Tyler Wengerd

Senior Cloud Architect I

"Tenacious"

he/him

Cloud Architect with 10+ years of cloud expertise, both on AWS and GCP. Focused on security, networking, and IaC.

When I'm not at work, you might find me riding my bicycle or playing the ukulele (not simultaneously).

Security
Networking
AWS
GCP

My Certifications

AWS Certified Advanced Networking – Specialty
AWS (last renewed/obtained: Jun 17, 2024)
Expires Jun 17, 2027
AWS Certified Developer – Associate
AWS (last renewed/obtained: Sep 16, 2024)
Expires Sep 16, 2027
AWS Certified DevOps Engineer – Professional
AWS (last renewed/obtained: Sep 16, 2024)
Expires Sep 16, 2027
AWS Certified Security – Specialty
AWS (last renewed/obtained: Apr 15, 2024)
Expires Apr 15, 2027
AWS Certified Solutions Architect - Associate
AWS (last renewed/obtained: Aug 15, 2015)
Expires Jul 13, 2026
AWS Certified Solutions Architect - Professional
AWS (last renewed/obtained: Aug 12, 2017)
Expires Jul 13, 2026
AWS Certified SysOps Administrator - Associate
AWS (last renewed/obtained: Sep 16, 2024)
Expires Sep 16, 2027
AWS Partner: Accreditation (Technical)
AWS (last renewed/obtained: Aug 25, 2025)
Expires Aug 25, 2028
Google Cloud Professional Cloud Architect
Google (last renewed/obtained: Dec 5, 2025)
Expires Dec 5, 2027
Google Cloud Professional Cloud Security Engineer
Google (last renewed/obtained: Sep 26, 2025)
Expires Sep 26, 2027
Hashicorp Certified Terraform Associate
Hashicorp (last renewed/obtained: Feb 21, 2025)
Expires Feb 21, 2027
Hashicorp Certified Terraform Authoring and Operations Professional
Hashicorp (last renewed/obtained: Feb 21, 2025)
Expires Feb 21, 2027

What my customers say

5.0/ 5across 12 reviews customers left for me in the last 90 days

Excellent support from do it

lit-transit.com · Apr 2026

The AWS response made sense to stop the bad actor by locking the account down, but it applied to all users, and we had no way to re-enable trusted users for example to begin recovery, remediation, and forensics. While we hope to not encounter this scenario this way again, it's also true that the AWS response could have made things worse in that we would not have had any options to mitigate a worse breach other than begin to shut down our AWS services to halt an unknown in-progress actor, and generally further lock things down to eventually rebuild, causing undue harm to the business.

going.com · Jun 2025

I wanted to express my sincere appreciation for the exceptional support regarding the 503 errors we encountered. Your thorough investigation and prompt responses provided us with immense peace of mind, clarifying the independent operation of CloudFront's DDoS protection and its ability to block suspicious requests before they reach the WAF. Your detailed explanations were incredibly helpful in understanding the situation, and we are truly grateful for your ongoing vigilance and proactive assistance.

leadtech.com · Jun 2025

1 / 15

What I'm writing

Get my new posts in your inbox →

What I've open-sourced

Browse all my contributions.

Frequently asked
questions

I want to improve my AWS account's security. Where do I start?

AWS has a Top 10 list here that I constantly reference. Beyond that, the list of tools never ends.

Want to learn more? We do security assessments all the time for DoiT customers, and I'd be happy to help you out. We also can automatically generate security insights for you!

I'm used to (AWS/GCP) and I'm trying to learn (GCP/AWS). What are some big differences?

One big difference I had to get used to is how they handle IAM:

- AWS IAM roles are similar to Google Cloud's Service accounts. Google's service accounts and AWS IAM role can both be assigned to resources to give them permissions.
- Google IAM roles are sets of permissions, similar to AWS IAM policies
- If you need external access to AWS from a service, traditionally you created an IAM user with an access key. Google allows you to create keys for service accounts. These days, IAM Roles Anywhere are recommended, instead of IAM users, to allow external service access to AWS.

Some other differences I see are how VPCs are global in GCP vs. regional in AWS, and GCP also can use network tags for firewall rules, as opposed to base CIDRs or security group references in AWS.

