Skip to main content

Projects Blog About Contact

© 2026 Van Philip Panugan. All rights reserved.

Blog

Written between Builds

Thoughts on DevOps, cloud architecture, software engineering, and everything in between.

FeaturedCybersecurity

JWT, Authentication vs Authorization, and RBAC: Securing a Food Factory API

What building a food manufacturing inventory system taught me about the difference between authentication and authorization, how JWT works at the byte level, and how RBAC turns roles into 403s.

Aug 20, 202621 min read

FeaturedCybersecurity

jailCTF 2026: Escaping the Jail, Pythonically

Escape characters, restricted built-ins, and arbitrary code execution

Jul 28, 20267 min read

16 of 16 articles

REST Semantics & HTTP Status Codes — Explained With Real Code

A practical post about REST semantics and HTTP status codes for backend developers: what REST really is, how to design URLs, when to use each HTTP verb, and how to pick the right status code every time — with real Go code from a warehouse management API.

Aug 28, 202621 min read

RESTHTTPAPIGoBackendStatus Codes

JWT, Authentication vs Authorization, and RBAC: Securing a Food Factory API

What building a food manufacturing inventory system taught me about the difference between authentication and authorization, how JWT works at the byte level, and how RBAC turns roles into 403s.

Aug 20, 202621 min read

JWTAuthenticationAuthorizationRBACGoSecurity

Understanding the Importance of Infrastructure as Code(IaC)

Learning AWS made me hit a wall: manual CLI setup was slow, error-prone, and painful to tear down. Here's how IaC fixes that — and how Terraform, AI, and MCP are changing how we write infrastructure.

Aug 17, 20269 min read

IaCTerraformAWSDevOpsAI

AWS S3 HomeLab Part 10: CloudFront + HTTPS + Custom Domain

Take your S3 static site from "it works on HTTP" to production-grade: HTTPS everywhere, global CDN caching, private origin bucket, and your own domain name.

Aug 10, 202615 min read

AWSS3CloudFrontHomeLab

AWS S3 HomeLab Part 9: S3 Replication

Automatically copy every object to another bucket — same region or across the globe. For disaster recovery, compliance, and keeping data close to users.

Aug 10, 202611 min read

AWS S3 HomeLab Part 8: Event Notifications

Share a private object with anyone, for a limited time, without giving them AWS credentials. It's a cryptographically signed, expiring link — no IAM user required.

Aug 6, 202610 min read

AWS S3 HomeLab Part 7: Event Notifications

S3 can tell other services when something happens. Your backup just finished. Your user just uploaded a photo. Act on it.

Aug 4, 202610 min read

AWS S3 HomeLab Part 6: Static Website Hosting on S3

Project #1: Deploy a real website to S3, from scratch, under 10 minutes.

Jul 30, 20269 min read

AWS S3 HomeLab Part 5: Cross-Origin Resource Sharing

Your static site loads JS from S3. The browser blocks it. CORS is the handshake that says “this is OK”.

Jul 29, 202610 min read

jailCTF 2026: Escaping the Jail, Pythonically

Escape characters, restricted built-ins, and arbitrary code execution

Jul 28, 20267 min read

CTFPyJailCyberSecurity

AWS S3 HomeLab Part 4: Server-Side Encryption

Your backup data is encrypted at rest. How do you know?

Jul 27, 202611 min read

AWS S3 HomeLab Part 3: Versioning & Lifecycle Policies

Every backup strategy needs two things: protection from mistakes, and protection from runaway costs.

Jul 26, 202611 min read

AWS S3 HomeLab Part 2: IAM and Bucket Policy

Creating buckets, Uploading Files, and Deleting them.

Jul 25, 202610 min read

AWS S3 HomeLab Part 1: Fundamentals & CLI Refresher

Creating buckets, Uploading Files, and Deleting them.

Jul 24, 202613 min read

From Perimeter to Identity: Key Takeaways from the BusinessWorld Cybersecurity Summit

A reflection on BusinessWorld Cybersecurity Summit

Jul 22, 20264 min read

Hello, World! Welcome to My Cloud & Cybersecurity Journey

Building my blog website and reflection on passing CLF-02

Jul 17, 20263 min read

AWSCybersecurityCloud ComputingDevOps