
In today’s digital world, information is one of the most valuable assets an organization owns. From customer data to financial records, sensitive information flows constantly through systems that store, process, and transmit it. Protecting this information isn’t optional—it’s essential. This is where **information security** comes in.


## What is Information Security?


Information security refers to the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. When organizations fail to secure their data, the consequences can be severe financial loss, reputational damage, legal penalties, and loss of customer trust.


To better understand how to safeguard information, it's important to explore the key elements that form the foundation of information security.


## The Five Core Elements of Information Security


Information security is built on five fundamental principles that work together to keep data safe and reliable:


### 1. Confidentiality


Confidentiality ensures that sensitive information is only accessible to authorized individuals. Without proper safeguards, data can be exposed through cyberattacks or careless handling.


**Common controls include:**

- Data encryption
- Access restrictions
- Secure data disposal methods

### 2. Integrity


Integrity focuses on maintaining the accuracy and trustworthiness of data. It ensures that information is not altered or tampered with by unauthorized users.


**Key measures include:**

- Checksums and hash functions
- Access control mechanisms
- Version control systems

### 3. Availability


Availability guarantees that systems and data are accessible when needed by authorized users. Downtime or system failures can disrupt business operations significantly.


**Typical strategies include:**

- Redundant systems and backups
- Antivirus and anti-malware solutions
- Protection against DDoS attacks

### 4. Authenticity


Authenticity ensures that users, systems, and data are genuine. It verifies identities and confirms that communications are legitimate.


**Examples of controls:**

- Biometrics (fingerprints, facial recognition)
- Smart cards
- Digital certificates

### 5. Non-Repudiation


Non-repudiation prevents individuals from denying their actions, such as sending a message or approving a transaction. It provides proof of origin and delivery.


**Common tools:**

- Digital signatures
- Audit logs
- Secure transaction records

## Why Information Security Matters


In an age where cyber threats are constantly evolving, organizations must stay vigilant. A single breach can expose confidential data and lead to long-term consequences. By implementing strong information security practices, businesses can:

- Protect sensitive data
- Maintain customer trust
- Ensure regulatory compliance
- Prevent financial losses

## Final Thoughts


Information security is not just a technical requirement, it’s a business necessity. By understanding and applying the principles of confidentiality, integrity, availability, authenticity, and non-repudiation, organizations can build a strong defense against threats and ensure the safety of their most valuable asset: information.


As cyber risks continue to grow, investing in robust security measures is no longer optional—it’s a strategic priority.



Understanding Information Security: Protecting What Matters Most


As modern applications increasingly adopt event-driven architectures, the line between application logic and database behavior has blurred. Supabase, built on PostgreSQL, provides developers with powerful tools to implement reactive workflows directly at the database layer through triggers. In this post, we’ll explore how to design, implement, and maintain database triggers in Supabase, providing real-world use cases, technical insights, and best practices.


![image.png](https://prod-files-secure.s3.us-west-2.amazonaws.com/655b33b3-36d2-8121-828f-0003e6db7868/b3f66456-e82f-4af7-8a4a-515de04c872f/image.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=ASIAZI2LB466Z545NWVT%2F20260605%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20260605T135250Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEKX%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJHMEUCICyjU7oyIRSZ1kfrTSpTyc10Bi915iYiSEJJY1tIibsxAiEAwUO9ld51IlPZM%2FhNKpkVfYPf5e0nqNXAuObk9p7y%2BjAq%2FwMIbhAAGgw2Mzc0MjMxODM4MDUiDAeigdYZUK6MpB6ZdyrcAw4%2FIvmAdvYg4EzHtN02O7Ab00slw%2BW7%2Fh5asvQVFNWBljJBJahH5FwiZB2WBMsi07Zoo0rfEikDcwP2lQvQDF7ry5Owtv2qi10SNV6fh2m9fp%2BZVVvqbiqyHKVl%2FIqpORx1kY1Y3ZcV8Mbek7iXIelGVCt86mUPQ7Fdrhajo8kbki4OHwj0RjThd55BeLbPrBRzYXkWnsQ6wi%2F1zH5bHoi7D3ZR9E6FONYcwCKvpZpbF3GtDTgUjO3JT%2BWQ4NWRNNae0yM5W1FGjiwIzUmRk%2BESCp67jKFdLoEs99EBC5zXvss%2BxgBWXbSqNEYwZr2y8xi7e8mfL0w3SwOTe3ZUhZMr8Bos41ab2dx0KkxByZ0Cqj3TsHbROV6T73zKRfRuWiQYljwEG9oadRSGSgGypPB%2B%2FPbLqkDD7DwoAPqdpl1fe0fyB5FvyNAMnWgnB1OiONKgM%2Fk1dDGaOLitBHDzLHT4RPnrxVGmcSX5YazoWhyGSuO1RCyF5DfWIgkPcOGBoTkPzNZqL%2FRVSu8FXdpK03wlQ7RBIMoI0yjEkbfUds%2BEQU4fFKLqwaYOIO%2FdmFR4N3WgIDb3fMwjApR%2FjCTLxCEfKA4coiiSoVDmIJBk6cyGQDg50MD9qofgH1iOMOmTi9EGOqUB%2BwqEtn9Dy6KgA0UTFbrwOeTjZMLcSTEzzSLWN67Lwse6EneqzMbyNkiv42bMmk5wtHesSBymFGhz8CHd1zNH2UEdXk4nHaVZXjCr0v%2BYFQQSiL%2F%2Bt7Bs%2B7w0C8e4IyJ6JWe9DYEdZeyUtpGHs6ttm8G0IlwoL5ZBsNJrZvyG56d%2FgFbSWzyxK3Kohj85b47BqLJsjmqHQSoqvM%2FktETbC5p2g2BE&X-Amz-Signature=1285c9934419361a220ebd44da8b5b07ea7e5456c777f3d3ee2add55c02f7303&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject)


