The Curious Engineer

All blogs / DevOps / SRE / infrastructure

Sander Knape

sanderknape.com

I’m a Staff Platform Engineer at Stack Overflow, where I work on developer experience and help engineers get from idea to impact faster. I spend a lot of time thinking about platform engineering, AI, engineering effectiveness, and how to make complex systems easier to work with. This blog is where I

DevOps / SRE / infrastructureDistributed systems / cloudEngineering management / careers

’16’17’18’19’20’21’22’23’24’25’26
Posts
45 from 19 Jun 2016 to 7 Apr 2026
Posting
now and then (4 in the last year)
Kind
personal blog
Feed
https://sanderknape.com/index.xml

2026 4

  1. The Organization of the Future: Smaller Teams, Harder Constraints
  2. The Engineer of the Future: From Builder to Orchestrator
  3. Engineering Is Moving Up the Stack
  4. 1

2024 1

  1. Terraform 'data source will be read during apply' messages - What is it and how to fix

2022 1

  1. Measure your golden signals with GKE Managed Prometheus and the nginx-ingress

2021 2

  1. Shift left AWS tag enforcement with Terraform and tfsec
  2. Go crazy with GitHub Actions

2020 8

  1. A Serverless Payment Workflow using AWS Lambda and the AWS CDK
  2. Nuances around centralized platform teams
  3. Using Amazon Cognito JWTs to authenticate with an Amazon HTTP API
  4. From toil to self-service: automate what matters
  5. Deploy your pull requests with GitHub Actions and GitHub Deployments
  6. Why it's great to write blog posts
  7. Running self-hosted GitHub Actions runners in your Kubernetes cluster
  8. Building a static serverless website using S3 and CloudFront

2019 7

  1. Roundup of the most important pre-re:Invent 2019 releases - so far
  2. Five ways to enable developer autonomy in AWS
  3. Installing private Git repositories through npm install in Docker
  4. Building serverless applications with the AWS CDK - and testing them locally
  5. Improving Kubernetes deployments with Helm
  6. Using Kubernetes Helm to push ConfigMap changes to your Deployments
  7. Automated deployments to Kubernetes with GitLab

2018 7

  1. Blocking account-wide creation of public S3 buckets through a CloudFormation custom resource
  2. How to easily test your AWS IAM credentials locally
  3. Two years with CloudFormation: lessons learned
  4. The hidden challenges of Serverless: from VM to function
  5. How to manage any kind of secret with AWS Secrets Manager
  6. Secret management design decisions: theory plus an example
  7. Comparing AWS SAM with the Serverless framework

2017 9

  1. Creating a serverless API using AWS API Gateway and DynamoDB
  2. A custom CloudFormation resource example for CodeDeploy
  3. Using pre-signed URLs to upload a file to a private S3 bucket
  4. CloudFormation StackSets: automated cross-account/region deployments
  5. Integrating ReactJS with the Google Maps widget
  6. Building a serverless website in AWS
  7. Use Infrastructure as Code for automated security in the deployment pipeline
  8. Dynamic image generation with AWS API Gateway and Lambda
  9. Getting started with AWS Cognito

2016 6

  1. Securing your server's SSH configuration
  2. Get insight into your server with Datadog
  3. Integration tests with Travis CI
  4. Using Let's Encrypt for free automated SSL certificates
  5. Multi-datacenter container orchestration with Nomad and Consul
  6. Getting a Qualys SSL Labs A+ rating with Nginx