I might add a non-network/security answer here eventually. Keep an eye out!

What is a JA4 fingerprint?

Wow, great question. I've written up a blog post about just that topic. Have a look and let me know if you have any questions or suggested improvements!

Terraform? CloudFormation? Something else?

I'm team Terraform (or OpenTofu) 95% of the time.

_{Disagree? That's okay – different strokes for different folks}

Do you like dogs?

I love dogs! (See the GIF FAQ below.) I also love cats. Most animals, really. Snakes and lizards are cool and I enjoy seeing them in the wild and in my yard. Goats seem like a lot of fun, but they need way more space than I have right now. But yeah, uh, dogs! Dogs are great.

What's your favorite GIF?

Got 53 minutes? Check out this episode of DoiT's Cloud Masters podcast:

Time zone not a fit?

I'm on US Eastern time, but sometimes you need someone closer. That's fine, everyone needs to sleep. Here are my esteemed colleagues across nine timezones, so you can find one who works with your schedule.

-12

-11

-10

-9

-8

-7

-6

-5

-4

-3

-2

-1

+10

+11

+12

+13

+14

UTC-8
6 FDEs
AWS Core Services×3AWS AI/ML×2AWS DevOps×2
+1
UTC-7
5 FDEs
Networking×2Security×2AI×1
UTC-6
6 FDEs
AI×1Aurora×1AWS×1
+1
UTC-5
25 FDEs
AWS Core Services×6AWS DevOps×5AWS Security and Identity×5
+20
UTC
10 FDEs
AWS Core Services×3AWS Networking×3AWS×2
+5
UTC+1
21 FDEs
BigQuery×3Security×3AI×2
+16
UTC+2
13 FDEs
AWS Core Services×4AWS Databases×4AWS Networking×4
+8
UTC+8
2 FDEs
Amazon Aurora×1Amazon Bedrock×1Amazon RDS×1
UTC+9
2 FDEs
AWS Core Services×2AWS DevOps×1AWS Networking×1
UTC+10
2 FDEs
AWS Kubernetes×1AWS Serverless×1Google Cloud DevOps×1
UTC+11
4 FDEs
AWS Databases×2AWS×1AWS AI/ML×1

DoiT Cloud Intelligence — by the numbers

Updated May 25, 2026, 4:15 AM

Customer satisfaction

Based on the last 28 days

Median first reply time

Urgent (P1)m
High (P2)m
Normal (P3)m
Low (P4)m

Top engagements by technology

Amazon RDS
Amazon EC2
Amazon Elastic Kubernetes Service (EKS)
Vertex AI platform
Cloud SQL