## Understanding Database Triggers in Supabase


At its core, a trigger is a procedural code snippet that automatically executes in response to specific changes in a table `INSERT`, `UPDATE`, `DELETE`, or even `TRUNCATE`. In Supabase, triggers are implemented using PostgreSQL's native capabilities, giving developers access to a robust, reliable mechanism for reactive behavior.


Triggers are particularly useful in scenarios such as:

- Enforcing complex business rules that span multiple tables
- Maintaining audit logs without polluting application logic
- Synchronizing data between tables or external services
- Supporting real-time notifications via Supabase's Real-time engine

By moving certain logic to the database, we reduce round trips between the application and the database, improving performance and consistency.


## Anatomy of a PostgreSQL Trigger


A trigger in PostgreSQL requires two components:

1. **Trigger Function (Procedure):** The actual code executed when the trigger fires.
2. **Trigger Definition:** Specifies the timing (`BEFORE` or `AFTER`) and the event (`INSERT`, `UPDATE`, `DELETE`) that fires the function.

For example, consider a scenario where we want to automatically update a `last_modified` timestamp whenever a row in the `projects` table is updated:


```sql
-- Trigger function
CREATE OR REPLACE FUNCTION update_last_modified()
RETURNS TRIGGER AS $$
BEGIN
  NEW.last_modified = NOW();
  RETURN NEW;
END;
$$ LANGUAGE plpgsql;

-- Trigger definition
CREATE TRIGGER set_last_modified
BEFORE UPDATE ON projects
FOR EACH ROW
EXECUTE FUNCTION update_last_modified();
```


Here, the `update_last_modified` function ensures consistency across updates without requiring application-side enforcement.


## Use Case: Audit Logging


Maintaining an audit trail is a common requirement. Let’s track every change to the `users` table:


```sql
-- Audit log table
CREATE TABLE user_audit_log (
    id BIGSERIAL PRIMARY KEY,
    user_id UUID,
    operation TEXT,
    changed_data JSONB,
    changed_at TIMESTAMPTZ DEFAULT NOW()
);

-- Trigger function
CREATE OR REPLACE FUNCTION log_user_changes()
RETURNS TRIGGER AS $$
BEGIN
  INSERT INTO user_audit_log(user_id, operation, changed_data)
  VALUES (
    NEW.id,
    TG_OP,
    to_jsonb(NEW)
  );
  RETURN NEW;
END;
$$ LANGUAGE plpgsql;

-- Trigger
CREATE TRIGGER user_audit_trigger
AFTER INSERT OR UPDATE OR DELETE ON users
FOR EACH ROW
EXECUTE FUNCTION log_user_changes();
```


With this approach:

- `TG_OP` automatically provides the operation type (`INSERT`, `UPDATE`, `DELETE`).
- `to_jsonb(NEW)` captures the full state of the row after modification.

This ensures every change is traceable while remaining fully automated in the database layer.


## Integrating Triggers with Supabase Real-time


Supabase provides a Real-time engine that allows applications to subscribe to database changes. When combined with triggers, this enables robust, event-driven workflows.


For example, suppose we want to notify an admin whenever a new project is created:


```sql
CREATE OR REPLACE FUNCTION notify_new_project()
RETURNS TRIGGER AS $$
BEGIN
  PERFORM pg_notify('projects_channel', row_to_json(NEW)::text);
  RETURN NEW;
END;
$$ LANGUAGE plpgsql;

CREATE TRIGGER project_created
AFTER INSERT ON projects
FOR EACH ROW
EXECUTE FUNCTION notify_new_project();
```


On the frontend, you can listen for these notifications:


```javascript
import { createClient } from '@supabase/supabase-js';

const supabase = createClient(SUPABASE_URL, SUPABASE_KEY);

supabase
  .channel('projects_channel')
  .on('postgres_changes', { event: 'INSERT', schema: 'public', table: 'projects' }, (payload) => {
    console.log('New project created:', payload);
  })
  .subscribe();
```


This pattern enables real-time dashboards, automatic email notifications, or triggers that update caches without adding extra complexity to your application code.


## Best Practices for Triggers in Supabase

1. **Prefer** **`AFTER`** **triggers for notifications and external side effects**

    `BEFORE` triggers are better suited for validation or data normalization.

