: Replacing Static Keys with Federated Identity
Static AWS access keys in Jenkins are a persistent security liability — rotation is manual, secrets sprawl across credential stores, and a single leak can compromise entire environments. This post walks through configuring OIDC federation between Jenkins and AWS IAM so your pipelines authenticate with short-lived tokens and no stored secrets.
Jenkins Shared Library Structure for Reusable CI Pipelines
A Jenkins shared library centralizes pipeline logic in a single versioned repository, eliminating copy-paste Groovy across every team's Jenkinsfile. This post covers directory structure, step conventions, end-to-end consumption examples, and the serialization pitfalls that catch most engineers off guard.
Jenkins pipeline for running AWS Lambda manually and with trigger
A Jenkins declarative pipeline pattern for invoking AWS Lambda in staging/production with role assumption, schedule support, and timer-based reporting.
Get Jenkins secret values with script console
A Jenkins Script Console example for credential inspection, with strict security caveats and references to official Jenkins documentation.
GitHub Actions workflow to build and push Docker image to ECR
A working GitHub Actions setup that builds a Docker image on every push and pushes it to Amazon ECR. Covers the IAM side too, which is usually where things break.
GitLab CI/CD pipeline stages with artifact passing between jobs
Setting up a GitLab pipeline with explicit stages and artifact dependencies so build output actually reaches the deploy job without re-running everything.
Github Actions Pipeline with sonarqube quality gate manual approval and helm rollback
A single GitHub Actions workflow that blocks deployment on a failed SonarQube gate, waits for a human to approve, and rolls Helm back to the previous revision if anything goes wrong.
IAM Roles and Least-Privilege Policies for CI/CD Pipelines on AWS
Long-lived AWS access keys in CI/CD pipelines are a liability — scoped IAM roles with temporary credentials are the correct architecture. This tutorial walks through trust policy design, OIDC federation, and the policy mistakes that cause real incidents.
Jenkins Pipeline to Invoke AWS Lambda Manually
Learn how to build a Jenkins declarative pipeline that invokes an AWS Lambda function on demand, validates the JSON response, and fails the build automatically on errors — complete with a working Jenkinsfile you can drop into any repo.
☕ Support us · 💳 Monobank