Completed engagements

All time

Open engagements

As of May 24, 2026

Unassigned requests

As of May 24, 2026

What customers are saying

provided a very detailed and thorough explanation on creating Cloudwatch budget alarm as well as explained further where we exceeded our cost.
Today
as always, support from Chabane was great and to the point, and saved a lot of time discovering alternatives.
Today
As always. A professional and proper investigation from doit's side.
Today
Estoy muy agradecido con la resolución y respuestas por parte de Mikhil, ya que no sólo ha resuelto mi problema si no que me ha dado respuestas a dudas surgidas a raíz de este problema y todo con mucha diligencia y profesionalidad.
Today
As always Avi was quick to respond and helpful.
Today
It's poor we can't see more information about issues within the AWS interface
Today
I was trying to contact AWS about a production issue with their product. I would appreciate is I did not have to chat with doit representative to find out that your have a support channel with AWS you could use. The representative should let me know (or offer) right away to use this channel. (especially since due to our partnership with doit we are not eligible to use AWS business support offers)
Today
very helpful
Today
Thanks for the support! Good and detailed answers!
Today
He was very patience and fully helpful
Today
quick and amazing support thank you so much.
Today
thank you for your help
Today
AWS errors were either non-existent or unhelpful. The DoiT agent, Steve, was very helpful and knowledgeable.
Today
Chabane provides me all needed information in time.
Today
Brian has continued to provide great support
Today
I submitted a request for some BigQuery / Billing support late yesterday and Sayle made an initial response very quickly and we had an exchange to run one test and he was able to narrow down the problem domain successfully. He then engaged with his team and I now have a working solution in place in less than 24 hours. Great Support.
Today
someone in my team has opened a separate ticket for this hence closing it.
Today
Insightful conversation. We addressed all outstanding points and received valuable feedback on the new architecture plan.
Today
Your charity list needs to consist of more organizations that donate to animal welfare and protection of the planet and wildlife from our species destroying it all
Today
The team helped me understand what steps were necessary and walked me through it
Today
provided a very detailed and thorough explanation on creating Cloudwatch budget alarm as well as explained further where we exceeded our cost.
Today
as always, support from Chabane was great and to the point, and saved a lot of time discovering alternatives.
Today
As always. A professional and proper investigation from doit's side.
Today
Estoy muy agradecido con la resolución y respuestas por parte de Mikhil, ya que no sólo ha resuelto mi problema si no que me ha dado respuestas a dudas surgidas a raíz de este problema y todo con mucha diligencia y profesionalidad.
Today
As always Avi was quick to respond and helpful.
Today
It's poor we can't see more information about issues within the AWS interface
Today
I was trying to contact AWS about a production issue with their product. I would appreciate is I did not have to chat with doit representative to find out that your have a support channel with AWS you could use. The representative should let me know (or offer) right away to use this channel. (especially since due to our partnership with doit we are not eligible to use AWS business support offers)
Today
very helpful
Today
Thanks for the support! Good and detailed answers!
Today
He was very patience and fully helpful
Today
quick and amazing support thank you so much.
Today
thank you for your help
Today
AWS errors were either non-existent or unhelpful. The DoiT agent, Steve, was very helpful and knowledgeable.
Today
Chabane provides me all needed information in time.
Today
Brian has continued to provide great support
Today
I submitted a request for some BigQuery / Billing support late yesterday and Sayle made an initial response very quickly and we had an exchange to run one test and he was able to narrow down the problem domain successfully. He then engaged with his team and I now have a working solution in place in less than 24 hours. Great Support.
Today
someone in my team has opened a separate ticket for this hence closing it.
Today
Insightful conversation. We addressed all outstanding points and received valuable feedback on the new architecture plan.
Today
Your charity list needs to consist of more organizations that donate to animal welfare and protection of the planet and wildlife from our species destroying it all
Today
The team helped me understand what steps were necessary and walked me through it
Today

Insights by human experts

Preventable cloud waste

All time

Realized cost savings

All time

Budgets tracked per customer

Avg. $40,691 risk per customer

Anomalies detected per customer

Avg. $56,626 risk per customer

Engagements by cloud provider (90d)

Amazon Web Services
Google Cloud
Azure

Security Insights per customer

As of May 24, 2026

FinOps Insights per customer

As of May 24, 2026

Managed cloud spend (3y)

As of May 24, 2026

Managed commitments

Total value of $4.57B as of May 24, 2026

AWS Certified Advanced Networking – Specialty

AWS Certified Developer – Associate

AWS Certified DevOps Engineer – Professional

AWS Certified Security – Specialty

AWS Certified Solutions Architect - Associate

AWS Certified Solutions Architect - Professional

AWS Certified SysOps Administrator - Associate

AWS Partner: Accreditation (Technical)

Google Cloud Professional Cloud Architect

Google Cloud Professional Cloud Security Engineer

Hashicorp Certified Terraform Associate

Hashicorp Certified Terraform Authoring and Operations Professional

JA3 and JA4 Fingerprints in AWS WAF and Beyond

Sharing Secrets in AWS Parameter Store

enigmango/bigip.space

enigmango/open-yale-courses-rss

Frequently askedquestions

Time zone not a fit?

DoiT Cloud Intelligence — by the numbers

Customer satisfaction

Median first reply time

Top engagements by technology

Completed engagements

Open engagements

Unassigned requests

What customers are saying

Insights by human experts

Preventable cloud waste

Realized cost savings

Budgets tracked per customer

Anomalies detected per customer

Engagements by cloud provider (90d)

Security Insights per customer

FinOps Insights per customer

Managed cloud spend (3y)

Managed commitments

Frequently asked
questions