2. **Minimize complex logic in triggers**

    Triggers should be fast; avoid heavy computations or network calls inside the function.

3. **Use** **`FOR EACH ROW`** **vs** **`FOR EACH STATEMENT`** **wisely**

    `FOR EACH ROW` triggers fire for every affected row. `FOR EACH STATEMENT` is suitable for bulk operations like logging counts or batch metrics.

4. **Monitor and debug**

    Use `RAISE NOTICE` or temporary logging tables to inspect trigger behavior during development.

5. **Maintain idempotency**

    Ensure that re-running triggers due to retries or replication does not create inconsistent states.

6. **Version your triggers**

    Use `CREATE OR REPLACE FUNCTION` carefully, and consider migrations to manage trigger changes in a team environment.


## Debugging Triggers


Triggers can silently fail if not implemented correctly. Techniques for debugging include:

- **RAISE statements:** Print debug info directly in PostgreSQL logs:

```sql
RAISE NOTICE 'Trigger fired on ID: %', NEW.id;
```

- **Temporary logging tables:** Capture payloads for analysis:

```sql
INSERT INTO trigger_debug_log(payload) VALUES (row_to_json(NEW));
```

- **Test in isolation:** Execute the trigger function directly with sample data using `SELECT function_name(ROW(...))` before attaching it to production tables.

## Conclusion


Database triggers in Supabase are a powerful tool for building reactive, event-driven applications without over-complicating your backend code. By leveraging PostgreSQL’s rich trigger system, developers can enforce business logic, maintain audit trails, and enable real-time notifications efficiently and reliably.


When used judiciously, triggers reduce repetitive logic in your application, improve consistency, and empower developers to design more scalable, maintainable systems. As Supabase continues to evolve, combining triggers with its Real-time engine and edge functions opens exciting possibilities for truly serverless, event-driven architectures.



Creating and Using Database Triggers in Supabase


On Monday, October 20, 2025, Amazon Web Services (AWS) experienced a significant outage that disrupted numerous major websites and applications worldwide. The incident primarily affected the US-EAST-1 region in Northern Virginia, leading to widespread service degradation across various platforms.


![70fdd33d-8eab-436a-935d-ec6baf932af5.png](https://prod-files-secure.s3.us-west-2.amazonaws.com/655b33b3-36d2-8121-828f-0003e6db7868/ce8963a1-9007-4fb5-a21d-cb5a388677fd/70fdd33d-8eab-436a-935d-ec6baf932af5.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=ASIAZI2LB4662U6XRKZZ%2F20260605%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20260605T135250Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEKX%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJHMEUCIQCRWP6FATrIFla9vu44JGkgewh09jjOiLgstAVjWl4kTwIgAhypsnVyrkVmocYYGG0p6zA6j0pXBOeETPbjwrtVPgkq%2FwMIbhAAGgw2Mzc0MjMxODM4MDUiDLzug5EcwwCioZgPtyrcA%2BQidRnpPZ0zY%2BBNauUiKumW9ntoMliU93y0qMSCKTTmbyr0SxplN4%2Fqr0dOieWHbADOVu%2BSij2RjltHmXGh4W64E6Cc36ogiQcu7tNB9gOV197jzgtySEhA9QBGL%2BjPynndP0h43W6NMfWPyn7SR98sQHhW1HwlJ8aHh78tI6jQFTgFpk7lFwd90Hurocx0plFsi4A%2FWwl3FKx5HWjmQsUAW8lm33CmAtYfrac%2FyUgIZptZaJfZzSvEh5GVZ%2F3LHyltHE8r2myj6sas%2B%2Ffpd8oU2KuJK6qf8vBCgRQonPxRnwpY1tD75RRGTqQLougqPB2RYgIhQ6qqYUw0Ji42jez3ehx8%2FK4i%2FmmScjJs1YZLRF0I8PtzkIJ01YDyPKLWIP3ls61xn9s8Q3AAuRZeZWuAE1xATZtH7XMRgHI2I6DzUHTdXWwfopwRKIlnW3im9oJcr6lQEjctni46fsI%2FhaSXXEY6fH5wAEgOPeGtakEZXBAIbAkz6szpI2Y75excej8yA5y5BVKJXUMoibTiFrg%2B6ixfBrfT7xmE%2FWeHmpgcFt6JEFlpGO0a7tZacVAWF9q%2Ffa2yonT3NIiH29Fxel9rSqqZdi8P7Mh4KKplfm0ch7Wk2IBQ2kFUujCfMNWTi9EGOqUB2vrlQ3geY%2FDRLJKSkln3UTudoxh2SB64dgA6o9ekabQZvChrDW8zBwQq9bBJy7cjLY8dQiI5EmtzZ6DMYcINYJF%2BnkkGxY9p6cfe0g5tFYzEeIBEJ3Q1jbNTgYqcaLlif5sTX6BNJIzTJrub1sx7pex15PjPsMxjgjOPqFr9X%2FlHVCO9uy5LKqRTB3xwxnSlU8g1mfjc1aTJzmDQ4r3TcTHhyQjk&X-Amz-Signature=3e8a8afe7715b7f3ec36be1fb184b394ac2de55ca1219c697c1a3b601829916c&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject)


