The Business Compass LLC Podcasts

Managing Shared Infrastructure in DevOps: A Practical Guide   https://knowledge.businesscompassllc.com/managing-shared-infrastructure-in-devops-a-practical-guide/   Running shared infrastructure in a DevOps environment is one of those things that sounds straightforward until three teams are stepping on each other’s deployments at 2 AM on a Friday.

Modern Kubernetes Networking: Building an IPv6-First Architecture   https://knowledge.businesscompassllc.com/modern-kubernetes-networking-building-an-ipv6-first-architecture/   IPv4 addresses are running out, and your Kubernetes clusters are going to feel that pressure sooner than you think. If you’re a platform engineer, DevOps practitioner, or cloud architect who’s been putting off the IPv6 conversation, this is your sign to stop waiting.

Secure AWS Deployments with OIDC, IAM Roles, and Temporary Credentials   https://knowledge.businesscompassllc.com/secure-aws-deployments-with-oidc-iam-roles-and-temporary-credentials/   If you’re still storing AWS access keys in environment variables or CI/CD secrets, you’re sitting on a ticking time bomb. Leaked long-lived AWS credentials are one of the most common causes of cloud security incidents, and the fix is simpler than you might think.

Migrating Massive Data Sets to AWS with Snowmobile   https://knowledge.businesscompassllc.com/migrating-massive-data-sets-to-aws-with-snowmobile/   If your business is sitting on petabytes of data and the idea of uploading it all over the internet sounds like a nightmare, you’re not alone. AWS Snowmobile migration exists specifically for situations like yours — moving exabyte-scale data to the cloud without waiting years for the transfer to finish.

AI-Powered Cloud Auditing: Analyze AWS Resources Using the AWS CLI   https://knowledge.businesscompassllc.com/ai-powered-cloud-auditing-analyze-aws-resources-using-the-aws-cli/   Manual cloud audits are slow, error-prone, and honestly kind of miserable. You run a few AWS CLI commands, stare at a wall of JSON output, and still aren’t sure if your S3 buckets are exposed or your IAM roles are too permissive.

How to Migrate from CloudFront OAI to OAC Without Breaking S3 Access   https://knowledge.businesscompassllc.com/how-to-migrate-from-cloudfront-oai-to-oac-without-breaking-s3-access/   If you’re running an S3-backed CloudFront distribution, there’s a good chance you’re still using Origin Access Identity (OAI) — and that’s becoming a problem. AWS has made it clear that Origin Access Control (OAC) is the modern replacement, with stronger security defaults and support for features OAI simply can’t handle.

AWS SES Email Architecture: Why Your Application May Need a Wrapper   https://knowledge.businesscompassllc.com/aws-ses-email-architecture-why-your-application-may-need-a-wrapper/   If you’re building an application that sends emails, AWS Simple Email Service probably made your shortlist fast. It’s affordable, scalable, and backed by Amazon’s infrastructure. But dropping raw SES calls directly into your application code is a decision that tends to age poorly.

AWS Services for Testing: What QA Engineers Actually Need to Know   https://knowledge.businesscompassllc.com/aws-services-for-testing-what-qa-engineers-actually-need-to-know/   If you’re a QA engineer who keeps hearing “just spin it up in AWS” during sprint planning and nodding along while quietly Googling everything later — this is for you.

Securing S3 Buckets: A Step-by-Step Guide to User Access Management   https://knowledge.businesscompassllc.com/securing-s3-buckets-a-step-by-step-guide-to-user-access-management/   If you’ve ever spun up an S3 bucket and thought “I’ll sort out the permissions later,” this podcast is for you. Cloud developers, DevOps engineers, and AWS admins who manage sensitive data in S3 buckets need a clear, repeatable process for locking things down — and that’s exactly what this covers.

Dockerless CI/CD: Building Container Images on Locked-Down Runners   https://knowledge.businesscompassllc.com/dockerless-ci-cd-building-container-images-on-locked-down-runners/   If you’ve ever tried to build container images inside a Kubernetes-based CI/CD pipeline and hit a wall because Docker isn’t available — or isn’t allowed — you’re not alone. Security teams are locking down runners more aggressively than ever, and Docker-in-Docker is often the first thing to go. That leaves a lot of engineering teams scrambling for a reliable way to keep their build pipelines running without punching holes in their security posture.

