Cloudless Systems

Terraform modules, shell Lambda runtimes, event pipelines — and articles on building with them.

Read the Log Shell Runtime Layer Analytics Pipeline GitHub →

Latest from the Log

skunxicat Jul 12, 2026

Building a JA4 Fingerprint Pipeline on AWS

How to capture TLS fingerprints at the CloudFront edge, route them through a serverless pipeline, and query them in Athena — using a CloudFront Function, a bash Lambda, SNS, Firehose, and S3.

skunxicat Jul 12, 2026

Beyond the User-Agent: Catching Spoofed Bots with JA4 and ASN

User-Agent strings are trivially forged. TLS handshakes are not. How JA4 fingerprinting combined with ASN classification exposes distributed scraper clusters that look exactly like real browsers.

skunxicat Jun 11, 2026

A Terraform Module for Shell Functions on Lambda

A Terraform module that turns shell scripts into Lambda functions with sub-20ms cold starts. Deploy the runtime once as a layer, then ship pure shell scripts as function packages.

View all posts →

Why Cloudless Systems

Cloudless infra patterns — minimal Terraform modules (REST API, website) instead of heavy frameworks.
Shell runtime focus — articles + OSS backed by benchmarks, showing where shell fits and where it doesn’t (runtime layer benchmarks).
Predictable, debuggable tooling — curl, jq, http-cli, Make, Terraform.
Analytics pipelines — S3, Glue, Athena with SQS→Firehose ingestion.
Writing and experiments on cloudless systems and cloudless infra.

Featured Repos

terraform-aws-lambda-shell-runtime-layer

Deploy a Go-based custom runtime once as a shared layer, ship pure shell scripts as Lambda functions. Sub-20ms cold starts on arm64.

Terraform Lambda Layer arm64

lambda-shell-layers — jq, http-cli, yq, htmlq, uuid
Architecture & benchmarks

terraform-aws-analytics-pipeline

SQS → Lambda → Firehose → OpenSearch data pipeline, with SNS topic integration for event ingestion.

Firehose OpenSearch SQS

terraform-aws-analytics-topic — SNS topic for events
sqs-firehose-bridge — Lambda image for SQS→Firehose

Terraform Modules

Shell & Serverless

terraform-aws-lambda-shell-runtime-layer — Shell runtime layer for AWS Lambda
terraform-aws-lambda-function — Minimal Lambda function with zip packaging for provided.al2023
terraform-aws-lambda-layer — Lambda layers with flexible packaging options
terraform-aws-lambda-runtime — ECR + SSM for custom Lambda runtimes

Data & Analytics

terraform-aws-analytics-pipeline — SQS → Lambda → Firehose → OpenSearch
terraform-aws-analytics-topic — SNS topic with publisher permissions for the pipeline
terraform-aws-restapi-sns-proxy — API Gateway to SNS proxy with rate limiting

Observability

terraform-aws-ecs-tempo — Grafana Tempo on ECS Fargate with S3 backend and Cloud Map

Web & API

terraform-aws-website — CloudFront + S3 + SSL + Route53 from a domain name
terraform-aws-rest-api — API Gateway with usage plans and API keys
terraform-aws-ses-email-forwarder — SES email receiving and forwarding

"When you can't control the system, control your interface to it."

Ship a Bash API Explore Analytics Pipeline Learn the Patterns →