## Affected Services and Platforms


The AWS outage impacted a diverse range of services, including:

- **Social Media & Communication**: Snapchat, Signal, Perplexity, and X (formerly Twitter)
- **Gaming**: Fortnite, Roblox, Clash Royale, and Clash of Clans
- **Financial Services**: Coinbase, Robinhood, Venmo, Chime, and Capital One
- **Streaming & Entertainment**: Amazon Prime Video, Hulu, Disney+, and the McDonald's app
- **Productivity & Cloud Tools**: Canva, Duolingo, Airtable, and the Epic Games Store
- **Smart Home Devices**: Amazon Alexa and Ring

According to DownDetector, over 13,000 user reports were logged, indicating widespread issues across these platforms.


## What the AWS Outage Revealed About Cloud Vulnerabilities


The AWS outage of 2025 exposed deep-rooted cloud computing vulnerabilities that many organizations overlook in pursuit of scalability and convenience. While cloud infrastructure enables global reach and agility, its centralized architecture often introduces a critical single point of failure. When one major region or service falters, the ripple effects can disrupt thousands of dependent systems worldwide.

- **Regional dependence**: Most disruptions occurred in the US-EAST-1 AWS region, highlighting the dangers of geographic concentration.
- **Cross-industry impact**: Finance, gaming, social media, streaming, and IoT platforms all experienced simultaneous outages.
- **Hidden infrastructure risks**: Even resilient systems can be affected by DNS resolution failures, API latencies, and network bottlenecks.

## Why Organizations Rely on a Single Cloud Provider


Despite risks, many companies stick to one cloud provider for several reasons:

1. **Operational simplicity:** Easier management and fewer integration challenges.
2. **Cost efficiency:** Economies of scale and provider-specific discounts.
3. **Integrated ecosystem:** Access to services like AWS Lambda, Azure Functions, or Google BigQuery.
4. **Faster deployment:** Reduced complexity leads to quicker time-to-market.

However, the convenience comes at a cost: vulnerability to catastrophic outages.


## The True Cost of Cloud Outages


Cloud outages aren’t just technical inconveniences they have real financial and operational consequences:

- **Revenue loss:** Downtime for e-commerce or fintech platforms results in lost transactions.
- **Reputation damage:** User trust erodes, leading to customer churn.
- **Operational disruption:** Emergency IT interventions and overtime costs rise sharply.
- **Regulatory risks:** Financial and healthcare sectors may face compliance penalties.

For large enterprises, the financial impact of a hyper-scale outage can reach tens of millions per hour, making reliance on a single cloud provider a serious business risk.


## **Forging Resilience: Advanced Solutions to Prevent Single-Cloud Failure**


Enterprises can adopt resilient cloud strategies to mitigate risk:

1. **Multi-Cloud Strategy:** Distributes workloads across two or more public cloud providers (e.g., AWS, Azure, GCP) to prevent dependence on a single vendor and minimize the impact of a single-provider outage.
2. **Hybrid Cloud Approach:** Blends public cloud services with private, on-premises infrastructure. Critical workloads stay private, while scalable workloads use the public cloud, balancing cost and control.
3. **Active Failover and Replication:** Ensures real-time data replication across different regions or clouds. Automatic failover redirects traffic seamlessly to healthy replicas upon an outage.
4. **Chaos Engineering:** Proactively simulates failures in a controlled environment to identify weak points, test incident response, and continuously improve system resilience _before_ real-world disruptions.
5. **Edge Computing:** Deploys critical services closer to end-users (at the network "edge"), reducing reliance on centralized cloud regions. This improves latency and provides localized resilience.

## Building Resilient Cloud Infrastructure


The 2025 AWS outage underscores the dangers of relying on a single cloud provider. While hyperscale platforms offer convenience and innovation, true resilience requires diversification. Adopting multi-cloud and hybrid strategies supported by advanced failover, chaos engineering, and edge computing is now a strategic necessity. Organizations that build resilient cloud architectures will better protect operations, revenue, and customer trust in an increasingly interconnected digital world.


