BLOG
Notes on running cloud infrastructure
How we think about cloud cost, access and change, and what we learn building Zaysa.
security
Connecting a cloud account without storing a key
Long-lived access keys are the credential most likely to leak. Here is how short-lived federated identity works on AWS, Azure and Google Cloud, and what to check in the trust you create.
30 Sept 2026 · 4 min read
operations
Who made this change? Reading your cloud's change record
Every large cloud keeps a record of who changed what. They differ in name, in how long they keep it and in what they leave out. A short guide to the four we work with.
30 Sept 2026 · 4 min read
access
Standing access is the quiet risk
Most access in most companies is permanent, and most of it is never used. Time-bound access changes the default from always on to off, and makes offboarding a non-event.
30 Sept 2026 · 3 min read
cost
Finding cloud waste you can prove
Cloud waste is rarely one big mistake. It is a long list of small things nobody owns. How to find them, how to check each one before you delete it, and how to keep the list short.
30 Sept 2026 · 3 min read
See what you run, and what it costs.
Free plan, no card needed.