I'm Oliver.Cloud Architect& Specialist.
I think out loud about cloud architecture. About Landing Zones that hold thousands of accounts, security that convinces auditors, and running AWS at enterprise scale: what breaks, and how to prevent it.
What I've worked on.
DTAG Group-Wide AWS Landing Zone
2,000 accounts. 40 organizations. −20% cloud costs.
MagentaGaming Cloud Platform
AAA cloud gaming from zero to Gamescom launch in 5 months.
AWS Security & C5-Attestierung
500+ security controls. C5 moderate. ISO 27001 ready.
What I write about.
AWS Landing Zone: Multi-Account Strategy for Enterprise Environments
A well-designed multi-account strategy is the foundation of any scalable AWS environment. In this article I explain how AWS Control Tower and AWS Organizations work together and which design decisions truly matter when building a Landing Zone.
Terraform State Management with S3 and DynamoDB: The Production-Ready Approach
Local Terraform state is an anti-pattern. Anyone working in a team or using CI/CD needs a remote backend. S3 + DynamoDB is the proven combination on AWS — here is the complete configuration.
AWS Cost Optimisation: Quick Wins That Work Immediately
Before introducing complex FinOps processes, there are a handful of measures that immediately reduce costs in any AWS account. Here are the five quick wins I implement first in every project.
What this site is about.
Multi-account architectures that scale.
Why governance and developer experience don't have to conflict, and how Control Tower makes both work.
Security architectures that convince auditors.
CIS benchmarks, ISO 27001, C5: thought of as code rather than PDF, and what that means in practice.
Platforms that launch fast and scale cleanly.
Lambda, Fargate, Step Functions, API Gateway: where the limits are and where they're not.
Cloud costs you understand and control.
Reserved Instances, Savings Plans, tagging discipline: why most teams fail at tagging.
Write to me about AWS, architecture, or anything.
This site is not a service offering. I work full-time at Tallence as an AWS architect. For a technical exchange, a review, a talk, or a community conversation, get in touch.