Founder Engineering Field Notes https://psbrau-tech.github.io/founder-engineering-field-notes/ 2026-09-24T00:15:42+00:00 A Successful Docker Build Does Not Mean You Built a Runnable Release https://psbrau-tech.github.io/founder-engineering-field-notes/articles/container-startup-health-before-push/ 2026-09-23T00:00:00+00:00 CI should start and health-check the exact container image before publishing it, because a successful image build does not prove the packaged process can run. CloudFormation Generated Role Names Can Break Least-Privilege IAM Twice https://psbrau-tech.github.io/founder-engineering-field-notes/articles/cloudformation-generated-role-names-and-rollback/ 2026-09-23T00:00:00+00:00 When CloudFormation generates IAM role names, least-privilege policies must match the physical role identity on both the forward and rollback paths. CloudFormation Least Privilege Can Fail Outside the Service You Think You Are Deploying https://psbrau-tech.github.io/founder-engineering-field-notes/articles/cloudformation-provider-side-api-dependencies/ 2026-09-23T00:00:00+00:00 CloudFormation resource operations can depend on adjacent-service APIs, so least-privilege fixes should follow the exact denied action rather than the template's obvious service boundary. GitHub Actions OIDC AccessDenied May Be a Trust-Policy Problem, Not a Permission-Policy Problem https://psbrau-tech.github.io/founder-engineering-field-notes/articles/github-actions-oidc-trust-policy-diagnosis/ 2026-09-23T00:00:00+00:00 When GitHub Actions cannot assume an AWS role, diagnose OIDC trust claims before widening the role's service permissions.