![b2a51211-7bb1-4a45-81bb-f69e5a765731.png](https://prod-files-secure.s3.us-west-2.amazonaws.com/655b33b3-36d2-8121-828f-0003e6db7868/0088afb8-3904-4fe6-a6bd-42ca5e75eecd/b2a51211-7bb1-4a45-81bb-f69e5a765731.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=ASIAZI2LB4662U6XRKZZ%2F20260605%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20260605T135250Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEKX%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJHMEUCIQCRWP6FATrIFla9vu44JGkgewh09jjOiLgstAVjWl4kTwIgAhypsnVyrkVmocYYGG0p6zA6j0pXBOeETPbjwrtVPgkq%2FwMIbhAAGgw2Mzc0MjMxODM4MDUiDLzug5EcwwCioZgPtyrcA%2BQidRnpPZ0zY%2BBNauUiKumW9ntoMliU93y0qMSCKTTmbyr0SxplN4%2Fqr0dOieWHbADOVu%2BSij2RjltHmXGh4W64E6Cc36ogiQcu7tNB9gOV197jzgtySEhA9QBGL%2BjPynndP0h43W6NMfWPyn7SR98sQHhW1HwlJ8aHh78tI6jQFTgFpk7lFwd90Hurocx0plFsi4A%2FWwl3FKx5HWjmQsUAW8lm33CmAtYfrac%2FyUgIZptZaJfZzSvEh5GVZ%2F3LHyltHE8r2myj6sas%2B%2Ffpd8oU2KuJK6qf8vBCgRQonPxRnwpY1tD75RRGTqQLougqPB2RYgIhQ6qqYUw0Ji42jez3ehx8%2FK4i%2FmmScjJs1YZLRF0I8PtzkIJ01YDyPKLWIP3ls61xn9s8Q3AAuRZeZWuAE1xATZtH7XMRgHI2I6DzUHTdXWwfopwRKIlnW3im9oJcr6lQEjctni46fsI%2FhaSXXEY6fH5wAEgOPeGtakEZXBAIbAkz6szpI2Y75excej8yA5y5BVKJXUMoibTiFrg%2B6ixfBrfT7xmE%2FWeHmpgcFt6JEFlpGO0a7tZacVAWF9q%2Ffa2yonT3NIiH29Fxel9rSqqZdi8P7Mh4KKplfm0ch7Wk2IBQ2kFUujCfMNWTi9EGOqUB2vrlQ3geY%2FDRLJKSkln3UTudoxh2SB64dgA6o9ekabQZvChrDW8zBwQq9bBJy7cjLY8dQiI5EmtzZ6DMYcINYJF%2BnkkGxY9p6cfe0g5tFYzEeIBEJ3Q1jbNTgYqcaLlif5sTX6BNJIzTJrub1sx7pex15PjPsMxjgjOPqFr9X%2FlHVCO9uy5LKqRTB3xwxnSlU8g1mfjc1aTJzmDQ4r3TcTHhyQjk&X-Amz-Signature=e1a3e1fe3842b086c268fb770b1f357166a0e54e9c506d2f928949e463a95037&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject)


The accompanying diagram illustrates a Multi-Cloud / Hybrid-Cloud Architecture enabling seamless integration and data flow across private, public, and edge environments, unified through a global network and management plane built on common services.


## 1. Private Cloud / On-Premises Data Center


This represents the enterprise's locally hosted infrastructure.

- **Components:** Includes Virtual Machines, Virtual Managers, Private Storage, multiple Databases, Servers, and Enterprise Applications.
- **Role:** It hosts sensitive or legacy applications and data that may have specific security, compliance, or performance requirements best met by an on-site environment.

## 2. Public Clouds (A and B)


These are external cloud provider services, showcasing a multi-cloud strategy.

- **Public Cloud A (e.g., AWS):** Features core services like Compute (EC2), Storage (S3), Database (RDS), and Analytics.
- **Public Cloud B (Azure / GPC):** Includes services like Virtual Machines, Blob Storage, SQL Database, Machine Learning Services, and other Machine Services.
- **Role:** These clouds offer scalability, elasticity, and specialized services, allowing the organization to run different workloads in the provider best suited for the task or to ensure redundancy.

## 3. Global Network / Interconnect


This is the conduit enabling communication and data transfer between the disparate clouds.

- **Components:** Utilizes technologies like VPN / Direct Connect Interconnect for secure, high-speed links, and an API Gateway to manage and secure access to services exposed by the clouds.
- **Role:** Ensures reliable, secure, and low-latency data and application traffic flow between the Private Cloud and the Public Clouds, effectively creating a single, extended infrastructure.

## 4. Unified Management Plane and Common Services


These layers ensure consistent operation, governance, and security across all environments.


### Unified Management Plane


This is a single control point for operating the entire architecture.

- **Functions:** Includes tools for Monitoring (tracking performance and health), Orchestration (automating deployment and management of resources), and Security (enforcing policies across clouds).

### Common Services


These foundational services are essential for a cohesive environment.

- **Components:** Includes Identity & Access Management (IAM) for consistent authentication and authorization across all clouds, and Data Encryption to secure data both in transit (via the Global Network) and at rest (in storage/databases).
- **Role:** Provides a single, unified experience for users and administrators, ensuring security and compliance policies are applied consistently.

The hybrid architecture ensures seamless integration by allowing the Unified Management Plane and Common Services to manage the movement of data and workloads between the Private Cloud and Public Clouds. This design enables the enterprise to leverage multiple cloud platforms while retaining control over critical on-premises resources.


The 2025 AWS outage was a strategic warning. Investing in multi-cloud resilience, automation, and distributed architectures is key for enterprises to not just survive, but thrive through future disruptions.



AWS Outage 2025: Cloud Risks and Resilience Lessons


In the world of Node.js development, it’s common to juggle multiple versions of Node across different projects. Using a single global Node installation can lead to version conflicts, dependency issues, or surprises in production. That’s where **NVM (Node Version Manager)** shines: it enables you to install, switch, and manage multiple Node.js versions side by side on the same machine.



