AWS Solutions Architect passionate about AI & Securityhttps://www.agiusalexandre.com/https://www.agiusalexandre.com/blog/2026-02-22-aws-news-weekly-roundup-february-2026/https://www.agiusalexandre.com/blog/2026-02-22-aws-news-weekly-roundup-february-2026/A curated summary of the most important AWS announcements from February 2026 — from Bedrock AgentCore deep dives to new EC2 instances and the European Sovereign Cloud.Sun, 22 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-24-tflops-gpu-metric-ai-engineers/https://www.agiusalexandre.com/blog/2026-02-24-tflops-gpu-metric-ai-engineers/What TFLOPS actually measures, why FP16 matters for LLMs, and why the most important GPU bottleneck for inference isn't compute at all.Tue, 24 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-14-unitree-g1-open-source-humanoid-robot/https://www.agiusalexandre.com/blog/2026-02-14-unitree-g1-open-source-humanoid-robot/Unitree ships a humanoid robot with 43 degrees of freedom, a full AI training pipeline on GitHub, and Apple Vision Pro teleoperation — for $13.5K. Here's what the developer ecosystem looks like.Sat, 14 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-24-getting-hands-on-with-mistral-ai/https://www.agiusalexandre.com/blog/2026-02-24-getting-hands-on-with-mistral-ai/A practical walkthrough of two paths to working with Mistral — the managed API for fast prototyping and self-hosted deployment for full control — with real code covering prompting, model selection, function calling, RAG, and INT8 quantization.Tue, 24 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-23-transformer-anatomy-attention-ffn-demystified/https://www.agiusalexandre.com/blog/2026-02-23-transformer-anatomy-attention-ffn-demystified/A deep dive into the Transformer architecture — how attention connects tokens and why the Feed-Forward Network is the real brain of the model. Plus the key to understanding Mixture of Experts (MoE).Mon, 23 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-15-openclaw-nanobot-picoclaw-tinyclaw-self-hosted-ai-assistants/https://www.agiusalexandre.com/blog/2026-02-15-openclaw-nanobot-picoclaw-tinyclaw-self-hosted-ai-assistants/A deep architectural comparison of four open-source frameworks that turn messaging apps into AI assistant interfaces — from a 349-file TypeScript monolith to a 10MB Go binary that runs on a $10 board.Wed, 04 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-25-llm-distillation-vs-quantization-practical-guide/https://www.agiusalexandre.com/blog/2026-02-25-llm-distillation-vs-quantization-practical-guide/Two strategies to shrink LLMs — one compresses weights, the other transfers knowledge. A practical guide to distillation and quantization: when to use each, how to implement them with Hugging Face, and why the real answer is both.Wed, 25 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-24-python-transformers-sagemaker-practical-guide/https://www.agiusalexandre.com/blog/2026-02-24-python-transformers-sagemaker-practical-guide/Everything a cloud/AWS engineer needs to know about Python, the Hugging Face Transformers framework, SageMaker integration, quantization, CUDA, and AWS Inferentia — without being a data scientist.Tue, 24 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-22-fine-tuning-mistral-vllm-aws/https://www.agiusalexandre.com/blog/2026-02-22-fine-tuning-mistral-vllm-aws/End-to-end guide: fine-tune Mistral models with LoRA using Hugging Face Transformers, then deploy at scale with vLLM on AWS — from training to production serving on SageMaker, ECS, or Bedrock.Sun, 22 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-22-deploying-personal-ai-assistant-aws-bedrock-agentcore/https://www.agiusalexandre.com/blog/2026-02-22-deploying-personal-ai-assistant-aws-bedrock-agentcore/A hands-on walkthrough of deploying OpenClaw on AWS using AgentCore Runtime for serverless agent execution, Graviton ARM instances, and multi-model Bedrock access — from CloudFormation template to customizing the agent's personality.Sun, 22 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-26-llm-architecture-explained-simply-from-prompt-to-token/https://www.agiusalexandre.com/blog/2026-02-26-llm-architecture-explained-simply-from-prompt-to-token/A beginner-friendly walkthrough of how an LLM actually works end-to-end: from