Skip to content

Cloud Infrastructure · Cloud Computing

AWS, serverless, and cloud infrastructure

Where Should Claude Code Run? Devcontainer, Codespaces, or MicroVM

Devcontainers, Codespaces and AWS Lambda MicroVMs as homes for a coding agent: what each rung adds, what it costs, and when moving the agent off the laptop pays off.

lambda · claude-code · ai-tools +5

Choosing a Serverless Internal Service Layer7/7

Before building an internal service layer, decide whether you need one: what it costs per call, the volume where VPC Lattice wins, and when direct invoke still beats it.

aws · aws-cdk · lambda +4

gRPC, Protobuf, and the Wire Format Your Gateway Allows6/7

A private REST API structurally cannot carry gRPC, and every AWS surface that speaks gRPC excludes Lambda targets. What to keep from gRPC, and what to drop.

aws · aws-cdk · lambda +4

Building the Layer with a Private API Gateway5/7

The private REST API, the resource policy that switches it on, per-route AWS_IAM grants, the two CDK stacks, and signing the call from a Node 22 Lambda.

aws · aws-cdk · lambda +4

Identity and Encryption Between Serverless Services4/7

SigV4 proves which service is calling and nothing about which user it is for. How to propagate a verified subject, and what the transport actually encrypts.

aws · aws-cdk · lambda +4

Multi-Account: Cross-Account Calls and the Data Perimeter3/7

Same-account, the resource policy and the caller's identity policy are an OR. Cross-account they become an AND, and silence denies. What that changes in the perimeter.

aws · aws-cdk · lambda +4

How the Layer Fails: Throttles, Retries, and Loops2/7

API Gateway shares one throttle bucket with your front door, never retries a Lambda integration, and cannot see loops through itself. What you have to rebuild.

aws · aws-cdk · lambda +4

Observability, and Where Service Meshes Are Heading1/7

The access log already names the caller, route, and latency. Per-route metrics are not free, the user token needs masking, and AWS is switching off its own mesh.

aws · aws-cdk · lambda +4

CDK TypeScript Lambda: Choosing a Bundler and cdk synth Runner

A measured benchmark of 9 bundlers and 3 cdk synth runners for CDK TypeScript Lambdas, with a per-layer default and the rule that picks each one.

aws-cdk · lambda · typescript +3

Should Stateful Resources Live in a Separate CDK Stack?

A lifecycle test for CDK stack layout: give a resource its own long-lived stack when it outlives any single deployer, then reach it by a well-known name.

aws-cdk · infrastructure-as-code · typescript +3

Managing IAM Policies and Roles at Scale Without Hitting AWS Limits

The exact IAM size, attach, and quota limits you will hit at scale, and the scoped-policy, permission-boundary, and SCP structure that keeps you far from every one.

aws · iam · security +2

Triggering AppSync Subscriptions From Outside AppSync

AppSync subscriptions fire only on mutations. This explores bridging downstream BFF events into a NONE-data-source mutation with EventBridge and CDK.

aws · graphql · serverless +4

Amazon Bedrock Knowledge Bases Explained: Data Sources and Vector Stores

What a Bedrock Knowledge Base really is, which data sources and vector stores are first-class, and why the console default rarely fits a small corpus.

aws · aws-bedrock · rag +3

Deploying AWS Bedrock AgentCore with CDK: a quickstart

A CDK guide for deploying a minimal Strands agent on AgentCore Runtime: parameterized stack, arm64 build, deploy and invoke, with IAM and Marketplace prerequisites.

aws-bedrock · ai-agents · aws-cdk +3

AWS Control Tower Multi-Account Strategy: From Landing Zone to Enterprise Governance

A practical guide to AWS Control Tower multi-account strategy: OU structure, SCPs, RCPs, Account Factory for Terraform, IAM Identity Center, and security.