![https___dev-to-uploads.s3.amazonaws.com_uploads_articles_tns0q1sn1n531uk9e8mt.webp](https://prod-files-secure.s3.us-west-2.amazonaws.com/655b33b3-36d2-8121-828f-0003e6db7868/5b95a022-33d5-40c3-869f-ff4584d211f9/https___dev-to-uploads.s3.amazonaws.com_uploads_articles_tns0q1sn1n531uk9e8mt.webp?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=ASIAZI2LB466U74RJO3S%2F20260605%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20260605T135251Z&X-Amz-Expires=3600&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEKX%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJHMEUCIGX%2FT%2FbqttYocY9MHm3KCeUlffhfYzgKFJoooZJ1T%2FfPAiEAoZ%2BWLmH41yg81TbLmZwwSb%2FoYO2fM8LjEAJnSD7Qp9Iq%2FwMIbhAAGgw2Mzc0MjMxODM4MDUiDJz4f4OvkqPfDFbUGircA4dZsaofn7ZnDRSw9Nna8%2BzWEKjVigC4PBlsijXfWiRnIH0F9h%2BC45lZaI3U1iZ0avgt1O68%2BcscUwiwnQCxAIBvuC1KWJiNaiOx6YuLIhwuBHYaH7vts1qlzdhmeEpriC8ZUTfZzZ%2FF6Y6nXQpc1FhfGnGeOeIqQ8I8NKFYGA6FssmFVGtR3e0xuVEE0pChCMUEdOmQErLsXkWNjoPDGbw7scU7Nt%2BBoou37GnwfWC0Q2ShTEv8N71%2BXkBqF2rl1UENO52QF3SmAUojIQK15FUsXQ%2FTtTopNArdPInbBd4iYTMOj86MiJGW6l5y8yLJzyDrw3lcHOrgynMSagrF%2Bi0LOfa8xLlr%2BvSkafMl0ntpNyWm83qOj4X5snQ4tO%2FbORUdy5lt97jKgS%2BCYbLsZvMimvcHHntMvgqWuHRTxtsSkc%2B2OTmzHa6lHts%2F%2B8%2FfFTNrk6%2F883tSbEviZXtpcGGFNx3O9zcS7201zsyP667yVYNrqqe6MkLONAS5q0%2BRvl4xz6oICTJZKX38%2BK3LQ3LPsYJ1dMgleTZGQxn3PYjJxk16pUUOYeLp2KCn1xJN71MPOyeEZYJZYhhlcNEI%2BfT55YOIfJJjcz0TKhjKf1x5MR2F%2FeYr%2BVLybu%2ByMNWTi9EGOqUBPR%2BqU%2BIjwUnnsDdIv0iSB%2FH7R5brivuObRpEsYxhTfRRIJpmoiBl9TJvAP8aBBkgKieUs2YWzMR%2BZQzTuXugqc%2Baz%2BTKLT7vRVvWE2LQMd%2BJeHtWnfRDC9wK7lAzJElGP%2Bpt1ejwez%2B11NQhcYsbRpAGWjObI%2BTv5nqMT92PcR73HsYl4MjiLJdO%2FEQvKKhsy6TwWvXXZgEKCMlcqdNCsfO8Hz2W&X-Amz-Signature=06ea7683b4b64a584677ef28f2e9fa1844395678b1177637387ae5d0c84834ed&X-Amz-SignedHeaders=host&x-amz-checksum-mode=ENABLED&x-id=GetObject)


In this guide, I’ll walk you through installing NVM on **Ubuntu 24.04**, show you how to use it effectively, and offer best practices to keep your setup stable. Let’s get started.


## **Why Use NVM?**

1. **Switch Node.js versions seamlessly**: Perfect for projects that require specific Node versions.
2. **Isolated environments**: Run multiple Node.js versions without interference between them.
3. **User-friendly workflow**: Install, remove, and manage Node.js versions with simple command-line operations.

## **Step 1: Update Your System**


It’s crucial to update your system first, to ensure dependencies and package sources are current:


```bash
sudo apt update
sudo apt upgrade -y
```


Also, consider rebooting if you haven’t done that in a while, especially if kernel or low-level packages were upgraded.


## **Step 2: Install Necessary Tools**


You’ll need tools to download files and compile modules when required:


```bash
sudo apt install -y curl build-essential libssl-dev
```

- `curl` → For fetching remote scripts.
- `build-essential` → For compiling C/C++ add-ons (npm modules that need binaries).
- `libssl-dev` → Some Node versions/modules need SSL libraries.

## **Step 3: Download & Install NVM**


Here we fetch the official installer and run it:


```bash
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/vX.Y.Z/install.sh | bash
```

- Replace `vX.Y.Z` with the **latest stable NVM version**.
- This script creates a `.nvm` directory in your home (~/.nvm), and updates your shell config (like `~/.bashrc` or `~/.zshrc`) to load NVM automatically.

