aws-cdk
45 posts
Devcontainers, Codespaces and AWS Lambda MicroVMs as homes for a coding agent: what each rung adds, what it costs, and when moving the agent off the laptop pays off.
lambda · claude-code · ai-tools +5
Before building an internal service layer, decide whether you need one: what it costs per call, the volume where VPC Lattice wins, and when direct invoke still beats it.
aws · aws-cdk · lambda +4
A private REST API structurally cannot carry gRPC, and every AWS surface that speaks gRPC excludes Lambda targets. What to keep from gRPC, and what to drop.
aws · aws-cdk · lambda +4
The private REST API, the resource policy that switches it on, per-route AWS_IAM grants, the two CDK stacks, and signing the call from a Node 22 Lambda.
aws · aws-cdk · lambda +4
SigV4 proves which service is calling and nothing about which user it is for. How to propagate a verified subject, and what the transport actually encrypts.
aws · aws-cdk · lambda +4
Same-account, the resource policy and the caller's identity policy are an OR. Cross-account they become an AND, and silence denies. What that changes in the perimeter.
aws · aws-cdk · lambda +4
API Gateway shares one throttle bucket with your front door, never retries a Lambda integration, and cannot see loops through itself. What you have to rebuild.
aws · aws-cdk · lambda +4
The access log already names the caller, route, and latency. Per-route metrics are not free, the user token needs masking, and AWS is switching off its own mesh.
aws · aws-cdk · lambda +4
A measured benchmark of 9 bundlers and 3 cdk synth runners for CDK TypeScript Lambdas, with a per-layer default and the rule that picks each one.
aws-cdk · lambda · typescript +3
A lifecycle test for CDK stack layout: give a resource its own long-lived stack when it outlives any single deployer, then reach it by a well-known name.
aws-cdk · infrastructure-as-code · typescript +3
The exact IAM size, attach, and quota limits you will hit at scale, and the scoped-policy, permission-boundary, and SCP structure that keeps you far from every one.
aws · iam · security +2
AppSync subscriptions fire only on mutations. This explores bridging downstream BFF events into a NONE-data-source mutation with EventBridge and CDK.
aws · graphql · serverless +4
Building a RAG agent on AWS Bedrock + Knowledge Bases + OpenSearch Serverless with CDK in TypeScript: architecture, IAM wiring, automated ingestion, and the chat UI.
aws-bedrock · aws-cdk · rag +3
A CDK guide for deploying a minimal Strands agent on AgentCore Runtime: parameterized stack, arm64 build, deploy and invoke, with IAM and Marketplace prerequisites.
aws-bedrock · ai-agents · aws-cdk +3
A technical guide to choosing and implementing AWS edge computing for global apps, with practical examples and cost optimization strategies.
aws · cloudfront · lambda +6
A technical guide to advanced Amazon Cognito: custom auth flows, federation, multi-tenancy, migration strategies, and production-grade security with CDK.
aws · authentication · serverless +6
A technical guide comparing AWS Secrets Manager and Parameter Store, showing when to use each service with real-world implementation patterns and CDK examples.
aws · secrets-management · security +7
The order that makes AWS cost work stick: visibility with Cost Explorer and Budgets, right-sizing with Compute Optimizer, then commitments.
aws · cost-optimization · aws-cdk +1
A practical guide to Mozilla SOPS for encrypting secrets in Git: age encryption, AWS CDK and Lambda patterns, and production-ready serverless security.
secrets-management · ci-cd · terraform +7
Building scalable real-time APIs with AWS AppSync: JavaScript resolvers, subscription filtering, caching strategies, and infrastructure as code patterns.
aws · graphql · serverless +4
Implement secure cross-account event distribution with Amazon SNS and SQS: IAM policies, KMS encryption, AWS CDK, and common production pitfalls.
aws · sns · sqs +6
Implement the Saga pattern across microservices with AWS Step Functions and EventBridge, covering idempotency, compensation logic, and production patterns.
