Personal blog by Max Ivanov, Software Engineer / Cloud Architect.

I write about Azure, AWS, Serverless, DevOps, fullstack TypeScript, peppered with thoughts on dev life.


How a compromised NPM package can steal your secrets (POC + prevention)

POC of a vulnerable AWS Lambda app leaking environment variables via a compromised NPM package

Deploy AWS Lambda to VPC with Terraform

Guide on deploying multiple cloud resources required to run Lambda witnin a VPC

AWS Cognito: Amplify vs amazon-cognito-identity-js vs AWS SDK

Which of the libraries to use when to integrate Cognito in JavaScript projects.