For CloudQuery
77 posts I wrote for CloudQuery, first published on their blog
No posts found matching your search.
- · 10 min read · Cloud One of my 10 most-read posts · Written for CloudQueryAWS IAM Identity Center (Formerly AWS SSO): The Complete 2026 Guide
AWS IAM Identity Center replaced AWS SSO in 2022. Learn how to set it up, configure permission sets, use the AWS CLI, and audit access with CloudQuery.
- · 8 min read · Cloud One of my 10 most-read posts · Written for CloudQueryCWPP vs CNAPP: What Cloud Security Teams Need to Know in 2026
CWPP protects cloud workloads at runtime. CNAPP unifies CWPP, CSPM, and CIEM into one platform. Learn when each makes sense and how they compare.
- · 9 min read · Cloud · Written for CloudQueryWhat Is Attack Surface Management? A Technical Guide for Cloud Teams
Attack surface management finds exposed cloud assets before attackers do. Learn how ASM differs from CSPM and vulnerability management, with SQL examples.
- · 10 min read · Cloud · Written for CloudQueryWhat Is Cloud Governance? The Complete Guide for Platform Engineering Teams
The policies and controls that keep cloud infrastructure secure, compliant, and cost-efficient. Learn the 6 pillars of cloud governance and how to implement them.
- · 11 min read · Cloud · Written for CloudQueryAWS Pinpoint Is Being Deprecated: How to Assess Your Migration Scope
AWS Pinpoint reaches end of support October 2026. Query your Pinpoint usage across all accounts to find what needs migrating before the deadline.
- · 13 min read · Cloud · Written for CloudQueryCloudQuery Sync Performance: A Practical Troubleshooting Guide
Why CloudQuery syncs slow down (especially after a plugin upgrade), how to diagnose expensive tables, and the CLI command that replaces the tables wildcard with an explicit list.
- · 8 min read · Cloud · Written for CloudQueryDid Gemini Just Make Your Google API Keys a Security Risk?
Google API keys safe to embed publicly now authenticate to Gemini. Here's how to audit your GCP projects with CloudQuery to find the exposure.
- · 10 min read · Cloud · Written for CloudQueryCloud Operations Metrics and ROI for Leadership
Track the five metric categories that prove cloud operations ROI to leadership. Includes a one-page scorecard template with before-and-after targets.
- · 11 min read · Cloud · Written for CloudQueryA 90-Day Roadmap to Cloud Operations Maturity
A week-by-week plan from first inventory sync to automated governance. Three phases, clear milestones, and metrics to prove ROI to leadership.
- · 11 min read · AI · Written for CloudQueryWhat Makes a Cloud Data Layer AI-Ready
AI for cloud operations is only as good as the data behind it. Learn what makes a cloud data layer AI-ready and which use cases it enables first.
- · 13 min read · Cloud · Written for CloudQueryMapping SOC 2 and CIS Controls to SQL for Continuous Compliance
Map SOC 2 and CIS controls to SQL queries that run daily. Replace quarterly audit scrambles with continuous compliance evidence generation.
- · 12 min read · Cloud · Written for CloudQueryWriting Cloud Security Posture Checks in SQL
Write cloud security checks in SQL instead of proprietary policy languages. See practical queries for public buckets, MFA, encryption, and more.
- · 10 min read · Cloud · Written for CloudQueryBeyond Deploy-Time Checks: Continuous Cloud Governance
Deploy-time policy checks miss console changes, configuration drift, and external changes. Continuous governance catches what CI/CD pipelines cannot.
- · 11 min read · Cloud · Written for CloudQueryVisibility-First Cloud Governance: Why You Should Start with Data
Most governance models fail because they enforce rules about infrastructure they cannot see. The Visibility-First model starts with a queryable foundation.
- · 11 min read · Cloud · Written for CloudQueryCalculating the True Cost of Cloud Operations Toil
Engineering toil from fragmented cloud visibility costs $47K-$90K per engineer yearly. Use our calculator to measure the real cost at your organization.
- · 10 min read · Cloud · Written for CloudQueryWhy Cloud Compliance Audit Prep Still Takes Weeks
Most teams spend weeks preparing for audits that should take hours. Learn why compliance scrambles persist and how queryable data eliminates them.
- · 11 min read · Cloud · Written for CloudQueryThe Hidden Cost of Cloud Security Alert Investigation
Security teams spend more time correlating information than fixing problems. See how a single alert costs 45 minutes of manual investigation.
