Latest posts
Latest posts
Running the ARGLabs apps on EKS instead of ECS: effort, cost, monitoring and verdict
What would change for arglabs-workload, the status page and Dependency-Track if they left ECS Fargate for an EKS cluster: the cluster's repository, the cost on EC2, Fargate and Auto Mode, the sidecars, and the monitoring arglabs-tfmod-ecs-app delivers today. Short answer: do not migrate.
How should repository variables and secrets get onto containers ?
A Bitbucket variable named ENV_NAME reaches the container as the plain variable NAME; one named SECRET_NAME is stored in Secrets Manager and injected as NAME. The whole chain on arglabs-workload, with real output from dev, and why it means adding or removing a variable never touches Terraform, …
Arglabs, by Claude
Everything the 31 ARGLabs repositories build, why the platform is ECS in each team’s own account, what it costs, and how it measures against AWS best practices. Written by Claude Code from the repositories on 2026-09-27.
The BigBang process
Every team at ARGLabs needs its own AWS accounts, and they all need to look the same: the same access controls, the same network baseline, the same security guardrails. Doing that by hand, account after account, environment after environment, is how drift and mistakes creep in. BigBang is the answer …
TFMOD: BigBang IAM
Creating a BigBang member account is only half the job. Once the account exists, something has to deploy applications into it without handing out account-wide admin rights. This Terraform module owns the IAM side of every BigBang-generated account: it is meant to be the single place where all …
002 – Shared network account
The Shared Network account is owned by the Cloud Team and exists to do one thing well: provide shared connectivity that the rest of the ARGLabs organization can consume. Instead of every account building and maintaining its own network, this account builds the baseline once and shares it through AWS …
ARGLabs Highlights
Discover what ARGLabs has to offer: a modern, cloud-native platform built to simplify infrastructure management, accelerate deployments, and bring AI-powered operations to your team.
ARGLabs References
Public resources ARGLabs Website ARGLabs Bitbucket Project Terms and Definitions ARGLabs name: Its named after my name (Andre “Ramoni” Guimaraes) and “Labs”, that stands for “Do not reproduce it exactly like this in production. If you need help, pay me a pizza.”.
ARGLabs Index, RoadMap and ChangeLog
App Team ☐ Team accounts ☐ First team app Cloud Engineering Team ☐ Team accounts ☐ Team service: VPN Shared accounts ☐ Shared network account ☐ Shared monitoring account Terraform Modules and main projects ☐ AWS Account Creation ☐ IAM ☐ AWS Config ☐ BigBang project Deployment definitions ☐ …
001 – Main account first pipeline
The Main Account is the root of the ARGLabs AWS Organization, but it is intentionally minimal. It does not run any workloads. Its only job is to host the pieces that have to live at the very top of the tree: the organization structure, the identity provider for everyone who logs into AWS, and the …
000 – Main account pre-requisites
We aim to do everything as code in ARGLabs, but at the very first moment we cannot even run pipelines. There is no IAM role for Bitbucket to assume, no S3 bucket to store Terraform state, and no policies to authorize anything. This project breaks that chicken-and-egg cycle by provisioning the …
ARGLabs is Being Rewritten Again
After years of iterating on the same foundation, ARGLabs is getting a full rewrite and this time, AI is at the center of it. With the advancements in AI tooling, I can now move faster, build smarter, and dedicate more focused time to what actually matters: shipping meaningful infrastructure work. …
Cloud as an Operating System
The cloud isn’t a better datacenter: it’s the operating system that runs your applications. Here’s why that distinction changes everything about how you build teams and architecture.
ECS or EKS: Native cloud containers or kubernetes ?
There’s a lot of articles comparing the two and telling you about their differences and when you should go with one or another. I’ll make it slightly different. I’ll tell you what I want to accomplish considering technology, culture, operations, costs, support and compliance and what is my choice to …
ARGLabs fictitious company
So you are a newcomer on our company. Congratulations ! Our DevOps culture We like the DevOps “You build it, you run it.” culture. It means that our Cloud Engineers (call them DevOps, SRE, infrastructure guys or whatever you want), will help you with the basic cloud infrastructure on which your …
Why a .church domain ?
Because churches are places of faith. I love IaC. I really do IaC. I think I understood what we can really do with IaC. But I’ve seen many “good practices” out there that I thought aren’t good enough, many written by famous people and others even by the tool suppliers themselves. In fact, everyone …
What is ARGLabs ?
Take ARGLabs as a fictional company where we’ll be running some applications like a real company And with “real company” we mean that we’ll bring up everything needed to run our applications. Every tech company “just” need to “run their applications”. By design, no specific tools are needed as long …