security - stage 2 - internet cache and the wayback machine

Cleaning git history removes data from your repo — but not from search engines, the Wayback Machine, or GitHub’s cache. Here is what to check.

April 4, 2026 · Scott LeBlanc

security - stage 1 - cleaning sensitive data out of git history

After a security review flagged AWS identifiers committed to a public repo, we used git-filter-repo to scrub them from all 46 commits — including file content and commit messages.

April 4, 2026 · Scott LeBlanc

economic indicators dashboard

A Canadian mortgage rate decision aid — eight economic indicators translated into plain-English signals.

April 4, 2026 · Scott LeBlanc

security remediation — what we got wrong

A post-launch security review of tacedata.ca uncovered sensitive AWS identifiers committed to a public repository. This is a full account of what was exposed, how it was found, and what it took to fix it.

April 4, 2026 · Scott LeBlanc

site: stage 6: site monitoring with aws cloudwatch

Setting up availability monitoring for tacedata.ca using CloudWatch Synthetics — what it is, what it costs, and how we set it up.

April 3, 2026 · Scott LeBlanc

new digs

Introducing the new tacedata.ca — why I moved from WordPress to a static site on AWS, and what I plan to do with it.

April 3, 2026 · Scott LeBlanc

site: stage 5: cutting over a website

Moving tacedata.ca from Websavers DNS to AWS Route 53 — what the cutover actually involves, and how to do it without taking the site down.

April 3, 2026 · Scott LeBlanc

site: stage 4: building the site itself

Getting the site into a state worth sharing — PaperMod setup, profile home page, content structure, and a few problems solved along the way.

April 3, 2026 · Scott LeBlanc

tacedata.ca — this site

A static portfolio site built with Hugo and deployed to AWS via a fully automated GitHub Actions pipeline.

April 3, 2026 · Scott LeBlanc

site: stage 3: deploying a static site on aws

How we set up S3, CloudFront, and a GitHub Actions deploy pipeline for tacedata.ca — no long-lived credentials, no manual deploys.

April 2, 2026 · Scott LeBlanc