Shameem A S (@ApostateDevOps) header
Shameem A S (@ApostateDevOps) profile picture

Shameem A S

@ApostateDevOps

Technical Consultant | DevOps Architect

 Cochin, India
shameem.in
Joined March 2011
  • Tweets458
  • Following893
  • Followers305
48Media
Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)Photo by Shameem A S (@ApostateDevOps)
PHP2Shell (CVE-2026-109618/109619): unauthenticated RCE in PHP 5.4–8.5.11, now on CISA's exploited list. Patch to 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, restart FPM, rebuild images. Start with that forgotten Magento or Drupal box. tenable.com/blog/php2shell-c… #PHP #Security
php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable®

php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable®

Two critical PHP vulnerabilities could lead to unauthenticated remote code execution. Patches are available for supported PHP 8.x branches.

tenable.com
1
128
Series finale: lab-to-AI on the raw zone. Models read curated, humans approve the extract — governed staging, Bedrock guardrails, and FinOps for AI spend. shameem.in/blog/2026-10-15-l… #HybridCloud #AWS #AI
Lab-to-AI — models read curated, humans approve the extract

ALT Lab-to-AI — models read curated, humans approve the extract

29
Observability data is the record, not just ops. Retention as a records decision, correlation ids as the audit trail, WORM log archives, and the X-Ray → OpenTelemetry deadline. shameem.in/blog/2026-10-08-o… #HybridCloud #AWS #Observability
Observability as audit evidence — retained, immutable, correlated, queryable

ALT Observability as audit evidence — retained, immutable, correlated, queryable

58
CI/CD under GxP change control: the PR is the change record, the pipeline is the evidence machine. 21 CFR Part 11 mapped onto pipelines — approvals, evidence bundles, e-signatures, segregation of duties. shameem.in/blog/2026-10-01-v… #HybridCloud #AWS #DevOps #GxP
CI/CD under GxP change control — the PR is the change record

ALT CI/CD under GxP change control — the PR is the change record

33
Should your raw instrument zone become Iceberg? Originals stay objects; what you derive, join, or filter repeatedly becomes a table. A placement checklist + migration plan with S3 Tables. shameem.in/blog/2026-09-24-r… #HybridCloud #AWS #DevOps
Raw instrument zone: objects or Iceberg tables?

ALT Raw instrument zone: objects or Iceberg tables?

9
Poller, DataSync, or S3 Events? Match the ingestion pattern to the instrument's capability, not once for the whole lab. A decision table + the parts you need regardless of pattern: checksums, manifests, quarantine, one run_id. shameem.in/blog/2026-09-17-i… #HybridCloud #AWS #DevOps
Instrument ingestion patterns: poller, DataSync, or S3 Events

ALT Instrument ingestion patterns: poller, DataSync, or S3 Events

16
ALCOA+ for platform engineers: audit questions get engineering answers. CloudTrail data events, S3 versioning, Object Lock, KMS — mapped principle by principle. Phase 2 of the lab-to-cloud series begins. shameem.in/blog/2026-09-10-a… #AWS #GxP #DevOps
ALCOA+ for Platform Engineers — data integrity as AWS controls

ALT ALCOA+ for Platform Engineers — data integrity as AWS controls

20
Amazon Linux 2 is EOL — and the migration tail is long. Inventory, the AL2023 breakage list (dnf, systemd, cgroups v2), and per-service checklists for ECS, Batch, and Lambda. shameem.in/blog/2026-09-03-a… #AWS #DevOps
Amazon Linux 2 EOL migration checklist

ALT Amazon Linux 2 EOL migration checklist

15
Hybrid lab-to-cloud, the series finale: a go-live and recovery checklist. A named rollback, a replay procedure for one run_id, and a stale-pending alarm — in writing, before cutover. shameem.in/blog/2026-08-27-h… #HybridCloud #AWS #DevOps
Go-Live and Recovery Checklist — hybrid lab-to-cloud series finale

ALT Go-Live and Recovery Checklist — hybrid lab-to-cloud series finale

22
Hybrid lab-to-cloud: observing and debugging data transfers. A run_id on every log line and metric — plus stall alarms and a first-fifteen-minutes playbook. Without it, hybrid debugging is archaeology. shameem.in/blog/2026-08-20-o… #HybridCloud #AWS #DevOps #Observability
Observing and Debugging Hybrid Data Transfers — hybrid observability checklist