Launching Secure EC2 Instances with NitroTPM and the AWS Nitro System   https://knowledge.businesscompassllc.com/launching-secure-ec2-instances-with-nitrotpm-and-the-aws-nitro-system/   If you’re running workloads on AWS that handle sensitive data, meet strict compliance requirements, or need hardware-level security guarantees, this podcast is for you. Security engineers, cloud architects, and DevOps teams will find practical, hands-on guidance here for getting the most out of NitroTPM EC2 instances and the broader AWS Nitro System security stack.

Deploy Applications Faster with an AWS Lightsail Staging Environment   https://knowledge.businesscompassllc.com/deploy-applications-faster-with-an-aws-lightsail-staging-environment/   If you’ve ever deployed an update and immediately gotten a call that something is broken, this podcast is for you.

Amazon EKS Version Upgrade: A Production-Ready Step-by-Step Strategy   https://knowledge.businesscompassllc.com/amazon-eks-version-upgrade-a-production-ready-step-by-step-strategy/   Keeping your Amazon EKS version upgrade on schedule is one of those tasks that’s easy to push to the back burner — until AWS ends support for your current version and you’re suddenly scrambling. If you’re a DevOps engineer, platform engineer, or SRE managing a live Kubernetes cluster, this podcast is for you.

Securing AWS from Code to Cloud: A Production DevSecOps Playbook   https://knowledge.businesscompassllc.com/securing-aws-from-code-to-cloud-a-production-devsecops-playbook/   Most AWS security breaches don’t happen because teams didn’t care — they happen because security got bolted on at the end instead of baked in from the start. If you’re a DevOps engineer, cloud architect, or security engineer trying to ship fast without leaving your AWS environment wide open, this guide is written for you.

Scaling AWS Applications for Sudden Traffic Spikes: Best Practices and Architecture   https://knowledge.businesscompassllc.com/scaling-aws-applications-for-sudden-traffic-spikes-best-practices-and-architecture/   You’ve seen it happen. A product goes viral, a marketing email lands at the wrong time, or a news cycle sends thousands of users to your app all at once. If your AWS infrastructure isn’t ready, users hit errors, pages time out, and you’re scrambling at 2 AM trying to figure out what went wrong.

AI-Powered HRMS on AWS: Architecture, Security, Scalability, and Automation   https://knowledge.businesscompassllc.com/ai-powered-hrms-on-aws-architecture-security-scalability-and-automation/   HR teams are drowning in manual work — payroll errors, compliance gaps, slow hiring cycles, and spreadsheets that never quite tell the full story. If you’re an HR leader, CTO, or cloud architect trying to fix that, an AI-powered HRMS on AWS gives you a real path forward.

AWS, Terraform, and GitOps in Action: A Digital Sports Platform Capstone   https://knowledge.businesscompassllc.com/aws-terraform-and-gitops-in-action-a-digital-sports-platform-capstone/   Building cloud infrastructure that actually holds up under real conditions is harder than most tutorials let on. This capstone project changes that by walking you through a complete, production-style build — a scalable sports platform on AWS, wired together with Terraform and a GitOps CI/CD deployment pipeline.

Building a Scalable Multi-Tenant Frontend on AWS with CloudFront and S3   https://knowledge.businesscompassllc.com/building-a-scalable-multi-tenant-frontend-on-aws-with-cloudfront-and-s3/   If you’re building a SaaS product and need one frontend to serve dozens — or hundreds — of different customers without spinning up separate infrastructure for each one, you’re in the right place. This podcast is for frontend engineers, solutions architects, and SaaS developers who want a clean, production-ready approach to multi-tenant frontend AWS architecture using tools they likely already have access to.

Modernizing Legacy Applications on AWS: From EC2 to Containers and Serverless   https://knowledge.businesscompassllc.com/modernizing-legacy-applications-on-aws-from-ec2-to-containers-and-serverless/   If your AWS bills keep climbing while your application performance stays flat, your legacy setup is probably working against you. Engineers and cloud architects dealing with aging EC2-based systems know the pain — slow deployments, brittle infrastructure, and scaling headaches that eat up weekends.

Designing Hybrid Cloud Connectivity with AWS Site-to-Site VPN and Transit Gateway   https://knowledge.businesscompassllc.com/designing-hybrid-cloud-connectivity-with-aws-site-to-site-vpn-and-transit-gateway/   If you’re managing infrastructure that spans on-premises data centers and AWS environments, you already know the headache of keeping everything talking to each other reliably. Dropped connections, security gaps, and networks that can’t scale fast enough — these are real problems that slow teams down and create risk.

