AWS IAM: From Principal to Decision
Follow one AWS API request through principals, policies, guardrails, temporary role credentials, and cross-account authorization.
Choose a collection, inspect a system, then open its visual reference.
29 visualizations
Follow one AWS API request through principals, policies, guardrails, temporary role credentials, and cross-account authorization.
Follow a human or workload from its starting credentials through IAM Identity Center or STS to a signed request from a temporary role session.
Follow one Linux process as a runtime gives it an isolated view, resource controls, filesystem layers, and a lifecycle.
Start with one application on one computer, then see how AWS replaces failed instances, adds capacity, and updates a running fleet.
Start with one file and a line of saved versions, then add staging, branches, merging, remotes, and undo to the same picture, one idea at a time.
Follow one Deployment from accepted intent through reconciliation, placement, node execution and readiness, then diagnose where the system can stall.
Follow a web app calling an API: start with a Pod, add a Service, then decide how traffic enters and who may connect.
A complete visual Linux tutorial: build durable models of identity, storage, processes, networking, packages, shells, security, and diagnosis.
Follow one HTTPS request from hostname resolution to a server, and see which network layer makes each decision.
Trace telemetry from application instrumentation through the collector pipeline to observability backends.
Explore a living Prometheus monitoring system over the ACME Shop production architecture. Step through scraping, relabeling, TSDB Head and WAL internals, PromQL transformations, Alertmanager routing, and production incident response.
See how RDS uses automated snapshots and transaction logs to maintain a moving window for point-in-time recovery.
Watch SSH establish server trust, build encrypted transport, authenticate a user, and open logical channels.
Follow a request and its reply through VPC routes, gateways, address translation, security groups, and network ACLs.
Use ALB for HTTP-aware routing and NLB for transport protocols or zonal static IPs. See where GWLB and Global Accelerator fit when those are separate requirements.
See how an Elastic Network Interface binds VPC addresses, subnet placement, security, routing, service ownership, and scaling limits into one network identity.
Follow the same gigabytes from one instance in Mumbai to a neighbour, another zone, N. Virginia and the internet, then through the NAT gateways, endpoints and load balancers that add their own charge.
Follow one request from a page on app.b.com to api.a.com and back. See when the browser sends a preflight, when the request reaches the server but the script still can't read the answer, and why the console's CORS error is often hiding a 500, a redirect or a CDN cache. Change the request or the server and watch the outcome move.
Explore where source, dependency, image, signing, policy, and deployment security checks fit in delivery pipelines.
Understand image indexes, platform manifests, emulation, native builders, and cross-platform container delivery.
Search practical workflow syntax, triggers, expressions, matrices, artifacts, caching, secrets, and deployment patterns.
Five districts, one for each first digit, and a sign for every status code you are likely to meet. Choose a sign to see what the server is saying, who acts next, whether to ask again and which box probably wrote it.
Follow a Pod's DNS lookup through resolver search rules, CoreDNS, Kubernetes records, caches, and upstream resolvers.
Follow an external request from GatewayClass and listeners through Route attachment, TLS, cross-namespace trust, and backend selection.
Follow a connection from a stable Service address through EndpointSlices, proxy rules, traffic policy, and a changing set of backend Pods.
Start with one HTTP call to a model. Add the message list, a tool, and a loop, one idea at a time, then see which of those pieces LangChain names for you.
Redraw the loop that calls a model and runs its tools as boxes and arrows over one shared record, then see what that buys: your own routing, saved state, resume after a crash, a pause for approval, specialist agents and a run you can watch.
Walk through authorization flows, PKCE, tokens, identity claims, and the trust boundaries behind modern sign-in.
Follow a Pod from sandbox creation through CNI attachment, address allocation, same-node and cross-node forwarding, cleanup, and diagnosis.
Drag or use arrow keys to pan. Choose a collection to reveal its topics. Select a topic for a summary.
Try a broader term or clear one of the filters.