aws · multi-account · security +3

Running Bun and Alternative JavaScript Runtimes on AWS Lambda

Run Bun and Deno on AWS Lambda with custom runtimes: performance benchmarks, cost analysis, and production deployment patterns.

lambda · javascript · serverless +2

Edge Computing with AWS: CloudFront Functions vs Lambda@Edge

A technical guide to choosing and implementing AWS edge computing for global apps, with practical examples and cost optimization strategies.

aws · cloudfront · lambda +6

Amazon Cognito Deep Dive: Beyond Basic Authentication

A technical guide to advanced Amazon Cognito: custom auth flows, federation, multi-tenancy, migration strategies, and production-grade security with CDK.

aws · authentication · serverless +6

AWS Secrets Manager & Parameter Store: Security Best Practices

A technical guide comparing AWS Secrets Manager and Parameter Store, showing when to use each service with real-world implementation patterns and CDK examples.

aws · secrets-management · security +7

Caching Strategies: From Local Memory to Distributed Systems

A practical guide to multi-tier caching: in-memory, Redis, and CDN layers, cache-aside vs write-through, ElastiCache vs MemoryDB, and stampede prevention.

caching · redis · aws +4

AWS Cost Optimization Toolkit - Practical Strategies for Production Workloads

The order that makes AWS cost work stick: visibility with Cost Explorer and Budgets, right-sizing with Compute Optimizer, then commitments.

aws · cost-optimization · aws-cdk +1

AWS AppSync & GraphQL: Building Production-Ready Real-time APIs

Building scalable real-time APIs with AWS AppSync: JavaScript resolvers, subscription filtering, caching strategies, and infrastructure as code patterns.

aws · graphql · serverless +4

Platform Engineering: Building Internal Developer Platforms That Developers Actually Want to Use

A practical guide to building Internal Developer Platforms with golden paths, self-service infrastructure, and product thinking, using Backstage, Port, and AWS.

platform-engineering · developer-experience · aws +2

SNS/SQS Cross-Account Fan-Out: Building Multi-Account Event Distribution in AWS

Implement secure cross-account event distribution with Amazon SNS and SQS: IAM policies, KMS encryption, AWS CDK, and common production pitfalls.

aws · sns · sqs +6

FinOps for AI Workloads: Managing LLM Costs in Production

Prompt caching, model routing, token budgets, and semantic caching: how to keep production LLM spend predictable without giving up answer quality.

aws · cost-optimization · llm +3

Testing Serverless Applications: A Practical Strategy Guide

Build a testing strategy for AWS Lambda, API Gateway, DynamoDB, and Step Functions with practical patterns for fast feedback and reliability.

lambda · testing · serverless +8

AWS Messaging Services: SQS vs SNS vs EventBridge - A Decision Framework

Choose between SQS, SNS, and EventBridge by communication pattern, not features, with working CDK examples and a clear cost analysis.

sqs · sns · eventbridge +5

AWS Step Functions Deep Dive: Building Resilient Workflow Orchestration

Build production serverless workflows with Step Functions: Standard vs Express, Distributed Map, error handling, and cost optimization with working CDK examples.

step-functions · aws-cdk · serverless +4

Building Production-Ready AI Agents with AWS Bedrock AgentCore

How AWS Bedrock AgentCore solves the infrastructure challenges of deploying agentic AI at scale, with runtime, memory, gateway, and multi-agent coordination.

aws-bedrock · ai-agents · aws +3

Aurora vs RDS: When to Choose Amazon Aurora (Architecture and Cost)

A guide to Aurora architecture, I/O cost analysis, and when to choose it over RDS, with migration strategies and real-world decision frameworks.

aws · data-storage-orm · postgresql +3

Breaking Through CloudFormation's 500 Resource Barrier: Practical Strategies for Large-Scale Infrastructure

Overcome CloudFormation's 500 resource limit with nested stacks, cross-stack references, SSM Parameter Store, and microstack architecture, shown in TypeScript CDK.

