Security

Sensitive Data Encryption — Module Design and Migration Retrospective

A retrospective on column-level encryption of sensitive data in a running service. Envelope encryption, DEK granularity decisions, the WHERE clause constraint that led to HMAC, and the migration automation Skill that spread the work across the org.

Dable
Project
Security
Encryption
Compliance
Retrospective

VPC for Backend Engineers

Isolation, routing, connectivity, security — VPC’s four axes pulled into one place, framed around the decisions backend engineers actually face.

Vpc
Network
Subnet
Routing
Security