Cloud, Kubernetes, and platform engineering.
Senior-engineer field notes on cloud, Kubernetes, AWS, Terraform, and platform engineering by Ercan Ermis.
All posts
Agent Auth on AWS: OIDC In, Access Keys Out
Agents on AWS should never hold long-lived keys. How OIDC federation, IRSA, Roles Anywhere, and AgentCore Identity turn signed proof into temporary credentials.
Agent Toolkit for AWS: The Docs Have a New Reader
AWS shipped the Agent Toolkit: an MCP server, curated skills, and IAM guardrails for coding agents. The primary reader of AWS docs is not human anymore.
FinOps: Budget Alerts with Terraform Before Your Next $2.5B AWS Bill
The July 17 Cost Explorer bug filled every feed with billion-dollar AWS bills. Ten lines of Terraform give you the budget alerts that caught it first.
Testing the Assumption Nobody Tests
AWS FIS can fail a zone and only approximate losing the control plane. How to run the game day, what to measure, and an honest scorecard for the series.
Checking Cloud with Cloud: M365 Security Posture Scanning 101
Your Microsoft 365 tenant is cloud infrastructure and it drifts. A 101 on posture scanning with CIS, EIDSCA, and CISA ScuBA, and why the scanner is SaaS too.
The Fix Shares Fate With the Outage
Lambda 2023, the DynamoDB DNS event, Azure's February control-plane failure: why recovery paths die with the incident, plus a lab measuring static stability.
AWS Lambda MicroVMs: Serverless Gets a Stateful, Isolated Sandbox
AWS Lambda MicroVMs bring VM-level isolation, snapshot-fast launch, and suspend-resume state to serverless. What changes, and where the Firecracker primitive fits.
No Phone, No Account: Google's QR Wall and GDPR
Google now gates new account creation behind a phone-based QR verification. No smartphone, no account. Here is why that collides with GDPR data minimization.
Two Zones, Eighteen Hours, One Cause
Drone strikes put AWS's me-central-1 region into months of recovery and its DR advice was: restore into Europe. Plus a lab mapping AZ names to real IDs.
AWS Multi-party Approval for Organizations
Multi-party approval in AWS Organizations gates high-risk operations behind a quorum of human approvers. Here is how it works and the security it buys.
More from Ercan
Two more sites, same author, different ground.
AI, LLMs, agents, applied ML.
Field notes on AI workloads. Bedrock cost analysis, agent patterns, vector storage trade-offs, production failure modes.
Visit ercan.ai →The hub. About, consulting, contact.
Personal hub for both writing tracks. Who I am, how the consulting works, how to reach me.
Visit ercanermis.com →