Read the code, watch the state.

Each trace takes one field note and plays it step by step: the command or setting on one side, the part of the system it changes on the other.

• 8 steps

  A private bucket behind a load balancer

  The bucket stays private. The load balancer signs every request with a service account’s HMAC key, so only it can read the objects.

  Step through it →
• 8 steps

  A site-to-site VPN between Google Cloud and AWS

  An HA VPN gateway on Google Cloud, a virtual private gateway on AWS, and BGP between them, so each VPC learns the other’s routes.

  Step through it →
• 5 steps

  One CloudFront domain, two S3 buckets

  Requests under /maps/ go to a second bucket, and a Lambda@Edge function strips the prefix so the object keys stay clean.

  Step through it →