CloudChat

Episode 0025 - The Sound of Security

Security is more than a feature, it's a pillar of the Well-Architected Framework. In this episode, Carl and Brandon explore how AWS, Azure, and GCP approach security across identity and access, infrastructure defense, data protection, monitoring, governance, and the shared responsibility model.

They compare tools and practices like IAM, RBAC, and conditional access; network firewalls, WAFs, and DDoS protection; encryption at rest and in transit; and incident detection and automated remediation. The conversation also dives into security testing, drift detection with IaC, compliance posture, and how policy enforcement differs across the big three. The episode closes with a reminder that cloud security is always shared, and is never finished.

• AWS: Well-Architected Framework – Security pillar
• AWS: Identity and Access Management (IAM)
• AWS: AWS Shield and WAF
• AWS: Amazon Macie
• AWS: Amazon GuardDuty
• AWS: AWS Config
• Azure: Azure Well-Architected Framework – Security
• Azure: Microsoft Entra ID (Azure AD)
• Azure: Azure Role-Based Access Control (RBAC)
• Azure: Azure Key Vault
• Azure: Defender for Cloud
• Azure: Microsoft Sentinel
• Google Cloud: Google Cloud Architecture Framework – Security
• Google Cloud: IAM overview
• Google Cloud: Cloud Armor
• Google Cloud: Cloud KMS
• Google Cloud: Data Loss Prevention (DLP) API
• Google Cloud: Security Command Center
• Google Cloud: Assured Workloads

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0024 - Operating Excellently

Operational excellence goes beyond uptime, it's about building and operating cloud systems with discipline, automation, and continuous improvement. Carl and Brandon break down what operational excellence really means, drawing a distinction between striving for perfection and building resilient, adaptable systems. They discuss how principles from AWS, Azure, and GCP converge around key practices like repeatable automation, structured change management, and process validation.

The episode dives into real-world strategies for automation, incident readiness, and observability, including where and how to insert gates, use feature flags, and integrate infrastructure as code across cloud platforms. From avoiding certificate-induced outages to catching misconfigurations early, the key theme is consistency at scale. The discussion also emphasizes the cultural side, why shared ownership, retrospectives, and iterative postmortems matter just as much as tooling.

• Ansible: Ansible community documentation
• AWS Docs: Amazon CloudWatch documentation overview
• AWS Docs: Operational Excellence whitepaper
• AWS Docs: Prescriptive Guidance: Operational Excellence
• AWS Docs: Using CloudWatch dashboards and alarms
• AWS Docs: Well‑Architected Framework – Operational Excellence pillar
• AWS: Getting started with Amazon CloudWatch
• Google Cloud: Continuously improve and innovate
• Google Cloud: Manage incidents and problems
• Google Cloud: Operational Excellence pillar overview
• Google Cloud: Operational readiness & performance using CloudOps
• HashiCorp Docs: Terraform configuration language reference
• HashiCorp Docs: Terraform documentation
• Microsoft Docs: Automation of tasks with PowerShell in Power Platform
• Microsoft Learn: Azure Automation documentation
• Microsoft Learn: Azure Monitor documentation
• Microsoft Learn: Operational Excellence maturity model
• Microsoft Learn: Operational Excellence overview & quickstart
• Microsoft Learn: Operational Excellence principles (maturity model, practices)
• Microsoft Learn: PowerShell documentation
• PowerShell Universal Docs: PowerShell Universal platform guide
• Red Hat Docs: Ansible Automation Platform guide

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0023 - Turbocharged: Mastering Performance in Cloud Architecture

Cloud performance is one of those words that everyone agrees matters, but often means different things depending on who you ask. Is it latency? Is it autoscaling? Is it picking the right SKU size?

We cover the fundamentals of designing for performance in the cloud: how to select the right compute options, when to scale up or out, and what it takes to reduce latency across global workloads. We explore autoscaling strategies, observability tooling, cost tradeoffs, and real-world tuning stories—plus we wrap with a cheat sheet of optimization tools across AWS, Azure, and GCP.

Performance isn't just about throwing more cores or RAM at a problem. It's a set of design choices you make continuously—choices that affect cost, scalability, and user experience. Use the principles and tools in your cloud provider to experiment, monitor, and improve.

Producer's note: we encountered some technical issues during recording, so apologies for the audio quality in some parts. The content is still solid, and we hope you find it valuable!

• AWS Trusted Advisor
• AWS Well-Architected Framework
• Azure Advisor
• Azure Well-Architected Framework – Performance
• Cloud Load Balancing (GCP)
• GCP Architecture Framework
• GCP Recommender
• PerfKit Benchmarker
• SLOs and SLIs (Google SRE Workbook)

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0022 - What is Cloud Resiliency, Really?

Carl and Brandon break down the core concepts behind cloud resiliency, availability, reliability, and redundancy — how they relate, where they differ, and why understanding those distinctions is critical. Just because a service is "always on" doesn't mean it's resilient. They explore the difference between planned and unplanned outages, how graceful degradation works in practice, and why resiliency is measured by recovery, not just uptime.

It's not just about uptime. It's about what breaks, how you recover, and what keeps going when everything else doesn't.

They also cover the architectural side: distributed systems, zone-aware deployments, chaos testing, and recovery strategies that go beyond documentation. With real-world failure scenarios and practical planning advice, this episode helps cloud teams build for failure — before it happens.

