The full archive
Building in the AI-native era — where cloud meets coding assistants and agentic AI.
SERIES — ONGOING
See all →SECTIONS — BY DOMAIN
SECTION — CLOUD · 30 ENTRIES
CLOUD
08 September 2026 · 3 MIN READ
80% of organizations have adopted AI — only 10% govern it. AWS just published the AI Security Framework: the right controls, at the right layers, at the right phases. An 85-second explainer plus the architect's takeaway: day-1 controls are configuration changes, not architecture changes.
CLOUD
07 September 2026 · 2 MIN READ
76 seconds on the AWS news that actually changes your architecture this week: Claude Fable 5.1 on Bedrock, Amazon Quick GA, Bedrock Knowledge Bases 3LO connectors for SharePoint/Confluence, EC2 AMI instance-type enforcement — plus one industry signal on agentic commerce.
CLOUD
05 September 2026 · 1 MIN READ
68 seconds on the AWS news that actually changes your architecture this week: Lambda SnapStart for container images, AgentCore-generated architecture diagrams, Amazon Linux 2027 preview, CloudFront flat-rate pricing API — plus one industry signal on offensive AI.
CLOUD
05 September 2026 · 2 MIN READ
Public TLS certificate validity is collapsing — 200 days today, 100 in 2027, 47 by 2029. A 90-second field note on migrating a certificate fleet to ACM: the easy 90%, the two traps (vendor CA allowlists, off-AWS endpoints), and the pattern that avoids a scheduled outage.
CLOUD
05 September 2026 · 4 MIN READ
AWS extended Lambda SnapStart to container image functions — up to 10 GB, sub-second resume, nearly all commercial Regions. Here's what it unlocks for ML inference and heavy runtimes, the snapshot discipline that still applies, and how it changes the SnapStart vs provisioned concurrency vs Fargate math.
CLOUD
06 August 2026 · 8 MIN READ
AWS just cut GPT-5.6 Luna prices by 80% and Terra by 20% on Bedrock, matching OpenAI's first-party cut on the same day. The interesting part is not the discount — it's the asymmetry, and what it changes in your model-routing math. With worked examples.
CLOUD
23 July 2026 · 5 MIN READ
AWS is deploying Cerebras CS-3 systems in its data centers, pairing Trainium for prefill with the Wafer Scale Engine 3 for decode. Why disaggregated inference is the right architecture, and what makes a 4-trillion-transistor chip the right tool for the decode problem.
CLOUD
20 July 2026 · 10 MIN READ
The claim that you can't tag Bedrock calls is partly true and mostly misleading. Here are the four cost attribution mechanisms, when to use each, and the gateway pattern that unlocks per-user dollars in your bill.
CLOUD
20 July 2026 · 9 MIN READ
AWS quietly shipped two open-source answers to two different agent problems. I deployed both, wired them together, then tried to break the architecture. Here is what holds, what doesn't, and the pattern for letting customers 'create agents' without losing governance.
CLOUD
10 July 2026 · 9 MIN READ
A grounded look at what agentic AI actually accelerates in a large VMware migration, where AWS Transform earns its keep, and where a human still owns the decision.
CLOUD
10 July 2026 · 11 MIN READ
Every leadership team eventually asks how modern is our AWS estate? Here is how to answer it with one honest number, computed from Cost and Usage Report data, and how to avoid turning it into a vanity metric.
CLOUD
04 June 2026 · 20 MIN READ
AWS KMS can technically sign with asymmetric keys, but it speaks REST — not PKCS#11. For PKI workloads that need HSM-backed signing, key export, and multi-tenant isolation, CloudHSM's Crypto User model gives you partition-equivalent isolation without legacy constraints.
CLOUD
30 May 2026 · 10 MIN READ
Amazon Leo Ultra delivers 1 Gbps via satellite with private networking to AWS. Here is what it concretely changes for enterprise connectivity, how it integrates with Cloud WAN and Direct Connect, and when it beats MPLS, SD-WAN, or Starlink.
