AKS Backup Patterns (Batch 8)
Backup etcd state and persistent volumes via Velero or Azure Backup.
Alert Flood Mitigation
Silence noisy alerts, throttle them, and adjust routing.
Alert Flood Mitigation (Batch 8)
Use silences, grouping, and rate limiting to tame flood.
Ansible Playbooks
Define playbooks with hosts, tasks, handlers, and roles
Ansible | CheatSheets Hub
IT automation and configuration management. Use ansible-vault to secure sensitive variables
Argo CD Sync Waves
Use sync waves to control deployment order and gates during GitOps syncs.
ArgoCD | CheatSheets Hub
GitOps continuous delivery for Kubernetes. ArgoCD continuously monitors Git for changes
Automation Ops Checklist
Document automation workflows, approval steps, and fallbacks.
AWS Cost Operations
Monitor budgets, schedule reports, and optimize spend
AWS Cost Optimization
Analyze spend, rightsizing opportunities, and savings plans monthly.
AWS EKS Bottlerocket
Use Bottlerocket AMIs for immutable node pools with tuned kubelets.
AWS GuardDuty Response
Classify GuardDuty findings, correlate context, and trigger remediation.
AWS IAM Access Advisor
Use Access Advisor data to remove stale IAM actions from roles.
AWS Lambda Health Probes
Send regular synthetic requests to Lambda entry points to detect slowdowns.
AWS Lambda Powertools
Leverage Powertools decorators for structured logs, telemetry, and idempotency.
AWS Monitoring
CloudWatch alarms, X-Ray tracing, and dashboards
AWS Resilience Patterns
Design resilient AWS workloads with retries, multi-AZ + fallback
AWS S3 Policy Review (Batch 8)
Check public access block settings and fine-tune bucket policies.
AWS Security Hub Audit
Quick diagnostics for AWS Security Hub, IAM, CloudTrail, and GuardDuty
AWS Services | CheatSheets Hub
Amazon Web Services essentials. Navigate AWS cloud services efficiently
AWS SNS+SQS Anti-Patterns
Avoid infinite retries, missing DLQs, and unbounded queue growth.
Azure Container Instances
Run container workloads without Kubernetes by relying on ACI.
Azure DevOps Pipeline Cheats
Design multi-stage pipelines with reusable templates and approvals.
Azure Function Proxies
Add proxies for path rewrites, auth, and caching in front of Functions.
Azure Functions
HTTP/timer/cosmos triggers plus durable functions
Azure Monitor Log Analytics (Batch 8)
Run Kusto queries and alerts within Log Analytics.
Azure Monitor-Based Alerts
Build metric alerts with dynamic thresholds and action groups.
Azure Policy Baselines
Define policy sets that cover identity, network, storage, and cost guardrails.
Azure Private Endpoints
Expose Azure services via private endpoints tied to VNets.
Azure Spot VM Operations
Use Azure Spot VMs while handling eviction notices and fallback hosts.
Azure Workload Identity 10
Managed identity best practices
Azure Workload Identity 20
Managed identity best practices
Azure Workload Identity 30
Managed identity best practices
Azure Workload Identity 40
Managed identity best practices
Azure Workload Identity 50
Managed identity best practices
Blue/Green CI/CD (Batch 8)
Use stacks for green/blue deployments and swap load balancers once ready.
Chaos Engineering Controls
Introduce controlled faults to prove resilience while minimizing blast radius.
CI/CD Best Practices
Continuous Integration and Deployment
CI/CD Branch Gating
Require passing builds, approvals, and gating policies before merges.
CI/CD Canary Workflows
Orchestrate canary deployments using traffic splits and health gates.
CI/CD Canary Workflows (Batch 8)
Deploy small percentages of traffic to new builds using feature flags and health gates.
CI/CD Security
Gate pipelines with scans, secrets hygiene, and approvals
CI/CD Signing & Notarization
Sign releases and optionally notarize containers/binaries.
CircleCI | CheatSheets Hub
Cloud-based CI/CD platform. Use CircleCI orbs to simplify configuration
Cloudflare Workers
Deploy edge functions, persist data, and configure routes
Consul Service Mesh
Use Consul intentions, ACLs, and proxies to secure service-to-service traffic.
