Hi, I'm Lalit 👋

Cloud engineer. DevOps specialist. Full-stack software builder.

My Terraform Drift Alert Could Not Explain the Drift

My Terraform drift detector could send an email, but it could not explain what changed or how serious it was. I changed the SNS message into structured JSON, delivered it to SQS for audit processing, and used Lambda to classify every resource change by severity.

July 22, 2026

I Added a Tag in AWS. Terraform Removed It Automatically.

I added a tag directly to an EC2 instance in AWS, then ran my Terraform drift detector. The change was classified as LOW, Lambda started a separate remediation build, and Terraform removed the tag automatically.

July 30, 2026Terraform Drift: Catching Infrastructure Changes Before They Catch You

#Terraform#AWS#CodeBuild#Lambda

The Security Group Change Terraform Never Told Me About

Terraform could reproduce my infrastructure, but it could not warn me when someone changed AWS manually. I built a CodeBuild job that runs Terraform plan, handles the drift exit code correctly, reads shared configuration from SSM, and sends an SNS email when the real infrastructure no longer matches the code.

July 15, 2026

Observability for ECS: Prometheus, Grafana, and Crash Testing

How to add Prometheus and Grafana to an ECS Fargate app, run load tests, and prove self-healing with a deliberate crash. Built on EC2 with Docker Compose.

July 9, 2026Three Tier Architecture using Terraform

#AWS#ecs

Making My ECS App Public with an Application Load Balancer

How to expose an ECS Fargate app publicly using an Application Load Balancer, target groups, and Terraform. Includes subnet AZ requirements and security group locking.

July 3, 2026Three Tier Architecture using Terraform

#AWS#ecs