CLOUD
24 April 2026 · 7 MIN READ
You have RHEL 9 instances in AWS China regions managed via SSM. Installing PostgreSQL 17 or EPEL packages means opening dozens of dynamic URLs through China's restricted network. Here is what actually works in production.
CLOUD
23 April 2026 · 8 MIN READ
Your CFO asks 'is our cloud well-run?' You need one dashboard, eight numbers, and zero jargon. Here is the framework: 4 money KPIs + 4 risk KPIs = Trust. With specific formulas, targets, and what to explicitly exclude.
CLOUD
10 April 2026 · 6 MIN READ
You are migrating microservices between Kubernetes clusters across AWS accounts, but the source uses /16 CIDRs that collide with corporate. The 2022 playbook (Private NAT Gateway + NLB per service) is obsolete. Here is what re:Invent 2024 gave us.
CLOUD
09 April 2026 · 6 MIN READ
Cloud WAN promises centralized global networking. At a 30 percent premium over Transit Gateway, what do you actually get, and what are the common misconceptions? Here is the honest technical and financial analysis.
CLOUD
05 April 2026 · 6 MIN READ
Weekly roundup of AWS announcements: AI Scholars program, Agent Plugin for serverless, Aurora Express setup, Lambda upgrades, Polly streaming, and more.
CLOUD
17 March 2026 · 10 MIN READ
AWS Verified Access is a strong ZTNA solution for internal users, but it breaks down for external contractors and partners on unmanaged devices. Here's a hybrid architecture that closes the gap with AppStream 2.0.
CLOUD
16 March 2026 · 10 MIN READ
How Amazon Connect's native AI stack replaces fragmented CCaaS platforms with a unified, pay-per-use contact center backbone for global enterprises.
CLOUD
16 March 2026 · 9 MIN READ
Enterprise teams invest in best-of-breed CSPM tools and still face critical IAM incidents. The gap isn't tooling — it's security governance. Here's how native AWS services fill it.
CLOUD
12 March 2026 · 12 MIN READ
How to map the ANSSI AD tiering model onto AWS, why Managed AD may not be enough for Tier 0, and which AWS security services close the compliance gaps.
CLOUD
07 March 2026 · 5 MIN READ
Step-by-step guide to configuring a custom subdomain with Route 53 and securing an AWS Lightsail instance with a free TLS certificate using Let's Encrypt and Certbot.
CLOUD
07 March 2026 · 9 MIN READ
A practical guide to replacing a third-party CA with ACM exportable public certificates — covering pricing, automation patterns, industry validity changes, and the gotchas nobody mentions.
CLOUD
05 March 2026 · 14 MIN READ
AWS KMS doesn't allow key material export by design. When an external PKI partner generates keys but doesn't retain them, you're stuck. Here are the four AWS alternatives — CloudHSM, XKS, Private CA, and fixing the process — with a decision framework to pick the right one.
CLOUD
26 February 2026 · 11 MIN READ
A visual, jargon-free guide comparing MPLS, SD-WAN, and AWS CloudWAN for enterprise networking — with analogies, comparison tables, and an architecture diagram showing how the three layers connect.
CLOUD
22 February 2026 · 7 MIN READ
A curated summary of the most important AWS announcements from February 2026 — from Bedrock AgentCore deep dives to new EC2 instances and the European Sovereign Cloud.
CLOUD
22 February 2026 · 14 MIN READ
A hands-on walkthrough of deploying OpenClaw on AWS using AgentCore Runtime for serverless agent execution, Graviton ARM instances, and multi-model Bedrock access — from CloudFormation template to customizing the agent's personality.
CLOUD
13 February 2026 · 10 MIN READ
How to architect a secure, multi-tenant SFTP service across AWS accounts using Transfer Family, NLB, Transit Gateway, and per-partner S3 isolation.
CLOUD
26 January 2026 · 4 MIN READ
EBS snapshot costs were growing month-over-month with no clear explanation or optimization strategy.