ALT Observing and Debugging Hybrid Data Transfers — hybrid observability checklist

10
Hybrid lab-to-cloud: idempotent pollers, retries, and quarantine paths. A per-file state machine with a finite retry budget and a first-class quarantine prefix — so a crashed agent doesn't double-process or loop forever. shameem.in/blog/2026-08-13-i… #HybridCloud #AWS #DevOps
Idempotent Pollers, Retries, and Quarantine Paths — hybrid transfer checklist

ALT Idempotent Pollers, Retries, and Quarantine Paths — hybrid transfer checklist

12
Hybrid lab-to-cloud: IAM and KMS across the boundary. Why SSE-KMS AccessDenied is a key-policy problem, not an S3 problem — plus least-privilege identities, prefix isolation, and a diagnosis quick reference. shameem.in/blog/2026-08-06-i… #HybridCloud #AWS #DevOps #Security
IAM and KMS Across the Hybrid Boundary — SSE-KMS deny diagnosis

ALT IAM and KMS Across the Hybrid Boundary — SSE-KMS deny diagnosis

22
Hybrid lab-to-cloud: move instrument data to S3, reliably. Immutable keys, multipart uploads, source checksums, completion markers before consumers run. A transfer checklist for platform engineers. shameem.in/blog/2026-07-30-m… #HybridCloud #AWS #DevOps
Moving Instrument Data to S3 Reliably — hybrid transfer checklist

ALT Moving Instrument Data to S3 Reliably — hybrid transfer checklist

17
Hybrid lab-to-cloud: map the data path before you write upload code. Source → landing zone → transfer → S3 → validation. Discovery checklist for platform engineers. shameem.in/blog/2026-07-23-h… #HybridCloud #AWS #DevOps
Map the Data Path — hybrid lab-to-cloud discovery checklist

ALT Map the Data Path — hybrid lab-to-cloud discovery checklist

19
AWS Batch on EC2: the deployment checklist I hand to teammates before a pipeline go-live. Network, IAM roles, compute env, job defs, debugging RUNNABLE. shameem.in/blog/2026-07-07-a… #AWS #AWSBatch #DevOps
AWS Batch on EC2 deployment checklist for production workloads

ALT AWS Batch on EC2 deployment checklist for production workloads

41
Varnish in front of Drupal in 2013. AWS Batch and Terraform today. Same job: systems others can run without heroics. shameem.in/blog/2026-06-30-f… #PlatformEngineering #DevOps #AWS
From Varnish to Platform Engineering — LAMP era lessons applied to AWS today

ALT From Varnish to Platform Engineering — LAMP era lessons applied to AWS today

18
8 CloudWatch Logs Insights queries I reuse when metrics look fine but users report errors. Error spikes, ECS task stops, tail latency — first 15 minutes toolkit. shameem.in/blog/2026-06-23-c… #AWS #CloudWatch #DevOps
CloudWatch Logs Insights — 8 production queries for incident debugging

ALT CloudWatch Logs Insights — 8 production queries for incident debugging

23
Three "similar but not quite the same" Terraform env folders is a production incident waiting to happen. New: module layout for multi-env AWS — one source, thin roots, separate state keys. shameem.in/blog/2026-06-16-t… #Terraform #AWS #DevOps
Terraform module layout for multi-environment AWS — one source, thin roots, separate state keys

ALT Terraform module layout for multi-environment AWS — one source, thin roots, separate state keys

11
GitHub Actions → ECR → ECS: the deploy checklist I hand to teammates before a 2 a.m. release. Pin immutable SHA tags. OIDC over long-lived keys. services-stable + a real HTTP smoke test. shameem.in/blog/2026-06-09-g… #DevOps #AWS #GitHubActions
GitHub Actions to ECR to ECS deployment checklist banner for X

ALT GitHub Actions to ECR to ECS deployment checklist banner for X

21
Thrilled to join the AWS Community Day Kochi 2025 – AI/ML Edition! Can’t wait to meet fellow builders, innovators, and cloud enthusiasts. #awsugkochi #awscommunityday #acdkochi25 #acdkochi
Image from Shameem A S (@ApostateDevOps)
38
Load more