Amazon ECR in Production: IAM, Digests, Scanning, Lifecycle Rules, and Replication
How to operate Amazon ECR as a controlled OCI artifact supply point instead of a pile of mutable image tags.
whoami
Deep technical notes on operating systems, virtualization, and cloud-native infrastructure — kernels, filesystems, emulation, and the history behind the tools that keep systems running.
How to operate Amazon ECR as a controlled OCI artifact supply point instead of a pile of mutable image tags.
A practical model of ECS task definitions, services, capacity providers, networking, IAM, deployments, and the responsibilities AWS does not remove.
What AWS manages in EKS, what remains in your account, and how node choices, VPC networking, identity, observability, availability, and cost interact.
How App Runner builds, deploys, scales, secures, and observes HTTP services—and where its simplified platform stops being the right abstraction.
What Fargate manages, how task-level isolation and resource sizing work, and when its operational simplicity outweighs reduced host control.
How Step Functions state machines coordinate distributed work, where retries and execution history help, and where orchestration costs and service limits still matter.
A production-focused guide to Azure Container Apps architecture, revisions, jobs, networking, identity, observability, scaling, and platform limits.
A production operating model for ACR authentication, repository permissions, digests, scanning integrations, retention, private networking, and global replicas.
A production model for AKS architecture, Entra authentication, node pools, CNI choices, upgrades, observability, availability, and shared responsibility.
Why latest is not an identity, how OCI digests anchor releases, and how signatures, attestations, SBOMs, and admission policy work together.