Software Design and Architecture Resources

Implementing Least Privilege in AWS IAM: Principles, Practices, and Automation

Applying least privilege in AWS IAM helps reduce risk, improve compliance, and secure environments by granting only necessary permissions to users and services.

July 22, 2025

by Ishwar Bansal

· 3,887 Views · 2 Likes

Building a Multi Tenancy Platform Using Camunda

This guide shows how to build a multi-tenant platform using Camunda BPM, covering AWS deployment, tenant isolation, upgrades, observability, and scaling best practices.

July 22, 2025

by Lakshmi Narayana Rasalay

· 1,688 Views · 1 Like

Debugging Distributed Flight Search: What Logs Alone Won’t Tell You

Logs aren’t enough. Learn how tracing, metrics, and correlation IDs help debug fare mismatches in distributed flight search systems.

July 22, 2025

by Ravi Teja Thutari

CORE

· 2,039 Views · 3 Likes

How to Create Loki Alerts via PrometheusRule Resource

Enable PrometheusRule alerts for Loki logs with Grafana Alloy — even with Helm. Get unified, declarative alerting for logs and metrics in Kubernetes.

July 22, 2025

by Alexander Sharov

· 3,630 Views · 1 Like

Lock-Free Programming: From Primitives to Working Structures

Locking is not the only way to deal with concurrency. Lock-free programming approaches are on the opposite side. Let's dive into them.

July 22, 2025

by Bartłomiej Żyliński

CORE

· 4,607 Views · 7 Likes

6 Ways AI-Enhanced Phishing Can Hijack Developer Workflows (and What to Do About It)

Phishing has evolved into a major supply chain security threat, targeting software developers with attacks on development tools and workflows.

July 21, 2025

by Philip Piletic

CORE

· 3,032 Views · 3 Likes

Software Supply Chain Security Regulations From a DevSecOps Perspective

This article examines how new regulations demand automated SBOMs and DevSecOps automation to secure software supply chains and ensure compliance.

July 21, 2025

by Apostolos Giannakidis

CORE

· 3,031 Views · 1 Like

Designing and Operating Single-Tenant Architectures at Scale

This article covers deployment patterns, automation via CI/CD, centralized observability, and best practices to scale single-tenant dedicated environments efficiently.

July 21, 2025

by Avik Bose

· 2,198 Views · 1 Like

ArchUnit, Unit Testing The Architecture

ArchUnit will help you whenever the compiler will not make it, especially in enforcing a package structure or architecture.

July 21, 2025

by Bartłomiej Żyliński

CORE

· 1,688 Views · 1 Like

Log Spikes? No Sweat: How Top DevOps Teams Tame Bursty Workloads

Be ready for log storms: scale smart, ingest everything, and stay clear when traffic surges hit.

July 21, 2025

by Alvin Lee

CORE

· 1,801 Views · 1 Like

How to Expose IBM FS Cloud Container App to Public

This white paper provides a solution faced by the IBM Cloud Financial Services Cloud users when exposing application to public network.

July 18, 2025

by Pari Biswas

· 3,666 Views · 1 Like

Automation of IT Incident Reports Using Observability API and GenAI

A summary of the integration of observability API and GenAI to automate preliminary incident reporting with a sample incident report from on-prem and cloud models.

July 18, 2025

by Pandian Ramaiah

· 3,537 Views

AI-Driven Threat Hunting: Catching Zero Day Exploits Before They Strike

Zero-day exploits hide in plain sight. Learn how AI detects them, see real-world use cases, and build your own Python threat hunter to catch anomalies fast.

July 18, 2025

by Dinesh B

· 3,429 Views · 1 Like

Burn that List: Smarter Use of Allowlists and Denylists in Multi-Tenant Systems

Without a burndown plan, access lists become rigid, outdated, and risky. Prefer dynamic, policy-based controls that adapt over time.

July 18, 2025

by Ramchandran Maharajapuram Easwarasharma

· 3,744 Views · 1 Like

How We Built a Smarter University Chatbot Using LLaMA2, AWS SageMaker, and RAG

We built a multilingual university chatbot using LLaMA2, SageMaker, LangChain, and Milvus with RAG for real-time answers scalable to domains like healthcare and HR.

July 18, 2025

by Kishore Thota

· 4,097 Views · 1 Like

Developing Secure REST API Using Spring Boot SSL Bundle Feature

Learn how to secure REST APIs in Spring Boot using SSL and self-signed certificates. Set up HTTPS on the server and configure a client to consume secure endpoints.

July 18, 2025

by Jiwan Gupta

· 7,186 Views · 6 Likes

Practical Steps to Secure the Software Supply Chain End to End

Learn practical steps to secure your software supply chain, including governance, development, deployment, identity management, and incident response.

July 18, 2025

by Karteek Kotamsetty

· 4,556 Views · 1 Like

From Drift to Discipline: Operating Model for Regaining Enterprise Cloud Control

Enterprises chasing AI and scale won’t win with more tools—they’ll win by turning infrastructure into standardized infrastructure-as-code.

July 18, 2025

by Aharon Twizer

· 3,442 Views

Implementing Event-Driven Systems With AWS Lambda and DynamoDB Streams

Learn how to build a real-time, event-driven system using AWS Lambda and DynamoDB Streams to process data changes automatically without polling or extra infra.

July 18, 2025

by Akash Verma

· 3,544 Views · 2 Likes

Terraform vs Pulumi vs SST: A Tradeoffs Analysis

Confused about which IaC tool to pick? This guide compares Terraform, Pulumi, and SST to help you choose based on project goals, team skills, and cloud needs.

July 17, 2025

by Gautier BLANDIN

· 4,243 Views

The Latest Software Design and Architecture Topics