## **Step 4: Activating NVM in Your Shell**


After installation, you need to enable it:


```bash
# Either in current session:
export NVM_DIR="$HOME/.nvm"
[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"

# Then, add these lines into ~/.bashrc or ~/.zshrc so they are loaded on login.
```


To apply changes right away:


```bash
source ~/.bashrc    # or source ~/.zshrc
```


## **Step 5: Confirming Installation**


Check NVM is available:


```bash
nvm --version
```


If this returns something like `0.40.x` (or whatever current), you’re good.


## **Step 6: Using NVM to Handle Node.js Versions**


With NVM ready, you’ll want to do things like:


### **Install the latest stable version**


```bash
nvm install node
```


### **Install the current LTS version**


```bash
nvm install --lts
```


### **Install a specific version**


```bash
nvm install 18.17.0
```


### **Switch to a version for current session**


```bash
nvm use 18.17.0
```


### **Set a default version, so new shells use it automatically**


```bash
nvm alias default 18.17.0
```


### **List versions you have installed**


```bash
nvm ls
```


### **See all Node.js versions available to install remotely**


```bash
nvm ls-remote
```


## **Step 7: Workflow Tips & Tricks**


These are the little practices that make your life easier:

- **Use a** **`.nvmrc`** **file:** In a project folder, put a file named `.nvmrc` with a version (e.g. `18.17.0`). Then you and your team can use `nvm use` inside that project to automatically pick the right version.
- **Global packages per version:** If you install global npm packages under one Node version, they won’t automatically be available under another. Use `-reinstall-packages-from=<old_version>` when installing a new version to copy over global packages.
- **Avoid mixing apt-installed Node with NVM:** If you had Node.js from Ubuntu’s package manager before, consider removing it (`sudo apt remove nodejs`) to avoid conflicts.

## **Step 8: Common Issues & Fixes**


Here are issues you might encounter, plus how to fix them:


| Problem                                        | Symptoms                                                      | Fix                                                                                                               |
| ---------------------------------------------- | ------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |
| `nvm: command not found` after install         | The shell doesn’t load NVM automatically                      | Ensure lines added to `.bash` / `.zshrc` by installer are present; then `source` the file or open a new terminal. |
| Old Node still used by system                  | `node -v` returns old version even after `nvm use`            | Remove or disable the system Node; ensure your `PATH` is set so NVM’s bin comes first.                            |
| Permission errors when installing npm packages | Errors related to permissions when installing global packages | Don’t use `sudo` with npm when using NVM; global installs happen in user’s home directory.                        |


## **Conclusion**


Setting up NVM on Ubuntu 24.04 gives you control, flexibility, and peace of mind when working with Node.js. Once it’s in place, switching versions becomes second nature, which is especially helpful when maintaining multiple projects, testing compatibility, or just staying up to date with Node.js.



Managing Multiple Node.js Versions with NVM on Ubuntu 24.04: A Developer’s Guide


If you’ve ever found yourself copy-pasting data between tools, writing yet another one-off script to connect APIs, or juggling a dozen SaaS dashboards every day, you know the pain of repetitive work. That’s exactly where **n8n** comes in a tool I’ve been exploring recently, and honestly, it has quickly become one of my favorites for automation.


## So, What Exactly is n8n?


n8n (short for “node”) is an **open-source workflow automation platform**. Think of it as a more developer-friendly version of Zapier or Integromat. It lets you connect different services, APIs, and databases, and build workflows that run automatically, without needing to reinvent the wheel each time.


The best part? You can host it yourself, customize it however you want, and you’re not locked into someone else’s SaaS pricing model. For developers and teams who care about data ownership and flexibility, this is a huge plus.


## Why I Like Working with n8n


When I started tinkering with n8n, a few things immediately stood out:

- **It’s open-source and self-hostable.** You can run it locally, on a server, or even in Docker/Kubernetes. This gives you full control.
- **It comes with 350+ integrations.** Google Sheets, Slack, GitHub, AWS, databases - you name it.
- **The editor is visual, but not limiting.** You can drag-and-drop nodes, but you can also write custom JavaScript if you need more control.
- **Event-driven automation.** Workflows don’t just run on a schedule - they can trigger when something happens (like a new file uploaded, or a webhook received).

For me, it strikes the right balance between **low-code convenience** and **developer power**.


## Real-Life Use Cases


Here are a few scenarios where n8n shines:

- **Marketing automation**: A new lead fills out a form → n8n saves it to a CRM → sends a Slack notification → triggers a welcome email.
- **DevOps monitoring**: When a server goes down → log the issue → create a GitHub ticket → ping the on-call engineer.
- **Data pipelines**: Fetch data from an API → transform it → insert it into PostgreSQL or BigQuery.
- **E-commerce workflows**: Automate order tracking, payments, and shipping updates.

Basically, if you can describe a process, you can probably build it in n8n.


## Getting Started (It’s Easier Than You Think)


Setting up n8n is surprisingly straightforward. You can install it globally with npm:


```bash
npm install n8n -g
n8n start
```


Or, if you’re like me and prefer containers:


```bash
docker run -it --rm \
  -p 5678:5678 \
  -v ~/.n8n:/home/node/.n8n \
  n8nio/n8n
```


Then just head over to `http://localhost:5678` in your browser, and you’ll find a clean visual editor waiting for you. From there, it’s drag-and-drop nodes, configure credentials, and connect the dots.


