AWS
Filed under
Agent Auth on AWS: OIDC In, Access Keys Out
Agents on AWS should never hold long-lived keys. How OIDC federation, IRSA, Roles Anywhere, and AgentCore Identity turn signed proof into temporary credentials.
Agent Toolkit for AWS: The Docs Have a New Reader
AWS shipped the Agent Toolkit: an MCP server, curated skills, and IAM guardrails for coding agents. The primary reader of AWS docs is not human anymore.
FinOps: Budget Alerts with Terraform Before Your Next $2.5B AWS Bill
The July 17 Cost Explorer bug filled every feed with billion-dollar AWS bills. Ten lines of Terraform give you the budget alerts that caught it first.
Testing the Assumption Nobody Tests
AWS FIS can fail a zone and only approximate losing the control plane. How to run the game day, what to measure, and an honest scorecard for the series.
The Fix Shares Fate With the Outage
Lambda 2023, the DynamoDB DNS event, Azure's February control-plane failure: why recovery paths die with the incident, plus a lab measuring static stability.
AWS Lambda MicroVMs: Serverless Gets a Stateful, Isolated Sandbox
AWS Lambda MicroVMs bring VM-level isolation, snapshot-fast launch, and suspend-resume state to serverless. What changes, and where the Firecracker primitive fits.
Two Zones, Eighteen Hours, One Cause
Drone strikes put AWS's me-central-1 region into months of recovery and its DR advice was: restore into Europe. Plus a lab mapping AZ names to real IDs.
AWS Multi-party Approval for Organizations
Multi-party approval in AWS Organizations gates high-risk operations behind a quorum of human approvers. Here is how it works and the security it buys.
AZ Isolation Held. Your Architecture Didn't.
A cooling failure killed racks in one us-east-1 zone and a quorum died with them. What the blast radius promise covers, plus a read-only detector for it.