https://devop.sh/blog/ Practical posts on AWS, Kubernetes, Terraform, CI/CD, cloud cost and engineering leadership, from an Athens DevOps consultancy. en Thu, 29 Oct 2026 00:00:00 GMT https://devop.sh/blog/aws-cost-optimization-checklist-startups/ https://devop.sh/blog/aws-cost-optimization-checklist-startups/ Thu, 29 Oct 2026 00:00:00 GMT A prioritised AWS cost optimization checklist: quick wins first, where each one shows up in Cost Explorer, and roughly how long it takes to fix. https://devop.sh/blog/aws-iam-identity-center-setup/ https://devop.sh/blog/aws-iam-identity-center-setup/ Thu, 29 Oct 2026 00:00:00 GMT AWS IAM Identity Center setup, step by step: identity source, permission sets, account assignments, CLI SSO, removing IAM users and break-glass access. https://devop.sh/blog/ecs-vs-eks-startups/ https://devop.sh/blog/ecs-vs-eks-startups/ Thu, 29 Oct 2026 00:00:00 GMT ECS vs EKS for startups: real costs including the EKS control-plane fee, operational effort, Fargate on both, and a decision guide by team size. https://devop.sh/blog/github-actions-aws-oidc/ https://devop.sh/blog/github-actions-aws-oidc/ Thu, 29 Oct 2026 00:00:00 GMT Set up GitHub Actions AWS OIDC step by step: identity provider, a role trust policy scoped to branch or environment, least-privilege IAM and the workflow. https://devop.sh/blog/heroku-to-aws-migration/ https://devop.sh/blog/heroku-to-aws-migration/ Thu, 29 Oct 2026 00:00:00 GMT How to migrate from Heroku to AWS: dynos to ECS Fargate, Heroku Postgres to RDS, config vars to SSM, release phase, DNS cutover and real cost estimates. https://devop.sh/blog/hetzner-vs-aws-eu-startups/ https://devop.sh/blog/hetzner-vs-aws-eu-startups/ Thu, 29 Oct 2026 00:00:00 GMT Hetzner vs AWS compared on compute and egress pricing, managed services, GDPR, SLAs, certifications and ops burden, with a guide to when each one wins. https://devop.sh/blog/incident-response-runbook-template/ https://devop.sh/blog/incident-response-runbook-template/ Thu, 29 Oct 2026 00:00:00 GMT A copy-paste incident response runbook: severity levels, roles, first-15-minutes checklist, status update templates, rollback rules and a blameless review. https://devop.sh/blog/soc2-aws-checklist/ https://devop.sh/blog/soc2-aws-checklist/ Thu, 29 Oct 2026 00:00:00 GMT SOC 2 on AWS, control by control: Organizations, Identity Center, CloudTrail, Config, GuardDuty, KMS, backups and the evidence your auditor will ask for. https://devop.sh/blog/cloud-migration-checklist-greece/ https://devop.sh/blog/cloud-migration-checklist-greece/ Mon, 19 Oct 2026 00:00:00 GMT A practical cloud migration checklist: inventory, region (Frankfurt, Milan or Athens Local Zone), ECS vs Kubernetes, database cutover, first 30 days. https://devop.sh/blog/fractional-cto-vs-full-time-cto-greece/ https://devop.sh/blog/fractional-cto-vs-full-time-cto-greece/ Mon, 19 Oct 2026 00:00:00 GMT What a fractional CTO does, how the cost compares with a full-time CTO in Greece, how much time you actually need, and the signs it is time to hire. https://devop.sh/blog/nis2-greece-aws-checklist/ https://devop.sh/blog/nis2-greece-aws-checklist/ Mon, 19 Oct 2026 00:00:00 GMT Greek Law 5160/2024 (NIS2) mapped to concrete AWS controls: identity, logging, backups, vulnerability management and 24/72-hour incident reporting. https://devop.sh/blog/hiring-senior-devops-greece/ https://devop.sh/blog/hiring-senior-devops-greece/ Fri, 01 May 2026 00:00:00 GMT Hiring senior DevOps in Greece: salary bands, where the senior engineers actually are, why your job ad gets no CVs, and when a partner beats hiring. https://devop.sh/blog/aws-nat-gateway-hidden-cost/ https://devop.sh/blog/aws-nat-gateway-hidden-cost/ Tue, 28 Apr 2026 00:00:00 GMT AWS NAT Gateway pricing by region ($0.045–$0.052 per hour and per GB), why the per-GB charge is what hurts, and how to cut it with free VPC endpoints. https://devop.sh/blog/stop-shipping-latest-tag-kubernetes/ https://devop.sh/blog/stop-shipping-latest-tag-kubernetes/ Tue, 21 Apr 2026 00:00:00 GMT Mutable image tags break rollbacks, defeat caching and turn outages into archaeology. Pin image digests instead — here's the manifest pattern we use. https://devop.sh/blog/aws-organizations-from-day-one/ https://devop.sh/blog/aws-organizations-from-day-one/ Wed, 08 Apr 2026 00:00:00 GMT Multi-account AWS is not enterprise overhead. It is the cheapest blast-radius control AWS offers, it is free, and it is easiest on day one. https://devop.sh/blog/terraform-state-organization/ https://devop.sh/blog/terraform-state-organization/ Mon, 30 Mar 2026 00:00:00 GMT Splitting Terraform state by team feels organised and is almost always wrong. Split by lifecycle instead — here's the rule of thumb. https://devop.sh/blog/the-cloud-audit-we-run/ https://devop.sh/blog/the-cloud-audit-we-run/ Sun, 22 Mar 2026 00:00:00 GMT The one-week cloud audit we run on every engagement: five dimensions, red/amber/green checks and one page of findings. Free to self-run. https://devop.sh/blog/ci-cd-anti-patterns/ https://devop.sh/blog/ci-cd-anti-patterns/ Thu, 12 Mar 2026 00:00:00 GMT Long-lived branches, deploy-on-tag, and order-dependent tests. Three CI/CD habits that look reasonable until production breaks. https://devop.sh/blog/aws-gcp-azure-greek-startup/ https://devop.sh/blog/aws-gcp-azure-greek-startup/ Thu, 19 Feb 2026 00:00:00 GMT AWS, GCP and Azure compared by an Athens DevOps team: EUR billing, latency from Greece, GDPR posture, and where each one actually wins. https://devop.sh/blog/gdpr-logging-eu-regions/ https://devop.sh/blog/gdpr-logging-eu-regions/ Wed, 04 Feb 2026 00:00:00 GMT Which logging, monitoring, error tracking and analytics tools keep data in the EU (Datadog, Sentry, PostHog, Grafana Cloud) and how to set them up for GDPR.