How do you give every user their own private server, keep their secrets safe, and update software on all of them without SSHing into each one? A walkthrough of EC2, IAM, UserData, SSM Parameter Store, and SSM Run Command, explained through a real system I shipped.

first post on this blog. more to come.