All my recent blog posts for fundamentals on working with the cloud, collected in chronological order.
Developers keep shipping s3:* and AdministratorAccess, and it is not laziness. The deploy loop, indirect permissions, policy size limits, and Access Analyzer gaps all push you toward wildcards. Here is…
Read article
Most teams should stay on Lambda and Fargate. At scale, with many teams and a platform org, EKS with Flux, Helm, and Karpenter becomes the right call. Here's the GitOps…
Read article
A point-by-point response to the viral Hacker News post about leaving AWS. Most of the complaints are skill issues, but a few are fair. Here is my honest take from…
Read article
The AgentCore harness preview pairs a managed runtime, server-side conversation memory, per-session microVMs, multi-provider model support, and streamed observability so you can ship an agent on AWS without writing the…
Read article
A walkthrough of the AWS Fundamentals Organization built with Terraform. Service Control Policies, Resource Control Policies, CloudTrail audit pipeline, email and Slack alerts, and a budget-driven kill switch for sandbox…
Read article