Building an Autonomous Cloud Security Platform Using AI and AWS   https://knowledge.businesscompassllc.com/building-an-autonomous-cloud-security-platform-using-ai-and-aws/   Security teams are drowning. Cloud environments generate thousands of alerts daily, attackers move faster than any human response team can match, and manual security processes simply can’t keep up with the scale modern infrastructure demands. Building an autonomous cloud security platform using AI and AWS is how forward-thinking teams are finally getting ahead of the problem instead of reacting to it.

Architecting a Production-Grade IoT Streaming Pipeline with AWS, Kafka, and Snowflake   https://knowledge.businesscompassllc.com/architecting-a-production-grade-iot-streaming-pipeline-with-aws-kafka-and-snowflake/   If you’re building a real-time IoT data pipeline that actually holds up in production, you’ve probably already hit the wall with half-baked tutorials that work on a laptop but fall apart at scale. This podcast is for data engineers, cloud architects, and IoT platform teams who need a battle-tested, end-to-end IoT streaming pipeline using AWS, Kafka, and Snowflake — not a proof of concept, but something you can actually ship.

Automating Spring Boot Builds, Testing, and Artifact Management on AWS   https://knowledge.businesscompassllc.com/automating-spring-boot-builds-testing-and-artifact-management-on-aws/   If you’re a Java developer or DevOps engineer tired of manually building, testing, and deploying Spring Boot applications, this guide is for you. Automating Spring Boot builds on AWS cuts down on human error, speeds up your release cycle, and frees you up to focus on writing actual code instead of babysitting deployments.

Modern API Management on AWS Using Amazon API Gateway   https://knowledge.businesscompassllc.com/modern-api-management-on-aws-using-amazon-api-gateway/   Managing APIs at scale gets messy fast — especially when you’re juggling security, performance, and cost all at once. Amazon API Gateway gives you a single place to build, deploy, and manage APIs on AWS without spinning up extra infrastructure or losing sleep over traffic spikes.

Designing Cloud-Native Applications with AWS Lambda and Amazon ECS   https://knowledge.businesscompassllc.com/designing-cloud-native-applications-with-aws-lambda-and-amazon-ecs/   Building cloud-native applications can feel overwhelming when you’re staring down a long list of AWS services and trying to figure out which ones actually fit your project. If you’re a developer, solutions architect, or engineering lead looking to move beyond traditional server-based setups, this podcast is for you.

Enterprise AI on AWS: Bedrock Agents, Apache Iceberg, Athena, and Lake Formation   https://knowledge.businesscompassllc.com/enterprise-ai-on-aws-bedrock-agents-apache-iceberg-athena-and-lake-formation/   Building enterprise AI on AWS sounds straightforward until you actually sit down to wire everything together. You’ve got data scattered across S3, teams asking for real-time insights, compliance requirements breathing down your neck, and stakeholders who want AI agents that actually work — not just demo well.

SSE Architecture on AWS: API Gateway vs ALB, ECS, and Lambda   https://knowledge.businesscompassllc.com/sse-architecture-on-aws-api-gateway-vs-alb-ecs-and-lambda/   If you’re building real-time features — live dashboards, activity feeds, stock tickers, or notification streams — you’ve probably run into Server-Sent Events as a solid, lightweight option. But getting SSE on AWS to work reliably at scale isn’t just about writing the right backend code. The infrastructure decisions you make around routing, compute, and connection handling matter just as much.

Building Secure AWS Applications with AWS KMS   https://knowledge.businesscompassllc.com/building-secure-aws-applications-with-aws-kms/   If you’re building applications on AWS and handling sensitive data, encryption isn’t optional — it’s the baseline. AWS Key Management Service (AWS KMS) gives you a straightforward way to manage encryption keys, control who accesses them, and keep a clean audit trail without spinning up your own key infrastructure.

Architecting for Scale: High Availability, Resilience, and Performance on AWS   https://knowledge.businesscompassllc.com/architecting-for-scale-high-availability-resilience-and-performance-on-aws/   Building systems that stay fast, stay up, and grow without breaking — that’s the real challenge when you’re working on AWS at scale. If you’re a cloud architect, DevOps engineer, or a developer who’s started thinking seriously about production reliability, this guide is for you.