typing a prompt to receiving a response — covering tokenization, embeddings, Transformer layers, KV cache, the training loop, embeddings for search, and why decoder-only models won.Thu, 26 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-26-llm-inference-demystified-pagedattention-kv-cache-moe-continuous-batching/https://www.agiusalexandre.com/blog/2026-02-26-llm-inference-demystified-pagedattention-kv-cache-moe-continuous-batching/The 5 key concepts every cloud architect should know about LLM serving: PagedAttention, KV cache mechanics, continuous batching, MoE trade-offs, and real production numbers.Thu, 26 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-26-mpls-vs-sd-wan-vs-cloudwan-explained-simply/https://www.agiusalexandre.com/blog/2026-02-26-mpls-vs-sd-wan-vs-cloudwan-explained-simply/A visual, jargon-free guide comparing MPLS, SD-WAN, and AWS CloudWAN for enterprise networking — with analogies, comparison tables, and an architecture diagram showing how the three layers connect.Thu, 26 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-02-27-zero-trust-vs-network-privatization-aws/https://www.agiusalexandre.com/blog/2026-02-27-zero-trust-vs-network-privatization-aws/When your security team says 'make it private', they usually mean 'make it secure.' This post compares four approaches — VPC privatization, WAF IP allowlisting, CloudFront + auth hardening, and AWS Verified Access — and explains why Zero Trust beats network perimeters for internal applications.Fri, 27 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-01-worldmonitor-open-source-osint-dashboard/https://www.agiusalexandre.com/blog/2026-03-01-worldmonitor-open-source-osint-dashboard/A deep dive into World Monitor — an open-source intelligence dashboard that aggregates 150+ feeds, 40+ geospatial layers, and AI-powered analysis into a real-time situational awareness platform. What OSINT is, how these platforms work under the hood, and why it matters now more than ever.Sun, 01 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-02-aws-security-agent-multi-agent-penetration-testing/https://www.agiusalexandre.com/blog/2026-03-02-aws-security-agent-multi-agent-penetration-testing/A deep dive into the multi-agent architecture behind AWS Security Agent's automated penetration testing — from specialized agent swarms to assertion-based validation.Mon, 02 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-02-risen-framework-claude-code-system-prompts/https://www.agiusalexandre.com/blog/2026-03-02-risen-framework-claude-code-system-prompts/A 5-component framework for writing effective system prompts for any AI agent — Bedrock Agents, Claude Code, LangChain, Strands, or custom builds. With a practical Claude Code implementation.Mon, 02 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-05-aws-kms-key-locked-in-cloudhsm-xks-private-ca/https://www.agiusalexandre.com/blog/2026-03-05-aws-kms-key-locked-in-cloudhsm-xks-private-ca/AWS KMS doesn't allow key material export by design. When an external PKI partner generates keys but doesn't retain them, you're stuck. Here are the four AWS alternatives — CloudHSM, XKS, Private CA, and fixing the process — with a decision framework to pick the right one.Thu, 05 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-07-https-lightsail-letsencrypt-apache-route53/https://www.agiusalexandre.com/blog/2026-03-07-https-lightsail-letsencrypt-apache-route53/Step-by-step guide to configuring a custom subdomain with Route 53 and securing an AWS Lightsail instance with a free TLS certificate using Let's Encrypt and Certbot.Sat, 07 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-07-migrating-public-certificates-aws-acm-exportable/https://www.agiusalexandre.com/blog/2026-03-07-migrating-public-certificates-aws-acm-exportable/A practical guide to replacing a third-party CA with ACM exportable public certificates — covering pricing, automation patterns, industry validity changes, and the gotchas nobody mentions.Sat, 07 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-10-rag-chunking-testing-vector-engines/https://www.agiusalexandre.com/blog/2026-03-10-rag-chunking-testing-vector-engines/Most RAG tutorials stop at 'put vectors in a database.' This post covers what actually determines quality: how you chunk documents, which vector