design-patterns · distributed-systems · microservices +4
Choose between SQS, SNS, and EventBridge by communication pattern, not features, with working CDK examples and a clear cost analysis.
sqs · sns · eventbridge +5
Build production serverless workflows with Step Functions: Standard vs Express, Distributed Map, error handling, and cost optimization with working CDK examples.
step-functions · aws-cdk · serverless +4
Overcome CloudFormation's 500 resource limit with nested stacks, cross-stack references, SSM Parameter Store, and microstack architecture, shown in TypeScript CDK.
aws-cdk · infrastructure-as-code · aws +2
When to use service-based, domain-based, feature-based, or layer-based organization in AWS CDK projects, with decision frameworks and common pitfalls.
aws-cdk · typescript · infrastructure-as-code +3
How factory functions, higher-order functions, and composition turn AWS CDK into a type-safe, reusable infrastructure toolkit that prevents configuration drift.
aws-cdk · typescript · infrastructure-as-code +2
How the Builder pattern uses TypeScript's type system for safe, discoverable APIs across serverless, data layers, and testing, with working examples.
typescript · design-patterns · aws-cdk +2
Practical approaches to managing Lambda Layer versions across dev, staging, and production with AWS CDK, automated deployment pipelines, and rollbacks.
aws · lambda · aws-cdk +4
Learn to build automated preview environments using AWS CDK, Lambda, and GitHub Actions for seamless PR testing and review workflows
aws-cdk · serverless · ci-cd +5
Implementing custom domains, bulk operations, URL expiration, and defense-in-depth security measures for production link shortener services.
aws-cdk · lambda · security +5
Multi-environment deployment, performance optimization at scale, cost management, and monitoring with solid incident response patterns.
aws-cdk · lambda · dynamodb +6
Multi-region deployment, database scaling, disaster recovery, and long-term maintenance patterns for production systems at scale.
aws-cdk · reliability · scalability +1
Path-based API versioning on AWS API Gateway with CDK: a lifecycle registry per version, per-version Lambda handlers, discovery, and deprecation signals.
api-gateway · aws · aws-cdk +3
Set up a production-grade link shortener with AWS CDK, DynamoDB, and Lambda: architecture decisions, project layout, and the schema choices that hold up at scale.
aws-cdk · lambda · dynamodb +5
Build the redirect engine, analytics collection, and API Gateway config: performance optimizations and debugging strategies for millions of daily redirects.
aws-cdk · lambda · api-gateway +5
How to deploy Fargate effectively with different IaC tools. Practical patterns, common gotchas, and what works best for each approach.
aws · fargate · aws-cdk +4
Handle large file uploads with S3 presigned URLs instead of Lambda proxies: a full CDK stack, both handlers, the browser side, and the security trade-offs.
lambda · aws-cdk · aws +2
Why migrate from Serverless Framework to AWS CDK: licensing changes, architectural advantages, and when CDK becomes the better choice for your apps.
aws · aws-cdk · migration
Structure a CDK project for serverless apps, configure TypeScript for Lambda, and set patterns that ease migration from Serverless Framework.
aws-cdk · tutorial
Migrate Lambda functions, API Gateway, request validation, and error handling from Serverless Framework to AWS CDK with practical examples.
api-gateway · aws · aws-cdk +2
Master DynamoDB migrations, environment variable management, secrets handling, and VPC configurations when moving from Serverless Framework to AWS CDK.
aws · aws-cdk · dynamodb +4
Implement robust authentication with Cognito, API Gateway authorizers, and fine-grained IAM policies when migrating from Serverless Framework to AWS CDK.
authorization · aws-cdk · authentication +2
Plan the Serverless Framework to AWS CDK cut-over: blue-green deployment, rollback procedures, infrastructure testing, and performance tuning.
aws-cdk · monitoring · performance
Keep a Lambda API and its OpenAPI contract in sync by generating the spec from Zod schemas and wiring that generation into CDK deployment.
api-gateway · aws-cdk · lambda +4