Tenant Isolation on AWS: Building a Multi-Tenant Workshop Platform That Doesn’t Leak

A missing tenant filter doesn't throw an error, it returns a 200 with too many rows. This is how to build a multi-tenant workshop management platform on AWS where the isolation boundary sits below your application code: STS session tags feeding IAM conditions, DynamoDB leading keys, scoped S3 prefixes, forced PostgreSQL row-level security, and a control plane that verifies each new tenant is fenced before anyone logs in.

Continue ReadingTenant Isolation on AWS: Building a Multi-Tenant Workshop Platform That Doesn’t Leak

Streaming Shopify Events into AWS Without Losing Orders

Wiring Shopify webhooks into Amazon EventBridge takes an afternoon. Keeping every order is the hard part. A walk through the five failure families that actually bite when streaming Shopify events into AWS: the partner source that silently drops everything, duplicate and out-of-order deliveries, rule patterns that match nothing, targets that fail without a dead-letter queue, and the 64 KB metering rule that quietly inflates the bill.

Continue ReadingStreaming Shopify Events into AWS Without Losing Orders