aws-cdk · infrastructure-as-code · aws +2

AWS CDK Project Structure: Service-Based vs Domain-Based Organization

When to use service-based, domain-based, feature-based, or layer-based organization in AWS CDK projects, with decision frameworks and common pitfalls.

aws-cdk · typescript · infrastructure-as-code +3

Reusable AWS CDK Constructs: Factory Functions, Builders, and Aspects

How factory functions, higher-order functions, and composition turn AWS CDK into a type-safe, reusable infrastructure toolkit that prevents configuration drift.

aws-cdk · typescript · infrastructure-as-code +2

Choosing IoT Messaging Protocols for Logistics: MQTT, AMQP, ZeroMQ, CoAP, and DDS Compared

A technical comparison of MQTT, AMQP, ZeroMQ, CoAP, and DDS for IoT logistics: fleet tracking, cold chain monitoring, and real-time device communication.

messaging · industry-trends · real-time +2

CloudEvents SDK for TypeScript: Standardizing Events in Serverless Architectures

A practical guide to the CloudEvents spec and TypeScript SDK: create, parse, and validate standardized events across AWS Lambda and EventBridge.

typescript · serverless · lambda +2

Dokploy + Cloudflare Tunnel on a VPS: Setup Guide

A practical guide to setting up a secure, affordable private server using VPS, Dokploy for deployments, and Cloudflared tunnels for secure access without exposing ports

docker · deployment · cloudflare +2

Lambda Layer Versioning Strategies for Multi-Environment Deployments

Practical approaches to managing Lambda Layer versions across dev, staging, and production with AWS CDK, automated deployment pipelines, and rollbacks.

aws · lambda · aws-cdk +4

Next.js Deployment Alternatives to Vercel: A Comprehensive Guide

A practical guide to deploying Next.js beyond Vercel, covering the cost profile, implementation details, and migration path for each target platform.

nextjs · deployment · aws +4

Building Ephemeral Preview Environments with AWS CDK and Serverless

Learn to build automated preview environments using AWS CDK, Lambda, and GitHub Actions for seamless PR testing and review workflows

aws-cdk · serverless · ci-cd +5

Build a URL Shortener with AWS CDK Part 3: Security & Custom Domains5/5

Implementing custom domains, bulk operations, URL expiration, and defense-in-depth security measures for production link shortener services.

aws-cdk · lambda · security +5

Build a URL Shortener with AWS CDK Part 4: Production Deployment4/5

Multi-environment deployment, performance optimization at scale, cost management, and monitoring with solid incident response patterns.

aws-cdk · lambda · dynamodb +6

AWS CDK URL Shortener Part 5: Scaling & Long-term Maintenance3/5

Multi-region deployment, database scaling, disaster recovery, and long-term maintenance patterns for production systems at scale.

aws-cdk · reliability · scalability +1

AWS CDK Link Shortener Part 1: Project Setup & Basic Infrastructure2/5

Set up a production-grade link shortener with AWS CDK, DynamoDB, and Lambda: architecture decisions, project layout, and the schema choices that hold up at scale.

aws-cdk · lambda · dynamodb +5

AWS CDK Link Shortener Part 2: Core Functionality & API Development1/5

Build the redirect engine, analytics collection, and API Gateway config: performance optimizations and debugging strategies for millions of daily redirects.

aws-cdk · lambda · api-gateway +5

AWS Fargate 101: Serverless Containers Explained4/4

A practical guide to AWS Fargate: task definitions, awsvpc networking, cost trade-offs, and when serverless containers beat managing EC2 hosts yourself.

aws · fargate · ecs +3

AWS Fargate Production Patterns: Cost, Monitoring, Blue-Green3/4

Advanced Fargate patterns learned from running production workloads. From cost optimization to stateful containers, here's what the docs won't tell you.

aws · fargate · ecs +4

AWS Fargate Troubleshooting: ENI Limits, Timeouts, Debugging2/4

Fargate failure modes that green dashboards hide: ENI quota exhaustion, subnet routing breaks, memory leaks, and the checks that find each one.