- · 10 min read · Cloud · Written for CloudQueryThe Cloud Operations Gap in Multi-Cloud Environments
89% of organizations use multiple clouds but only 8% are cloud-mature. Learn what the Cloud Operations Gap is and why it costs teams hours every week.
- · 11 min read · Cloud · Written for CloudQueryCloud Operations Maturity Model: A Six-Dimension Self-Assessment
Score your cloud operations maturity across six dimensions. Only 8% of orgs qualify as highly cloud-mature - here is where most teams actually fall.
- · 14 min read · Cloud One of my 10 most-read posts · Written for CloudQueryHow to Detect Public Databases Across AWS, Azure, and GCP with CloudQuery Policies
Detect publicly accessible databases across AWS RDS, Azure, and GCP Cloud SQL. Step-by-step CloudQuery Policies tutorial with copy-paste ClickHouse SQL.
- · 13 min read · Cloud · Written for CloudQueryAWS Lambda Python 3.9 End-of-Support: Find and Upgrade Every Affected Function
AWS Lambda Python 3.9 security patches stopped Dec 15, 2025. Find every affected function across all accounts with SQL queries and upgrade to 3.12 or 3.13.
- · 5 min read · Cloud One of my 10 most-read posts · Written for CloudQuerySteampipe vs CloudQuery: Architecture and Trade-offs
Steampipe queries cloud APIs live from the terminal. CloudQuery syncs cloud configuration into a persistent inventory. Here is when to use each.
- · 10 min read · Cloud · Written for CloudQueryOne Year Into DORA: What Actually Worked for ICT Asset Registers
One year into DORA enforcement, 46% of institutions still struggle with asset registers. Learn what worked, common pitfalls, and how to prepare for stricter 2026 enforcement.
- · 6 min read · Cloud · Written for CloudQueryCodeBreach Vulnerability: How to Detect If Your AWS CodeBuild Projects Are Affected
Detect CodeBreach vulnerability in your AWS CodeBuild webhook filters. SQL queries to find unanchored ACTOR_ACCOUNT_ID patterns and missing security controls.
- · 6 min read · Cloud · Written for CloudQueryAWS + Google Cloud Networking Partnership: Connectivity Solved, Visibility Still Broken
AWS and Google Cloud partnered on multicloud networking, provisioning connections in minutes. But network pipes were the easy problem. Unified visibility across different cloud APIs remains unsolved.
- · 4 min read · Cloud · Written for CloudQueryAudit CODEOWNERS Against Okta to Find Orphaned Code Ownership with SQL
Find CODEOWNERS entries for employees who left the company by joining Git file content with your identity provider data. No scripts, just SQL.
- · 4 min read · Cloud · Written for CloudQueryFind Commits by Departed Employees Across All Repos with SQL
Identify code changes made by employees who left your organization. Cross-reference git commit authors against your identity provider to find commits needing review.
- · 3 min read · Cloud · Written for CloudQueryFind Every repo Missing a LICENSE File with One SQL Query
Identify repositories without LICENSE files across your organization using SQL. No cloning required, no scripts to maintain - just query your git file data.
- · 7 min read · Cloud · Written for CloudQueryFind EOL Docker Images, Missing Licenses, and Stale CODEOWNERS Across Thousands of repos with SQL
Query your Dockerfiles, CODEOWNERS, and package.json files across all repos with SQL. No cloning, no custom scripts - just SQL queries that find EOL images, missing licenses, and outdated dependencies in seconds.
- · 3 min read · Cloud · Written for CloudQueryQuery Your Dockerfiles with SQL: Find EOL Node 18 Images Across All repos
Node 18 reached end-of-life. Find every Dockerfile using Node 18 base images across your organization with a single SQL query - no cloning repos required.
- · 4 min read · Cloud · Written for CloudQueryTrack React Dependencies Across Your Organization with SQL
Find every package.json using React across all repositories. Query dependency versions, track upgrades, identify outdated packages - all with SQL.
- · 2 min read · Cloud · Written for CloudQueryHow Unicorne Increased Well-Architected Review Capacity by 60% with CloudQuery
How Unicorne used CloudQuery to automate AWS Well-Architected Framework Reviews and build their FinOps SaaS product Stable - cutting engagement time from 50 to 20 hours.
- · 10 min read · Cloud One of my 10 most-read posts · Written for CloudQueryAWS Lambda Node.js 20 End of Life: Upgrade to Node.js 22 Before April 2026
Node.js 20 on AWS Lambda hits EOL April 30, 2026. Find every affected function across all accounts, fix breaking changes, and upgrade with this step-by-step guide.
