Practical engineering writing on cloud architecture, containers and security.https://sciontech.co/en-ushttps://sciontech.co/blog/scoping-a-penetration-test-properly/https://sciontech.co/blog/scoping-a-penetration-test-properly/The difference between a vulnerability scan and a penetration test, why unscoped tests produce useless reports, and what should be in the deliverable before you pay for it.Tue, 07 Oct 2025 00:00:00 GMTSecurityHardik Kamdarhttps://sciontech.co/blog/what-managed-devops-should-actually-include/https://sciontech.co/blog/what-managed-devops-should-actually-include/What separates a genuine engineering partnership from a ticket queue, how to structure a retainer that does not decay into firefighting, and the questions to ask before signing one.Tue, 16 Sep 2025 00:00:00 GMTEngagementHardik Kamdarhttps://sciontech.co/blog/slos-alerting-on-what-matters/https://sciontech.co/blog/slos-alerting-on-what-matters/Why most monitoring setups produce noise instead of signal, how to pick service level objectives that reflect user experience, and what an alert should actually mean.Wed, 27 Aug 2025 00:00:00 GMTReliabilityHardik Kamdarhttps://sciontech.co/blog/serverless-when-it-fits-and-when-it-does-not/https://sciontech.co/blog/serverless-when-it-fits-and-when-it-does-not/The workloads where serverless is genuinely the right answer, the ones where it becomes expensive and hard to debug, and the operational realities that rarely appear in the tutorials.Tue, 12 Aug 2025 00:00:00 GMTArchitectureHardik Kamdarhttps://sciontech.co/blog/landing-zones-getting-cloud-foundations-right/https://sciontech.co/blog/landing-zones-getting-cloud-foundations-right/What a landing zone actually is, why account separation beats a single account with careful IAM, and the decisions that are expensive to reverse once workloads depend on them.Thu, 24 Jul 2025 00:00:00 GMTArchitectureHardik Kamdarhttps://sciontech.co/blog/designing-a-cicd-pipeline-that-teams-trust/https://sciontech.co/blog/designing-a-cicd-pipeline-that-teams-trust/Why pipeline speed is a correctness feature, how to sequence checks so failures are cheap, and the difference between a pipeline that gates releases and one people learn to bypass.Wed, 09 Jul 2025 00:00:00 GMTDeliveryHardik Kamdarhttps://sciontech.co/blog/aws-cost-optimisation-where-the-money-goes/https://sciontech.co/blog/aws-cost-optimisation-where-the-money-goes/The five line items that dominate most AWS bills, why rightsizing is usually the smallest win available, and how to build cost visibility your team will actually act on.Wed, 18 Jun 2025 00:00:00 GMTCloud costHardik Kamdarhttps://sciontech.co/blog/aws-ecs-vs-eks/https://sciontech.co/blog/aws-ecs-vs-eks/A head-to-head comparison of ECS and EKS across architecture, ease of use, scalability, cost and security - with clear guidance on which fits your team and workload.Wed, 07 May 2025 00:00:00 GMTTechnologyHardik Kamdarhttps://sciontech.co/blog/navigating-the-cloud-migration-strategies/https://sciontech.co/blog/navigating-the-cloud-migration-strategies/Deployment models, migration strategies from lift-and-shift to serverless, the challenges that derail projects, and the practices that make a cloud migration succeed.Fri, 11 Apr 2025 00:00:00 GMTTechnologyHardik Kamdarhttps://sciontech.co/blog/terraform-with-ansible-vs-chef/https://sciontech.co/blog/terraform-with-ansible-vs-chef/A practical comparison of Terraform, Ansible and Chef across language, agent model, state management and multi-cloud support - and which combination fits your organisation's size and compliance needs.Sun, 23 Mar 2025 00:00:00 GMTTechnologyHardik Kamdarhttps://sciontech.co/blog/data-security-at-rest-vs-in-transit/https://sciontech.co/blog/data-security-at-rest-vs-in-transit/What the two states of data actually mean, why the distinction matters for compliance, and how to implement encryption for both on AWS using KMS, TLS and private networking.Sun, 09 Feb 2025 00:00:00 GMTTechnologyHardik Kamdar