aws · fargate · debugging +4

Deploying AWS Fargate: CDK vs Terraform vs SAM1/4

How to deploy Fargate effectively with different IaC tools. Practical patterns, common gotchas, and what works best for each approach.

aws · fargate · aws-cdk +4

AWS Lambda Cold Start Optimization: Production Lessons Learned3/3

Production-tested strategies for cutting AWS Lambda cold starts: runtime selection, provisioned concurrency, and practical optimization techniques.

lambda · serverless · cold-start +3

AWS Lambda Memory Allocation and Performance Tuning: The Complete Guide2/3

Tune AWS Lambda performance: the memory-to-CPU model, benchmarking with Power Tuning, cost analysis, and adaptive allocation patterns.

lambda · serverless · performance +2

AWS Lambda Cost Optimization: VPC, Layers, and Advanced Patterns1/3

Advanced AWS Lambda patterns and cost optimization: Lambda Layers, VPC configuration, cross-account execution, and architectural decisions.

lambda · serverless · cost-optimization +5

AWS Lambda Performance Optimization: Sub-10ms Latency

Hold AWS Lambda warm-path latency inside a 10 ms budget with runtime choice, connection reuse, bundle discipline, caching, and memory tuning.

aws · lambda · performance +4

S3 Presigned URLs for Large File Uploads with Lambda and CDK

Handle large file uploads with S3 presigned URLs instead of Lambda proxies: a full CDK stack, both handlers, the browser side, and the security trade-offs.

lambda · aws-cdk · aws +2

Replacing Factories and DI in Node.js with Pure Functions

Factories, service layers, and DI containers rarely earn their keep in a Lambda-shaped Node.js service. What replaces them, and where classes still win.

event-driven · functional-programming · lambda +3

Monolith to Microservices in Node.js: A Migration Guide

A practical guide to evolving Node.js monoliths into event-driven serverless functions, with migration strategies and proven architectural patterns.

event-driven · architecture · nodejs +1

Multi-Account AWS Architecture: Event-Driven Systems at Scale

Multi-account AWS architecture patterns for resilient event-driven systems: account structure, EventBridge routing, and cross-service communication.

aws · eventbridge · multi-account +5

Serverless Framework vs AWS CDK: Should You Migrate? (Part 1)6/6

Why migrate from Serverless Framework to AWS CDK: licensing changes, architectural advantages, and when CDK becomes the better choice for your apps.

aws · aws-cdk · migration

Migrating from Serverless Framework to AWS CDK: Part 2 - Setting Up Your CDK Environment5/6

Structure a CDK project for serverless apps, configure TypeScript for Lambda, and set patterns that ease migration from Serverless Framework.

aws-cdk · tutorial

Migrating from Serverless Framework to AWS CDK: Part 3 - Lambda Functions and API Gateway4/6

Migrate Lambda functions, API Gateway, request validation, and error handling from Serverless Framework to AWS CDK with practical examples.

api-gateway · aws · aws-cdk +2

Migrating from Serverless Framework to AWS CDK: Part 4 - Database and Environment Management3/6

Master DynamoDB migrations, environment variable management, secrets handling, and VPC configurations when moving from Serverless Framework to AWS CDK.

aws · aws-cdk · dynamodb +4

Migrating from Serverless Framework to AWS CDK: Part 5 - Authentication, Authorization, and IAM2/6

Implement robust authentication with Cognito, API Gateway authorizers, and fine-grained IAM policies when migrating from Serverless Framework to AWS CDK.

authorization · aws-cdk · authentication +2

Migrating from Serverless Framework to AWS CDK: Part 6 - Migration Strategies and Best Practices1/6

Plan the Serverless Framework to AWS CDK cut-over: blue-green deployment, rollback procedures, infrastructure testing, and performance tuning.

aws-cdk · monitoring · performance