search engine to pick, and how to measure and iterate on retrieval performance using Bedrock Knowledge Bases and LLM-as-judge evaluation.Tue, 10 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-10-vector-search-vs-semantic-search/https://www.agiusalexandre.com/blog/2026-03-10-vector-search-vs-semantic-search/Vector search, semantic search, keyword search, hybrid search — these terms get used interchangeably but they mean different things. This post breaks down what each actually does, when each matters, and why hybrid search wins for RAG.Tue, 10 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-12-securing-active-directory-on-aws-tiering-anssi-sra/https://www.agiusalexandre.com/blog/2026-03-12-securing-active-directory-on-aws-tiering-anssi-sra/How to map the ANSSI AD tiering model onto AWS, why Managed AD may not be enough for Tier 0, and which AWS security services close the compliance gaps.Thu, 12 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-16-amazon-connect-ai-platform-contact-center/https://www.agiusalexandre.com/blog/2026-03-16-amazon-connect-ai-platform-contact-center/How Amazon Connect's native AI stack replaces fragmented CCaaS platforms with a unified, pay-per-use contact center backbone for global enterprises.Mon, 16 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-16-your-cspm-wont-save-you-cloud-security-governance/https://www.agiusalexandre.com/blog/2026-03-16-your-cspm-wont-save-you-cloud-security-governance/Enterprise teams invest in best-of-breed CSPM tools and still face critical IAM incidents. The gap isn't tooling — it's security governance. Here's how native AWS services fill it.Mon, 16 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-17-ztna-blind-spot-external-users-need-different-approach/https://www.agiusalexandre.com/blog/2026-03-17-ztna-blind-spot-external-users-need-different-approach/AWS Verified Access is a strong ZTNA solution for internal users, but it breaks down for external contractors and partners on unmanaged devices. Here's a hybrid architecture that closes the gap with AppStream 2.0.Tue, 17 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-20-strands-steering-plugins-accuracy-beats-prompts/https://www.agiusalexandre.com/blog/2026-03-20-strands-steering-plugins-accuracy-beats-prompts/Strands Agents plugins let you intercept every decision in the agentic loop. Steering hooks achieved 100% accuracy across 600 evaluation runs — where prompt engineering scored 82.5% and graph workflows 80.8%.Fri, 20 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-03-24-chemistry-llms-real-world-ai-chemical-rd/https://www.agiusalexandre.com/blog/2026-03-24-chemistry-llms-real-world-ai-chemical-rd/A discovery call with a global specialty chemicals company revealed that the real AI bottleneck isn't models — it's data. Here's what enterprise chemistry teams actually need versus what the hype promises.Tue, 24 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-03-how-sisyphus-works-ai-orchestrator/https://www.agiusalexandre.com/blog/2026-04-03-how-sisyphus-works-ai-orchestrator/The Orchestrator is an AI agent that delegates ALL work to specialized subagents. Here's the architectural philosophy behind why specialization beats generalization in AI agent systems.Fri, 03 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-05-aws-weekly-digest-w14-2026/https://www.agiusalexandre.com/blog/2026-04-05-aws-weekly-digest-w14-2026/Weekly roundup of AWS announcements: AI Scholars program, Agent Plugin for serverless, Aurora Express setup, Lambda upgrades, Polly streaming, and more.Sun, 05 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-08-anthropic-mythos-glasswing-cybersecurity-ai/https://www.agiusalexandre.com/blog/2026-04-08-anthropic-mythos-glasswing-cybersecurity-ai/Anthropic just dropped a model that autonomously finds and exploits zero-days in every major OS and browser. Then they built an industry coalition to use it defensively. Here's why this changes everything.Wed, 08 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-20-boulder-ai-build-factory-aws/https://www.agiusalexandre.com/blog/2026-04-20-boulder-ai-build-factory-aws/Boulder uses 9 Strands agents on Bedrock AgentCore to generate, deploy, and maintain full-stack apps on AWS Amplify — with self-healing builds and self-improving