fourth post in the training tracker series: turning the AI coach spec into a running endpoint, the bugs that only showed up once something real was talking to it, a security gap closed before a second user existed, and a chat UI to finally use the thing.
third post in the training tracker series: migrating the data model from single-user to multi-tenant before the second user exists, and writing the specs for an AI coach before writing a line of its code.
second post in the training tracker series: before adding a single new feature, the working single-user app gets a proper security review. What an audit of a small web app actually looks at, and why shipping something is the start of the job, not the end of it.
first post in the training tracker series: provisioning the AWS infrastructure, designing the data model, and seeding 105 days of plan data into DynamoDB.
A personal habit tracker built around a 15-week run/walk training plan — and a vehicle to learn DynamoDB, Lambda, Cognito, and the Claude API by building something I open every day.
A CISA contractor exposed credentials, config files, and access tokens in a public GitHub repository. I had a smaller incident with a similar pattern — and a very different blast radius — in April.
A billing audit of the tacedata.ca AWS account that found $59/month in infrastructure charges on a site that was supposed to cost nearly nothing — and reduced it to $3.63/month.
A billing audit of the tacedata.ca AWS account — what was accumulating, what was surprising, and how infrastructure that was supposed to cost nothing ended up at $59/month.
Setting up server-side traffic analytics for tacedata.ca — and hitting a hard wall in the CloudFront Free pricing plan that blocks all logging features.
Attempting server-side traffic analytics for tacedata.ca using CloudFront access logs and AWS Athena — and what the CloudFront Free pricing plan actually allows.