skunxicat
Disposable Cloud Proxies in One Command
How terraform-aws-ec2-proxy gives you a fresh IP address with a single terraform apply -- and why you'd want one.
READ MORE →Cloudless Systems
Terraform modules, shell Lambda runtimes, event pipelines — and articles on building with them.
Latest from the Log
skunxicat
Building a Trust Layer: Ingestion-Time Enrichment for Web Traffic
Joining CloudFront logs with JA4 fingerprints at ingestion time to classify every request — verified bots, spoofed crawlers, suspicious scrapers — before it reaches the dashboard.
READ MORE → skunxicat
Building a JA4 Fingerprint Pipeline on AWS
How to capture TLS fingerprints at the CloudFront edge, route them through a serverless pipeline, and query them in Athena — using a CloudFront Function, a bash Lambda, SNS, Firehose, and S3.
READ MORE →Why Cloudless Systems
- Cloudless infra patterns — minimal Terraform modules (REST API, website) instead of heavy frameworks.
- Shell runtime focus — articles + OSS backed by benchmarks, showing where shell fits and where it doesn’t (runtime layer benchmarks).
- Predictable, debuggable tooling — curl, jq, http-cli, Make, Terraform.
- Analytics pipelines — S3, Glue, Athena with SQS→Firehose ingestion.
- Writing and experiments on cloudless systems and cloudless infra.
Featured Repos
Deploy a Go-based custom runtime once as a shared layer, ship pure shell scripts as Lambda functions. Sub-20ms cold starts on arm64.
Terraform Lambda Layer arm64
- lambda-shell-layers — jq, http-cli, yq, htmlq, uuid
- Architecture & benchmarks
SQS → Lambda → Firehose → OpenSearch data pipeline, with SNS topic integration for event ingestion.
Firehose OpenSearch SQS
- terraform-aws-analytics-topic — SNS topic for events
- sqs-firehose-bridge — Lambda image for SQS→Firehose
Terraform Modules
Shell & Serverless
- terraform-aws-lambda-shell-runtime-layer — Shell runtime layer for AWS Lambda
- terraform-aws-lambda-function — Minimal Lambda function with zip packaging for provided.al2023
- terraform-aws-lambda-layer — Lambda layers with flexible packaging options
- terraform-aws-lambda-runtime — ECR + SSM for custom Lambda runtimes
Data & Analytics
- terraform-aws-analytics-pipeline — SQS → Lambda → Firehose → OpenSearch
- terraform-aws-analytics-topic — SNS topic with publisher permissions for the pipeline
- terraform-aws-restapi-sns-proxy — API Gateway to SNS proxy with rate limiting
Observability
- terraform-aws-ecs-tempo — Grafana Tempo on ECS Fargate with S3 backend and Cloud Map
Web & API
- terraform-aws-website — CloudFront + S3 + SSL + Route53 from a domain name
- terraform-aws-rest-api — API Gateway with usage plans and API keys
- terraform-aws-ses-email-forwarder — SES email receiving and forwarding
"When you can't control the system, control your interface to it."