7 of 12 are Cloud & Infrastructure work, shown first
Self-hosted GPU servers for AI models
request path
- Your appsends a document
- Endpointprivate network · authenticated+9 ms
- GPU containercustom model · L4+380 ms
- ResponseJSON back to the app+12 ms
press send to trace one request
monthly cost · illustrative
Past the break-even point, every extra document on the private GPU is free.
Active Directory administration
example.local · synthetic lab domain
▾ OU=IT
- usrAlex Chen
- pcIT-LT-01
- grpHelpdesk-PasswordReset
▾ OU=Sales
- usr_Sales Templatetemplate
- usrJordan Patel
- pcSAL-LT-07
- grpSales-Staff
▾ OU=Finance
- usrPriya Shah
- usrDana Brown
- pcFIN-DT-03
- grpFinance-Share-RW
▾ OU=Warehouse
- usrSam Kim
- pcWH-PC-02
- grpWarehouse-Staff
▾ OU=Disabled Users
- (empty)
action log · T-1041
- ✓Find the user in Active Directory Users and Computers
PS> Get-ADUser p.shah -Properties LockedOut - ✓Account tab → Unlock account
PS> Unlock-ADAccount p.shah - ✓Reset Password…
PS> Set-ADAccountPassword p.shah -Reset - ✓Tick "User must change password at next logon"
PS> Set-ADUser p.shah -ChangePasswordAtLogon $true
What I told them“You're unlocked. Pick a new password when you sign in.”
User access: Microsoft 365, Entra ID and AWS
Microsoft 365 accounts
I add new users to Microsoft 365.
Microsoft 365 admin
Access by group
Users and groups live in Entra ID; group membership decides what each person can open.
Microsoft Entra ID
One sign-in for every service
Each service validates the same Entra ID identity through Microsoft Graph instead of keeping its own passwords.
Microsoft GraphOAuth 2.0 / OIDC
Least privilege in AWS
Each person or service gets an IAM user with only the permissions it needs.
AWS IAM
Removal in one place
Disable the account once, and access ends everywhere.