## Why n8n is Worth a Try


There are plenty of automation tools out there, but what sets n8n apart is the **balance of simplicity and flexibility**. It’s approachable for non-developers, but at the same time, it doesn’t box developers in. You can go as deep as you want with scripting, custom nodes, and API integrations.


For me, it’s a tool that reduces repetitive work and lets me focus on more interesting problems. If you’re curious about automation, I’d definitely recommend giving it a try.



Automating Workflows with n8n: Why I Use It and Why You Might Too


Infrastructure as Code (IaC) has transformed the way we build and manage cloud environments. Instead of clicking through a cloud console, we define infrastructure in code and let automation handle the rest.


One of the most important concepts to understand in **Terraform** is its lifecycle:


**Write → Init → Plan → Apply → Destroy**


In this blog, we’ll break down each stage clearly with examples so you can confidently use Terraform in real-world projects.


# What is Terraform?


Terraform is an Infrastructure as Code (IaC) tool created by HashiCorp. It allows you to define, provision, and manage infrastructure using declarative configuration files written in HCL (HashiCorp Configuration Language).


Terraform works with cloud providers like:

- Amazon Web Services
- Microsoft Azure
- Google Cloud Platform

Now let’s understand how the lifecycle works.


# Step 1: Write (Define Infrastructure)


Everything starts with writing configuration files.


Terraform configurations are written in `.tf` files using HCL.


Example:


```plain text
provider "aws" {
  region = "us-east-1"
}

resource "aws_instance" "web" {
  ami           = "ami-123456"
  instance_type = "t2.micro"
}
```


Here, we are declaring:

- A provider (AWS)
- A resource (EC2 instance)

This defines the **desired state** of infrastructure.


Important:


You are not writing steps. You are describing the final state.


# Step 2: Init (`terraform init`)


Before Terraform can create anything, it must initialize the working directory.


Run:


```plain text
terraform init
```


### What happens during init?

- Downloads required provider plugins
- Initializes backend (state configuration)
- Prepares modules
- Sets up the working directory

Think of `init` as: “Prepare Terraform to work with this project.”


You only need to run this once per project (or after adding new providers/modules).


# Step 3: Plan (`terraform plan`)


Now comes the most important safety step.


Run:


```plain text
terraform plan
```


Terraform compares:

- **Desired state** (your `.tf` files)
- **Current state** (terraform.tfstate or real infrastructure)

It then generates an **execution plan** showing what will change.


### Plan Output Symbols


Example output:


```plain text
+ aws_instance.web
```


Meaning: Terraform will create a new EC2 instance.


Important:

- `plan` does NOT change anything.
- It is a preview step.
- Always review the plan before applying.

# Step 4: Apply (`terraform apply`)


Once you are satisfied with the plan, run:


```plain text
terraform apply
```


Terraform will:

- Create resources
- Modify resources
- Delete resources
- Handle dependencies automatically
- Update the state file

After confirmation, Terraform calls the provider APIs and provisions infrastructure.


At this stage:

- Infrastructure is live
- State file is updated
- Desired state = Actual state

# Step 5: State Management


Terraform keeps track of infrastructure using a **state file**:


```plain text
terraform.tfstate
```


The state file:

- Maps configuration to real-world resources
- Stores resource IDs
- Tracks dependencies
- Enables drift detection
- Ensures idempotency

Without state, Terraform wouldn’t know what it created.


In team environments, state is usually stored remotely (e.g., Terraform Cloud or S3 backend) to prevent conflicts.


# Step 6: Destroy (`terraform destroy`)


When you no longer need the infrastructure, run:


```plain text
terraform destroy
```


Terraform will:

- Generate a destroy plan
- Delete all managed resources
- Clean up infrastructure

Common use cases:

- Cleaning up test environments
- Cost control
- Temporary demo environments

Warning:


Always double-check before running destroy in production.


# The Complete Terraform Lifecycle


Here’s the simplified workflow:


```plain text
Write → Init → Plan → Apply → Manage → Destroy
```


Or in command form:


```plain text
terraform init
terraform plan
terraform apply
terraform destroy
```


# Why This Lifecycle Matters


Understanding the lifecycle helps you:

- Avoid accidental infrastructure changes
- Detect errors early
- Prevent configuration drift
- Work safely in teams
- Integrate Terraform into CI/CD pipelines
- Follow DevOps best practices

Each step exists for a reason:

- **Init** prepares
- **Plan** previews
- **Apply** executes
- **Destroy** cleans up

Skipping steps can lead to serious production issues.


# Real-World Example Flow


Imagine deploying a web application:

1. Write configuration for: VPC, Subnets, EC2, Load Balancer
2. Run `terraform init`
3. Run `terraform plan`
4. Review changes
5. Run `terraform apply`
6. Application goes live
7. After demo → `terraform destroy`

The lifecycle makes Terraform safe and predictable for managing infrastructure. By following these steps, teams can automate deployments, prevent errors, and maintain consistent cloud environments with confidence.



Technical Blog

Understanding Information Security: Protecting What Matters Most