prompts.Mon, 20 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/agentcore-browser-automation/https://www.agiusalexandre.com/blog/agentcore-browser-automation/Enterprise workflows often require interacting with web applications that lack APIs. Traditional automation scripts are brittle and break when UIs change.Wed, 14 Jan 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/ai-executive-assistant-claude-code/https://www.agiusalexandre.com/blog/ai-executive-assistant-claude-code/Turn Claude Code into a persistent executive assistant with morning briefings, auto-logging, context-aware reminders, complex skills, and a memory that compounds over time — using only markdown files.Thu, 26 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/aws-backup-cost-analysis/https://www.agiusalexandre.com/blog/aws-backup-cost-analysis/EBS snapshot costs were growing month-over-month with no clear explanation or optimization strategy.Mon, 26 Jan 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/bedrock-cost-control-inference-profiles/https://www.agiusalexandre.com/blog/bedrock-cost-control-inference-profiles/AI platform teams need governance before scaling. Learn how to use Amazon Bedrock inference profiles, AWS Budgets, and a proactive cost control pattern to track, allocate, and cap AI spending per team.Fri, 06 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/building-with-ai-dlc/https://www.agiusalexandre.com/blog/building-with-ai-dlc/Discover AI-DLC (AI Development Lifecycle), a structured framework for AI-assisted software development. Learn how I used it to build this blog from scratch and how it enables continuous iteration.Mon, 26 Jan 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/chronos-time-series-forecasting/https://www.agiusalexandre.com/blog/chronos-time-series-forecasting/Building a production forecasting application without the complexity of traditional ML model training and feature engineering.Wed, 14 Jan 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/cloud-sovereignty-kms/https://www.agiusalexandre.com/blog/cloud-sovereignty-kms/XKS protects key material from extraction, but does it protect against legal compulsion to use those keys? Updated with AWS European Sovereign Cloud (GA January 2026).Wed, 04 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/from-seed-round-to-stock-exchange-understanding-ipos/https://www.agiusalexandre.com/blog/from-seed-round-to-stock-exchange-understanding-ipos/A tech worker's guide to IPOs, startup valuations, equity compensation, and what it actually means when you join a pre-IPO company.Sun, 01 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/getting-started-with-bedrock/https://www.agiusalexandre.com/blog/getting-started-with-bedrock/A practical guide to building generative AI applications with Amazon BedrockSun, 25 Jan 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/fine-tuning-llms-practical-guide/https://www.agiusalexandre.com/blog/fine-tuning-llms-practical-guide/Understand how LLM fine-tuning works, when to use it, and how to choose between full fine-tuning, LoRA, soft prompts, and other PEFT methods.Sat, 07 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/managing-local-storage-ai-development-era/https://www.agiusalexandre.com/blog/managing-local-storage-ai-development-era/How to identify, clean, and monitor the hidden storage consumers that come with AI-assisted development tools like Claude Code and KiroFri, 20 Mar 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/rag-aws-vector-store-guide/https://www.agiusalexandre.com/blog/rag-aws-vector-store-guide/AWS now offers 9 different ways to store and search vectors for RAG workloads. This guide compares every option through the Well-Architected Framework to help you pick the right one.Mon, 09 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/reachyarchi-voice-robot-architect/https://www.agiusalexandre.com/blog/reachyarchi-voice-robot-architect/How we combined a Reachy humanoid robot with Amazon Bedrock Nova Sonic to create an AI-powered Solutions Architect for AWS SummitsThu, 29 Jan 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/replacing-legacy-sftp-transfer-family-multi-account/https://www.agiusalexandre.com/blog/replacing-legacy-sftp-transfer-family-multi-account/How to architect a