- · 13 min read · Cloud One of my 10 most-read posts · Written for CloudQuery6 Cloud CMDB Best Practices for Platform Engineers (2026 Guide)
Cloud CMDB best practices for multi-account environments - automated discovery, tiered sync strategies, SQL-based querying, and historical data retention for compliance.
- · 13 min read · Cloud · Written for CloudQueryThe Death of Agent-Based CMDB Discovery
Agent-based CMDB discovery fails in cloud environments with containers, serverless, and managed services. API-driven discovery costs 90% less and works everywhere.
- · 12 min read · Cloud · Written for CloudQueryThe Real-Time Cloud CMDB - Why Ephemeral Infrastructure Killed Traditional Discovery
Traditional CMDBs miss most ephemeral resources because containers live just minutes. Modern cloud CMDBs use tiered sync strategies (15-30 min for critical, hourly for important, daily for baseline). Compare approaches, costs, and learn why ephemeral infrastructure killed traditional discovery.
- · 12 min read · Cloud One of my 10 most-read posts · Written for CloudQueryCloud CMDB vs Traditional CMDB: A 2026 Comparison
Traditional CMDBs fail 70-80% (Gartner 2024) due to agent-based architecture and rigid ITIL data models. Cloud CMDBs use API-based discovery and native schemas. Compare architecture, implementation time, and technical approaches for 2026.
- · 16 min read · Cloud · Written for CloudQueryFive Tips for Getting Maximum Value from a Cloud Asset Inventory
Discover five essential principles for building cloud asset inventories that deliver real business value. Learn how successful organizations transform cloud infrastructure visibility into measurable outcomes through business-focused implementation, cross-functional collaboration, and actionable intelligence.
- · 16 min read · Cloud · Written for CloudQueryHow to Design a Cloud Asset Inventory for AWS
Learn the five essential design principles for building cloud asset inventories that deliver results - freshness, completeness, normalization, queryability, and extensibility. Discover the maturity stages from ad-hoc scripts to optimized systems with predictive analytics and real-time decision making.
- · 12 min read · Cloud · Written for CloudQueryIntroduction to CloudQuery for AWS
Discover how CloudQuery solves cloud visibility fragmentation by providing AI-powered insights across all AWS resources. Learn CloudQuery's architecture, how it transforms multi-source data into unified schemas, and why it's become essential for security monitoring, cost optimization, and compliance automation.
- · 18 min read · Cloud · Written for CloudQueryWhy and When Do You Need a Cloud Asset Inventory?
Discover why and when you need a cloud asset inventory for your AWS environment. Learn how asset inventories solve critical challenges in security governance, cost optimization, and operational excellence - and when organizations should implement them.
- · 23 min read · AI · Written for CloudQueryBuilding Secure AI-Powered Cloud Security: From Data Pipeline to Risk Detection
Learn how AI-powered cloud security reduces investigation time by 55% across AWS, GCP, Azure with our open-source demo.
- · 9 min read · Cloud One of my 10 most-read posts · Written for CloudQueryCloudQuery Performance Benchmark Analysis: 581 GB/Hour Throughput and the Reality of Cloud API Constraints
Performance analysis of CloudQuery across multiple platforms and data sources, achieving 581 GB/hour throughput on consumer grade hardware when processing local data, with detailed analysis of cloud provider API rate limiting impacts.
- · 2 min read · Cloud · Written for CloudQueryIntroducing CloudQuery Insights: Cloud Intelligence That Connects the Dots
CloudQuery Insights monitors your complete asset inventory and surfaces interconnected signals across security, cost, policy, and audit data automatically.
- · 6 min read · AI · Written for CloudQueryProduction AI Data Pipeline Architectures
AI applications need fresh, unified data to succeed. CloudQuery delivers faster data movement from 50+ sources to AI destinations like vector databases and training pipelines - privately on your infrastructure.
- · 8 min read · Cloud One of my 10 most-read posts · Written for CloudQueryWe benchmarked our ETL tool and synced 1 million rows in 2 seconds on a MacBook
We benchmarked our ETL tool and synced 1 million rows in 2 seconds on laptop hardware, which is 68% faster than enterprise platforms. Full methodology and code included.
- · 6 min read · Cloud · Written for CloudQueryWhat is an AWS Cloud Asset Inventory?
What is AWS Cloud Asset Inventory? Learn why it's essential for security and cost optimization, and compare AWS Config, Systems Manager, and CloudQuery.