Deploying Highly Available Web Applications with AWS Elastic Beanstalk   https://knowledge.businesscompassllc.com/deploying-highly-available-web-applications-with-aws-elastic-beanstalk/   Downtime kills user trust. One slow-loading page or a 502 error at the wrong moment can send your users straight to a competitor — and that’s a problem no developer wants to deal with.

Building Secure AWS Architectures with Least Privilege IAM Roles   https://knowledge.businesscompassllc.com/building-secure-aws-architectures-with-least-privilege-iam-roles/   If you’ve ever spun up an AWS environment and handed out admin permissions just to “get things working,” you’re not alone — but that habit is quietly creating serious security gaps in your infrastructure.

Amazon ECS vs Amazon EKS: Architecture, Cost, Operations, and Scalability   https://knowledge.businesscompassllc.com/amazon-ecs-vs-amazon-eks-architecture-cost-operations-and-scalability/   If you’re running containers on AWS and trying to decide between Amazon ECS and Amazon EKS, you’re not alone. This is one of the most common decisions DevOps engineers, platform teams, and cloud architects wrestle with — and getting it wrong can cost you time, money, and a lot of late nights.

How AWS CodePipeline Orchestrates Source, Build, Test, and Deployment   https://knowledge.businesscompassllc.com/how-aws-codepipeline-orchestrates-source-build-test-and-deployment/   If you’ve ever pushed code and then spent the next hour manually running builds, checking test results, and deploying to multiple environments, you already know why AWS CodePipeline exists. This AWS DevOps pipeline tool takes that entire workflow off your plate by automating every step from the moment code lands in your repository to the second it goes live.

The Enterprise Blueprint for Real-Time AIOps Monitoring with CloudWatch   https://knowledge.businesscompassllc.com/the-enterprise-blueprint-for-real-time-aiops-monitoring-with-cloudwatch/   Your on-call engineer gets paged at 2 AM. By the time they dig through logs, cross-reference dashboards, and figure out what broke, the damage is done. Sound familiar?

Building a Slack AI Assistant Using Amazon Bedrock, OpenSearch, and AWS Lambda   https://knowledge.businesscompassllc.com/building-a-slack-ai-assistant-using-amazon-bedrock-opensearch-and-aws-lambda/   If your team lives in Slack, putting an AI assistant right inside it just makes sense. This Slack AI assistant tutorial walks you through connecting Amazon Bedrock, OpenSearch, and AWS Lambda into a working serverless AI architecture — one that answers questions, searches documents, and gets smarter over time.

Designing a Production-Ready Just-In-Time IAM Platform for AWS   https://knowledge.businesscompassllc.com/designing-a-production-ready-just-in-time-iam-platform-for-aws/   Permanent AWS permissions are a security liability. If your team is still handing out standing access to production environments, you’re carrying risk that doesn’t need to exist. A Just-In-Time IAM AWS platform fixes that by giving engineers exactly the access they need, exactly when they need it, and nothing more.

Deep Dive into Amazon EC2: Architecture, Networking, and Scaling   https://knowledge.businesscompassllc.com/deep-dive-into-amazon-ec2-architecture-networking-and-scaling/   If you’re building on AWS and want to stop guessing about EC2 and start making smarter decisions, you’re in the right place.

Serverless Video Transcoding and Branding with AWS Lambda and FFmpeg   https://knowledge.businesscompassllc.com/serverless-video-transcoding-and-branding-with-aws-lambda-and-ffmpeg/   If you’re processing videos manually or running a dedicated server 24/7 just to handle encoding jobs, you’re leaving money and time on the table. Serverless video transcoding with AWS Lambda and FFmpeg gives you a faster, cheaper way to handle video processing at any scale — without babysitting infrastructure.

Architecting High-Performance MySQL Exports to Amazon S3 on AWS   https://knowledge.businesscompassllc.com/architecting-high-performance-mysql-exports-to-amazon-s3-on-aws/   If you’re managing large-scale data pipelines on AWS, you already know that moving MySQL data to Amazon S3 sounds simple until it isn’t. Exports stall, write speeds tank, and suddenly a routine data transfer becomes a Friday night incident.

Amazon Redshift Performance Tuning with System Tables and System Views   https://knowledge.businesscompassllc.com/amazon-redshift-performance-tuning-with-system-tables-and-system-views/   If your Amazon Redshift queries are crawling and you’re not sure where to start, you’re in the right place. This podcast is for data engineers, analytics engineers, and DBAs who already work with Redshift and want to go beyond the basics to actually fix performance problems — not just throw more compute at them.