secure, multi-tenant SFTP service across AWS accounts using Transfer Family, NLB, Transit Gateway, and per-partner S3 isolation.Fri, 13 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/rlhf-reward-models-alignment/https://www.agiusalexandre.com/blog/rlhf-reward-models-alignment/A practical walkthrough of how large language models are aligned with human values — from collecting feedback to PPO optimization and the reward hacking pitfalls.Mon, 09 Feb 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/seo-enhancement/https://www.agiusalexandre.com/blog/seo-enhancement/Blog posts weren't appearing correctly in search results or showing rich previews when shared on social media.Mon, 26 Jan 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/tag-filtering/https://www.agiusalexandre.com/blog/tag-filtering/Blog readers needed a way to browse content by topic instead of scrolling through all posts.Mon, 26 Jan 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-09-cloud-wan-vs-transit-gateway-honest-assessment/https://www.agiusalexandre.com/blog/2026-04-09-cloud-wan-vs-transit-gateway-honest-assessment/Cloud WAN promises centralized global networking. At a 30 percent premium over Transit Gateway, what do you actually get, and what are the common misconceptions? Here is the honest technical and financial analysis.Thu, 09 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-21-rpa-to-agentic-ai-scoring-framework/https://www.agiusalexandre.com/blog/2026-04-21-rpa-to-agentic-ai-scoring-framework/Your RPA estate has 50 bots. Some should become AI agents, some should stay as bots, some need a hybrid pattern. Here is a repeatable, weighted scoring rubric — and the 5 migration patterns it maps to.Tue, 21 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-23-cloud-sovereignty-3-tier-architecture/https://www.agiusalexandre.com/blog/2026-04-23-cloud-sovereignty-3-tier-architecture/Your board asks 'is our data safe in the cloud?' The answer is not yes or no — it is a classification decision that maps each workload to the right control tier. Here is the framework, with the metadata exposure gap most teams miss.Thu, 23 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-23-cloud-trust-scorecard-cio-cfo-kpis/https://www.agiusalexandre.com/blog/2026-04-23-cloud-trust-scorecard-cio-cfo-kpis/Your CFO asks 'is our cloud well-run?' You need one dashboard, eight numbers, and zero jargon. Here is the framework: 4 money KPIs + 4 risk KPIs = Trust. With specific formulas, targets, and what to explicitly exclude.Thu, 23 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-20-sagemaker-unified-studio-datazone-migration-decision/https://www.agiusalexandre.com/blog/2026-04-20-sagemaker-unified-studio-datazone-migration-decision/Your DataZone environment works. AWS says SMUS is the future. Do you upgrade, go greenfield, or wait? Here is the coverage matrix, the 70–85 percent pipeline replacement reality, and the multi-account mesh architecture you actually need.Mon, 20 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-22-agentic-data-governance-architecture-aws/https://www.agiusalexandre.com/blog/2026-04-22-agentic-data-governance-architecture-aws/Your data lives in AWS, Databricks, and Microsoft Fabric. Your business glossary is in Collibra. Users just want to find data and get access. Here is an agentic architecture that makes governance the default instead of the blocker.Wed, 22 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-10-privatelink-resource-endpoints-overlapping-cidrs/https://www.agiusalexandre.com/blog/2026-04-10-privatelink-resource-endpoints-overlapping-cidrs/You are migrating microservices between Kubernetes clusters across AWS accounts, but the source uses /16 CIDRs that collide with corporate. The 2022 playbook (Private NAT Gateway + NLB per service) is obsolete. Here is what re:Invent 2024 gave us.Fri, 10 Apr 2026 00:00:00 GMThttps://www.agiusalexandre.com/blog/2026-04-24-linux-repos-aws-china-rhel-rhui-proxy/https://www.agiusalexandre.com/blog/2026-04-24-linux-repos-aws-china-rhel-rhui-proxy/You have RHEL 9 instances in AWS China regions managed via SSM. Installing PostgreSQL 17 or EPEL packages means opening dozens of dynamic URLs through China's restricted network. Here is what actually works in production.Fri, 24 Apr 2026 00:00:00 GMT