- · 6 min read · AI · Written for CloudQueryHow We Made Our IDEs Data-Aware with a Go MCP Server
How we built a Go-based MCP server to make AI Assistants data-aware, bridging code and database, which ended up transforming the way we code.
- · 9 min read · AI · Written for CloudQueryWe Built an MCP Server and These Are the Gotchas Nobody Talks About
Lessons we learned from building an MCP server to bridge LLMs with cloud infrastructure databases. What we learned about tool descriptions, naming, context limits, and quirks, and how we fixed them.
- · 5 min read · AI · Written for CloudQueryAI for Analyzing Your Cloud Asset Inventory
CloudQuery's new MCP server lets AI agents directly query your cloud inventory using natural language. Get real dashboards, reports, and analytics from actual infrastructure data across AWS, GCP, Azure, and more.
- · 14 min read · Cloud · Written for CloudQueryHow to Make Your Internal Developer Portal Actually Useful
A fresh asset inventory is the foundation of successful developer portals. Learn how organizations achieve 224% ROI, reduce onboarding by 67%, and save millions through inventory-driven Backstage implementations with real case studies from Spotify, Toyota, and financial services.
- · 8 min read · Cloud · Written for CloudQueryCloud Centers of Excellence (Part 1): Building Effective Cloud Governance Through Strategic Organization
Discover how to build a successful Cloud Center of Excellence (CCOE) to drive cloud governance, security, and innovation across your enterprise. Learn key structures, roles, and strategies in Part 1 of our 5-part implementation series.
- · 7 min read · Cloud · Written for CloudQueryCloud Centers of Excellence (Part 2): Governance, Security, and Compliance in CCOEs
Who actually owns cloud policy? We break down how real CCOEs manage governance, enforce security without compromising velocity, and keep regulators at bay. We share what works and what quietly fails, inside enterprises handling sensitive workloads.
- · 8 min read · Cloud · Written for CloudQueryCloud Centers of Excellence (Part 3): FinOps, Cost Management, and Real-World Case Studies
Cloud costs aren't just a budgeting issue, they're a systems problem. In Part 3, we unpack how mature CCOEs adopt FinOps practices to track every dollar, cut waste by up to 40%, and drive shared accountability across teams. Real examples from banks and enterprises show how this actually plays out.
- · 20 min read · Cloud · Written for CloudQueryCloud Centers of Excellence (Part 4): Implementation Best Practices and Common Pitfalls
Part 4 of the Cloud CoE series: a battle-tested roadmap covering what to build first, what to skip, how to avoid the ivory tower trap, and keeping your CoE alive past year one.
- · 10 min read · Cloud One of my 10 most-read posts · Written for CloudQueryCloud Centers of Excellence (Part 5): The Future of CCOEs and Getting Started
CCOEs aren't going away, they're evolving. Part 5 looks ahead at how CCOEs are shifting. We share what's next, what to build, and how to keep your CCOE adaptable without locking it in the past.
- · 15 min read · Cloud · Web Dev · Written for CloudQueryWhy (and How) We Built Our Own Full Text Search Engine with ClickHouse
How we built a full-text search for CloudQuery using ClickHouse, achieving 10x faster queries without dedicated search engines.
- · 6 min read · Cloud · Written for CloudQueryHow We Accidentally Invented a Cloud Search Language
How we turned our search bar into a domain-specific language using Peggy instead of regex, solving complex parsing challenges for cloud resource queries.
- · 8 min read · Cloud · Web Dev · Written for CloudQueryHow We Handle Billion-Row ClickHouse Inserts With UUID Range Bucketing
How we solved memory explosion issues in ClickHouse when processing billions of rows of cloud configuration data using an Insert-Splitter with UUID-range bucketing technique.
- · 3 min read · Cloud · Written for CloudQueryIntegrate AbuseIPDB Threat Intelligence with CloudQuery
Check your cloud public IPs against AbuseIPDB abuse scores using CloudQuery inventory data and SQL joins. Includes working query examples.
- · 15 min read · Cloud · Written for CloudQueryKubernetes Asset Tracking: Why 70% of Enterprises are Struggling (And How to Fix It)
Learn how to tackle the challenges of managing Kubernetes assets across multiple clouds with the central configuration store pattern. Discover how CloudQuery enables SQL-based querying for efficient governance, security enforcement, and compliance at scale.
- · 3 min read · Cloud · Written for CloudQueryHow to Query ipinfo.io Data with CloudQuery
Enrich your CloudQuery cloud asset inventory with ipinfo.io geolocation, ASN, and privacy detection data using SQL joins. Includes working query examples.