Data Version Control
Use DVC/git-lfs to version data plus experiments
Datadog | CheatSheets Hub
Monitoring and observability platform. Datadog provides unified view across infrastructure and apps
DigitalOcean
DigitalOcean droplets, spaces, app platform, and management
Docker BuildKit Optimizations
Use BuildKit features like cache imports, secret mounts, and parallel build stages to shrink build time
Docker Compose Health
Add health probes to compose services and restart policies.
Docker Compose Secrets (Batch 8)
Reference secrets objects rather than inline env vars.
Docker Healthcheck Definitions
Define `HEALTHCHECK` commands and intervals for each service.
Docker Image Layer Caching
Structure Dockerfiles so stable layers are reused across builds.
Docker Nexus Proxy
Proxy Docker Hub via Nexus to cache layers and limit outbound costs.
Docker Non-Root Best Practices
Switch to non-root users and drop capabilities during image build.
Docker Practices
Slim images, multistage builds, and secure runtime habits
Dockerfile Security (Batch 8)
Use multi-stage builds, drop root, and scan images.
EKS Fargate Spot
Run bursty or fault-tolerant pods on Fargate Spot to reduce spend.
EKS IAM Roles for Service Accounts (Batch 8)
Bind IAM roles to service accounts using IRSA.
GCP DNS Peering (Batch 8)
Peering Cloud DNS zones into VPCs for custom domain resolution.
GCP IAM Conditions
Limit access by enforcing conditions on service accounts or users.
GCP Private Service Connect
Expose services privately via Private Service Connect endpoints.
GCP Secret Manager Lifecycle
Version secrets, rotate them automatically, and track IAM bindings.
GCP Service Mesh Primer
Configure Anthos Service Mesh traffic policies and telemetry.
Git
Git version control cheat sheet with essential commands for branching, merging, committing, and collaboration.
Git Branching Strategies
Choose models (GitHub flow, GitLab flow, trunk-based) and keep merges predictable
Git Commit Message Standards
Use conventional prefixes, scopes, and tidy bodies for automation.
Git Secret Lint
Scan staged files with `git-secrets` or `detect-secrets` before commits.
Git Workflows (Trunk, Feature, Shape)
Compare trunk-based, feature, and shape-up workflows.
GitHub Actions Advanced
Advanced GitHub Actions - workflows, matrix builds, and reusable actions
GitHub Actions Matrix Builds
Define matrices to test across environments efficiently.
GitHub Actions Security
Secure your GitHub Actions pipelines with scans, secrets, and policies
GitHub Actions | CheatSheets Hub
CI/CD automation for GitHub. Use actions/cache to speed up workflow runs
GitHub Codespaces Setup
Define devcontainer settings, dotfiles, and port forwarding for Codespaces
GitHub Copilot
GitHub Copilot shortcuts, prompts, tips and best practices for AI-assisted coding
GitOps
GitOps principles and tools - ArgoCD and FluxCD
GitOps Observability
Monitor GitOps controllers for drift, errors, and delivery latency
GitOps Workflows
Declarative delivery, automation, and drift detection
GKE Resource Quota Monitoring
Monitor `ResourceQuota` usage per namespace so teams avoid hot nodes.
Google Cloud Platform | CheatSheets Hub
GCP services overview. Use BigQuery for large-scale data analytics
Grafana Dashboard Shorthand
Quickly assemble dashboards with templates, panel links, and alert rules.
Grafana Snapshot Share
Generate snapshots to share dashboards without login credentials.
Grafana Template Variables
Use template variables for environment, region, and service filters.
Grafana | CheatSheets Hub
Data visualization and monitoring. Use template variables to create reusable dashboards
GuardDuty Threat Hunter (Batch 8)
Correlate findings with AWS config and CloudTrail for quick hunting.
HashiCorp Consul | CheatSheets Hub
Service mesh and discovery. Consul provides both service discovery and mesh
HashiCorp Vault | CheatSheets Hub
Secrets and encryption management. Use dynamic secrets instead of static credentials
Helm Chart Structure
Organize templates, values, and hooks for reusable Helm packages
Helm Chart Templating
Structure values, templates, and helpers for maintainable charts.
Helm | CheatSheets Hub
Kubernetes package manager. Use helm template to preview manifests before install
Istio Ingress Gateway
Expose services through Istio Gateways with TLS policies and routing rules.