AI Database Access Using MCP: Architecture, Security, and Best Practices   https://knowledge.businesscompassllc.com/ai-database-access-using-mcp-architecture-security-and-best-practices/   AI systems that can query and manage databases directly sound powerful — and they are. But without the right setup, they can also become a serious liability. That’s where the Model Context Protocol (MCP) comes in, giving AI models a structured, controlled way to interact with your data.

Automating Infrastructure Compliance with Terraform Drift Detection on AWS   https://knowledge.businesscompassllc.com/automating-infrastructure-compliance-with-terraform-drift-detection-on-aws/   If you manage AWS infrastructure at any real scale, you already know the problem. Someone tweaks a security group directly in the console, a resource gets resized outside of Terraform, and suddenly your actual infrastructure no longer matches what your code says it should. That gap is called infrastructure drift — and left unchecked, it quietly becomes a compliance nightmare.

Amazon EKS Upgrade Playbook: Draining Nodes, Rolling Deployments, and Validation   https://knowledge.businesscompassllc.com/amazon-eks-upgrade-playbook-draining-nodes-rolling-deployments-and-validation/   Upgrading an Amazon EKS cluster sounds straightforward until you’re mid-process and a production pod crashes because you skipped a step. This Amazon EKS upgrade guide is built for DevOps engineers, platform teams, and SREs who need a clear, repeatable path through the Kubernetes cluster upgrade process — without guessing what comes next.

Accelerating AWS Infrastructure as Code with Kiro   https://knowledge.businesscompassllc.com/accelerating-aws-infrastructure-as-code-with-kiro/   If you’re a DevOps engineer, cloud architect, or platform team lead who spends too much time wrestling with CloudFormation templates or hunting down Terraform misconfigurations, this one’s for you.

Deploying AWS Static Websites with Terraform, S3, CloudFront, and Backend State   https://knowledge.businesscompassllc.com/deploying-aws-static-websites-with-terraform-s3-cloudfront-and-backend-state/   If you’ve ever manually clicked through the AWS console to host a static site, you already know how quickly that setup becomes a headache to reproduce or scale. This podcast walks you through deploying an AWS static website with Terraform using S3 for hosting and CloudFront as your CDN — all managed as infrastructure as code.

How Amazon S3 Processes API Requests: A Cloud Architect's Guide   https://knowledge.businesscompassllc.com/how-amazon-s3-processes-api-requests-a-cloud-architects-guide/   If you’ve ever wondered what actually happens the moment your application fires off a request to Amazon S3, you’re not alone. Most engineers interact with S3 daily but rarely stop to think about what’s happening under the hood — and that gap in understanding can lead to real problems like unexpected latency, failed requests, or consistency issues that are a nightmare to debug.

Amazon Cognito for Developers: Authentication, Authorization, and User Management   https://knowledge.businesscompassllc.com/amazon-cognito-for-developers-authentication-authorization-and-user-management/   Building secure login systems from scratch is painful. Amazon Cognito takes that burden off your plate by handling AWS user authentication, session management, and access control so you can focus on shipping features instead of reinventing security wheels.

Large File Upload Architecture on AWS Using S3 Pre-Signed URLs   https://knowledge.businesscompassllc.com/large-file-upload-architecture-on-aws-using-s3-pre-signed-urls/   If you’ve ever watched a 2GB file upload fail at 98% — or seen your server buckle under the weight of concurrent uploads — you already know the problem. Standard file upload approaches fall apart fast when file sizes grow. That’s where large file upload on AWS with S3 pre-signed URLs comes in.

Designing Production-Ready Jenkins Pipelines for Docker and Amazon ECR   https://knowledge.businesscompassllc.com/designing-production-ready-jenkins-pipelines-for-docker-and-amazon-ecr/   If you’re a DevOps engineer or backend developer who has wrestled with flaky Jenkins builds, inconsistent Docker image tags, or mysterious ECR authentication failures at 2 AM, this podcast is for you.

Enterprise AI with MongoDB: Data Modeling, Embeddings, and Retrieval   https://knowledge.businesscompassllc.com/enterprise-ai-with-mongodb-data-modeling-embeddings-and-retrieval/   If you’re building AI applications at scale, you’ve probably hit the same wall: your database wasn’t designed for the way modern AI systems actually work. Embeddings live in one place, structured data in another, and your retrieval pipeline is basically duct tape holding it all together.