• AWS | Failover with AWS
• AWS | Well-Architected Framework: Reliability Pillar
• Azure | Reliability design principles
• Azure | Resiliency Overview
• Azure | Well-Architected Framework: Reliability Pillar
• Google Cloud | Architecture Framework: Reliability Pillar
• Google Cloud | Patterns for scalable and resilient apps
• Google Cloud | Site Reliability Engineering (SRE) Book
• principlesofchaos.org | Principles of Chaos Engineering

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0021 - The 9 Circles of Dependency Hell 🔥

Carl and Brandon descend into the fiery depths of Dependency Hell, exploring nine common (and painful) challenges that plague developers working in modern cloud environments. From version mismatches to licensing traps, each "circle" offers insights, real-world examples, and actionable tips for escaping the chaos.

If you've ever watched a cloud deployment crash because of a transitive dependency or scrambled to patch a vulnerability from three layers down in your stack, this episode is for you.

• Reddit: I'm harvesting credit card numbers…
• FOSSA on Polyfill Supply Chain Attack
• FOSSA – License Compliance Tool
• Snyk – Security Scanning
• Dependabot – GitHub Security Updates
• Aqua Trivy – Vulnerability Scanner

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0020 - The 3 M's of Going to the Cloud

If you've been thinking of moving to the cloud, or are in the first steps of your journey, Carl and Brandon cover the 3 M's of going to the cloud: Migrate, Modernize, and Manage.

The hosts cover key points in planning your move, including analyzing and taking inventory if your current on-premises environment, multiple cloud provider options, and the importance of understanding your technical needs based on possibly hidden dependencies in your solution, and starting to think about Day 2 Operations.

Sharing real world experience of their own journeys, this episode will give you a lot to think about as you and your team plan the next steps in your journey.

• 10 Practical Tips for On Premise To Cloud Migration | Zeet.co
• Migrate to Google Cloud: Get started | GCP
• The difference between day-0, day-1, and day-2 operations | Octopus Deploy
• What is cloud migration? | AWS
• What is cloud migration? | Microsoft Azure

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0019 - All Your Data Are Belong to Us

In this episode, Carl and Brandon deep dive into the world of data storage in the cloud! With numerous options, different paradigms, and a plethora of scenarios to consider, they discuss the pros and cons of each. They also touch on some "non-traditional" data storage options, such as using an in-memory cache as your primary database.

Are you a polyglot database user? Do you have a favorite database that you use no matter what the scenario is? Join us to hear the discussion on both sides of the issue!

• Choosing a Data Store | Azure Architecture Center
• Choosing an AWS storage service | AWS
• Navigating Google Cloud: a decision tree for storage workloads | GCP
• Polyglot Persistence | Wikipedia
• Redis as a Database
• Elasticsearch
• Apache Lucene
• Apache Solr
• Azure AI Search
• Amazon Kendra

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0018 - We Can Hardly Contain Ourselves!

In today's episode, Carl and Brandon dive deep into container technology. They cover everything from the container file to orchestrating containers on a cloud platform. Furthermore, Carl and Brandon discuss how Docker is not the end-all-be-all of container technology, and options that you have to use instead of Docker. If you want to learn more about what containers are, how they work, why you would want to use them, and how they apply to more than just the cloud, this is the episode for you!

• Apache Mesos
• Buildah
• Docker | Multi-stage builds
• Docker
• GitHub | GoogleContainerTools | distroless
• GitHub | PiHole
• GitHub | PiKaraoke
• Google Cloud Architecture Center | Application development resources
• Google Cloud Blog | 7 Google best practices for building containers
• Google Cloud Blog | Kubernetes best practices: Setting up health checks with readiness and liveness probes
• Google Cloud Blog | Kubernetes best practices: terminating with grace
• Harbor
• Helm
• k3s
• Kubernetes | Configure Probes
• Kubernetes
• LXC | Linux Containers
• Podman

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0017 - The Source is with Us

In this episode, Carl and Brandon speak with Brian Munzenmayer, who shares his extensive experience in the open-source community. Brian discusses his journey from fixing simple typos in documentation to becoming a key maintainer of a large open source website that you've probably used. The discussion delves into the importance of community engagement in open-source projects, the spectrum of contributions, and the various roles individuals can play, from coding to organizing and managing projects. Brian also touches on the challenges of maintaining open-source projects, including the risk of burnout and the need for sustainable practices.

The episode also explores the broader impact of open-source software on the tech industry, highlighting how contributions can influence major projects and even corporate products. Brian emphasizes the value of open-source work in professional development and the importance of fostering inclusive and collaborative environments. The episode concludes with insights into the future of open-source software and the ongoing need for community-driven innovation.

And of course, we have to mention that Brian is the author ofApproachable Open Source, which is available now for purchase!

• Approachable Open Source by Brian Muenzenmeyer. A brief book with a big vision.
• Approachable Open Source on Bluesky
• Brian on Bluesky
• Brian on LinkedIn
• Brian's Website

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat

Episode 0016 - Control All the Things! 🛩️

In this episode, Carl and Brandon dive into the world of control planes, starting with what they are and how they differ from other planes you may see in your solutions and the providers they run on. They chat about the balance between automation and manual operations, and share examples from popular cloud services and technologies like Kubernetes, AWS, and Azure. Then, they explore the key functions of a control plane, such as resource management, policy enforcement, and tenant, security, monitoring, and configuration management.

Carl and Brandon also take a closer look at control planes in Kubernetes, explaining the roles of components like the API server, etcd, controller manager, and scheduler, and how they work together to manage clusters. Finally, they discuss the challenges and benefits of deploying and managing control planes across multiple cloud providers, and share best practices for keeping things consistent in multi-cloud and hybrid environments.

• AWS Control planes and data planes
• Azure control plane and data plane
• Crossplane.io
• Kubernetes | Control Plane
• radius

Visit us at:

• twitter.com/CloudChatTech
• discord.cloudchat.tech
• [email protected]
• linkedin.com/company/cloudchat