- · 3 min read · Cloud · Written for CloudQueryVisualize & Govern Your Cloud Stack with CloudQuery Reports
CloudQuery Reports delivers actionable insights for multi-cloud security, compliance, and cost optimization with ready-to-use dashboards and SQL queries.
- · 18 min read · Cloud · Web Dev · Written for CloudQuerySix Months with ClickHouse at CloudQuery: The Good, The Bad, and the Unexpected
After six months using ClickHouse as CloudQuery's default backend, here's what we learned about performance, JOIN limits, sorting keys, materialized views, and benchmarking.
- · 10 min read · Cloud · Written for CloudQueryWhat We Learned Querying Cloud Infra for Expired Dependencies
Learn how to easily track and fix end-of-life cloud services across AWS, Azure, and GCP with CloudQuery new End-of-Life (EOL) integration.
- · 4 min read · Cloud · Written for CloudQueryThe Best Way to Keep Your Cloud Inventory Up to Date
Keeping cloud asset data up to date across AWS, GCP, Azure, and Kubernetes has been a challenge until now. CloudQuery Data Pipelines automate syncing, normalizing, and structuring cloud data into a unified format. No more fragile scripts or manual exports. See how it works
- · 9 min read · Cloud · Written for CloudQueryBuilding an AWS Cloud Asset Inventory
Learn how to build a cloud asset inventory in AWS using CloudQuery, PostgreSQL, and Grafana. This guide covers setting up CloudQuery, transforming data with dbt, and visualizing cloud assets for improved security and compliance.
- · 4 min read · Cloud · Written for CloudQueryStop Wasting Time on Cloud UIs and Scripts, and Query Your Cloud Like a Database
CloudQuery SQL Console lets you search your cloud like a database. No more clicking through endless dashboards or writing brittle scripts - just instant answers with SQL.
- · 5 min read · Cloud · Written for CloudQueryHow to Eliminate Blind Spots in Your Cloud Environment
Stop guessing what in your multi-cloud environment. Use CloudQuery asset inventory to see everything, secure everything, and save money doing it.
- · 4 min read · AI · Written for CloudQueryAI, Without Exposing Your Data
Learn how to build AI-powered applications while keeping your sensitive data secure and private on your own infrastructure.
- · 8 min read · Cloud · Written for CloudQueryHow to Build a Cloud Asset Inventory for Azure
Learn how to build an Azure cloud asset inventory with CloudQuery and PostgreSQL. Covers setup, dbt transformations, and visualizing assets for security and compliance.
- · 8 min read · Cloud · Written for CloudQueryGetting Started with Cloud Asset Inventory in 2026
Cloud asset inventory is vital for managing multi-cloud environments, enhancing security, and ensuring compliance. Learn how to build and maintain an effective inventory. Explore best practices, address challenges, and see real-world applications.
- · 3 min read · Cloud · Written for CloudQueryWhat is SOC2 Compliance?
Learn SOC2 compliance essentials: protect data, build trust, and meet regulatory standards with security, availability, integrity, confidentiality, and privacy.
- · 1 min read · Cloud · Written for CloudQueryTempus: Multi-Cloud Asset Inventory Across 80+ AWS Accounts and 1000+ GCP Projects
How Tempus uses CloudQuery on GCP with Terraform, GKE, Cloud SQL, and Grafana to run nightly syncs across 80+ AWS accounts and 1000+ GCP projects for compliance and security.
- · 7 min read · Cloud · Written for CloudQueryBuilding a Multi-Cloud Asset Inventory for Google Cloud Platform (GCP) and AWS with CloudQuery
Learn how to build a unified multi-cloud asset inventory with CloudQuery. This post covers pulling data from AWS and GCP, storing it in PostgreSQL, and querying your cloud assets with ease.
- · 12 min read · Cloud · Written for CloudQueryHow to Build a Multi-Cloud Asset Inventory
Learn how to build a multi-cloud asset inventory (AWS, GCP, Azure) with this step-by-step guide. It covers cloud data collection, transformation, and storage, helping you optimize security, compliance, and cost management in your cloud environments.
- · 9 min read · Cloud · Written for CloudQueryStep-by-Step Guide to Building a Cloud Asset Inventory for GCP
Learn how to build a GCP cloud asset inventory with CloudQuery, PostgreSQL, and dbt. Covers setup, data transformation with dbt models, and querying your cloud resources.
