Skip to content
Writing

Data Engineering Blog

Deep dives on building production data pipelines, cloud warehouses and analytics systems: the decisions, trade-offs and numbers behind real engineering work.

Security

How to Mask PII on Ingest Into an S3 Data Lake

Mask PII in an S3 data lake at the ingest boundary: deterministic hashing that keeps joins working, Glue detection, Lake Formation filters, KMS and erasure.

PII MaskingData GovernanceAWS Lake FormationAWS Glue
Security

AWS Shared Responsibility Model: The Practical Blueprint

A concise guide to the AWS Shared Responsibility Model what AWS secures, what you must secure, and practical controls for cloud teams to reduce risk.

AWSSecurityShared ResponsibilityCompliance

Get the next one by email

Occasional write-ups from real AWS data work: what the bill actually did, what broke, and how long it took. No roundups, no thought leadership. Unsubscribe whenever.

Taking on new engagements · Remote worldwide

Have a data, automation or AI decision worth getting right?

Whether that is ongoing technical ownership, one independent read on a problem, or someone to run the project. Let's scope it — I reply within one business day.