Istio | CheatSheets Hub
Service mesh platform. Istio adds observability, security, and control to microservices
Jenkins | CheatSheets Hub
Open-source automation server. Use declarative pipelines for simpler syntax
Kubernetes Cost Optimization
Node pools, schedule tuning, and spot workloads
Kubernetes GitOps Checklist
Capture repo layout, bootstrap repo credentials, and validate sync targets.
Kubernetes Liveness Patterns (Batch 8)
Use probe endpoints to restart stuck containers.
Kubernetes Network Policies
Define ingress and egress rules to limit pod communication.
Kubernetes Operator Patterns
Structure Kubernetes operators with clear CRDs, leader election, and retries.
Kubernetes Operators
Design CRDs, controllers, and reconciliation loops for reliable automation
Kubernetes Pod Troubleshooting
Triaging pod restarts, CrashLoops, and silent failures.
Kubernetes RuntimeClass
Define RuntimeClass to select alternate container runtimes (gvisor, kata).
Kubernetes Security
Network policies, RBAC, and supply-chain protections
Kubernetes StorageClasses
Tune provisioners, reclaim policies, and binding modes per workload.
Kubernetes Telemetry
Collect metrics, traces, and logs centrally
Lambda Async Invocation Tips
Handle async events with DLQs and idempotent functions.
Lambda@Edge
Associate functions with CloudFront events and monitor latency
Linux OOM Score Tuning
Lower OOM scores for critical daemons so the killer prefers others.
Linux Security Hardening
Harden Linux nodes with updates, SSH config, and auditd
Microsoft Azure | CheatSheets Hub
Azure cloud services essentials. Use Azure Cost Management to monitor spending
Monitoring Drilldowns
Connect high-level panels to deeper dashboards or APIs for troubleshooting.
Multi-Cloud IAM Mapping
Document equivalent roles, service accounts, and policies for each cloud.
Observability as Code
Store observability configs under version control
Observability Dogfooding
Teams should consume their own metrics, traces, and dashboards before release.
OpenTelemetry Instrumentation
Capture consistent telemetry for services and propagate context across boundaries.
Prometheus Alert Rates
Document alert noise sources and mute via rate limiting or silences.
Prometheus Alerting Best Practices
Add runbooks, use routes, and silence noise to prevent fatigue.
Prometheus Blackbox Prober
Probe HTTP, TCP, and ICMP endpoints from your observability stack.
Prometheus Query Best Practices
Avoid costly queries while keeping dashboards accurate.
Prometheus | CheatSheets Hub
Open-source monitoring and alerting. Use Grafana for visualizing Prometheus metrics
Pulumi | CheatSheets Hub
Infrastructure as Code with programming languages. Pulumi uses real programming languages, not DSLs
Serverless Cost Controls
Prevent runaway bills via concurrency, schedules, and budgets.
SRE Incident Response Playbook
Runbooks for status pages, incident channels, and after action reviews.
Systemd Services
Craft service + timer units, enable/disable, and inspect logs
Terraform Cloud
Remote workspaces, policy sets, and secure runs in Terraform Cloud
Terraform Drift Detection
Catch resource drift before it surprises production.
Terraform Module Registry (Batch 8)
Host modules on Terraform Registry or private registries with versioning.
Terraform Modules
Module structure, inputs/outputs, and versioning
Terraform Provider Security 18
Limit provider privileges
Terraform Provider Security 28
Limit provider privileges
Terraform Provider Security 38
Limit provider privileges
Terraform Provider Security 48
Limit provider privileges
Terraform Provider Security 8
Limit provider privileges
Terraform Secure Backends
Configure remote backends with encryption and locking.
Terraform Security Scanner
Run scanners, enforce policies, and catch drift
Terraform Testing
Run fmt/validate/plan, policy tests, and module unit tests
Terraform Workspace Strategy
Use named workspaces for staging, prod, and experiments.
Terraform | CheatSheets Hub
Infrastructure as Code tool. Use terraform workspaces to manage multiple environments
Travel Digital Nomad Kit
Pack chargers, backups, and routines for nomadic productivity.
Vault Dynamic Secrets
Issue temporary credentials for databases, cloud APIs, or SSH.
Vault KV Versioning
Use KV v2 to store versioned secrets and recover past values.
Vault Secrets Engines
Enable engines, generate dynamic credentials, and renew leases