aws

Keep identity reads in DynamoDB, route arbitrary sort, filters, facets, and full text to a zero-ETL OpenSearch read model, and know when one PostgreSQL beats both.

dynamodb · aws · architecture +2

DynamoDB has no OFFSET, no arbitrary ORDER BY, and no cheap COUNT. Ship signed next/prev cursors, model sort orders as sort keys, and drop the total count.

dynamodb · aws · data-storage-orm +2

Before building an internal service layer, decide whether you need one: what it costs per call, the volume where VPC Lattice wins, and when direct invoke still beats it.

aws · aws-cdk · lambda +4

A private REST API structurally cannot carry gRPC, and every AWS surface that speaks gRPC excludes Lambda targets. What to keep from gRPC, and what to drop.

aws · aws-cdk · lambda +4

The private REST API, the resource policy that switches it on, per-route AWS_IAM grants, the two CDK stacks, and signing the call from a Node 22 Lambda.

aws · aws-cdk · lambda +4

SigV4 proves which service is calling and nothing about which user it is for. How to propagate a verified subject, and what the transport actually encrypts.

aws · aws-cdk · lambda +4

Same-account, the resource policy and the caller's identity policy are an OR. Cross-account they become an AND, and silence denies. What that changes in the perimeter.

aws · aws-cdk · lambda +4

API Gateway shares one throttle bucket with your front door, never retries a Lambda integration, and cannot see loops through itself. What you have to rebuild.

aws · aws-cdk · lambda +4

The access log already names the caller, route, and latency. Per-route metrics are not free, the user token needs masking, and AWS is switching off its own mesh.

aws · aws-cdk · lambda +4

A lifecycle test for CDK stack layout: give a resource its own long-lived stack when it outlives any single deployer, then reach it by a well-known name.

aws-cdk · infrastructure-as-code · typescript +3

The exact IAM size, attach, and quota limits you will hit at scale, and the scoped-policy, permission-boundary, and SCP structure that keeps you far from every one.

aws · iam · security +2

Kinesis is four AWS services under one name. A guide to the four, the Data Streams shard engine underneath, its cost shape, and when to pick something else.

aws · real-time · event-driven +1

AppSync subscriptions fire only on mutations. This explores bridging downstream BFF events into a NONE-data-source mutation with EventBridge and CDK.

aws · graphql · serverless +4

What Aurora Serverless v2 is under the hood: the shared storage layer, ACU-driven compute, the Caspian substrate, scale-to-zero, and mixed-mode clusters.

aws · data-storage-orm · architecture +1

What a Bedrock Knowledge Base really is, which data sources and vector stores are first-class, and why the console default rarely fits a small corpus.

aws · aws-bedrock · rag +3

Named signals that justify a Kafka migration from a managed event bus, and a four-phase outbox-anchored playbook to move without rip-and-replace.

messaging · event-driven · aws +4

A CDK guide for deploying a minimal Strands agent on AgentCore Runtime: parameterized stack, arm64 build, deploy and invoke, with IAM and Marketplace prerequisites.

aws-bedrock · ai-agents · aws-cdk +3

A platform default for multi-team AWS orgs: one event, many consumers, each in its own account with its own SQS and DLQ, and fan-out in the event bus layer.

aws · eventbridge · event-driven +4

Build SaaS authorization with AWS Cognito and Verified Permissions, covering Cedar policies, multi-tenant patterns, JWT flow, and cost in TypeScript.

authorization · aws · authentication +4

A vendor-neutral evaluation of AWS Verified Permissions, SpiceDB, OpenFGA, Cerbos, and OPA, with architecture patterns, cost analysis, and a decision framework.

authorization · security · architecture +4

A practical guide to AWS Control Tower multi-account strategy: OU structure, SCPs, RCPs, Account Factory for Terraform, IAM Identity Center, and security.

aws · multi-account · security +3

Strategies to prevent and handle DynamoDB throttling in Single Table Design: partition key design, write sharding, capacity modes, DAX, and retry patterns.

dynamodb · aws · reliability +4

A practical comparison of TypeScript AI SDKs for building agents: Vercel AI SDK, OpenAI Agents SDK, and AWS Bedrock, with code examples and decision frameworks.

typescript · ai-tools · serverless +4

A technical guide to choosing and implementing AWS edge computing for global apps, with practical examples and cost optimization strategies.

aws · cloudfront · lambda +6

A technical guide to advanced Amazon Cognito: custom auth flows, federation, multi-tenancy, migration strategies, and production-grade security with CDK.

aws · authentication · serverless +6

A technical guide comparing AWS Secrets Manager and Parameter Store, showing when to use each service with real-world implementation patterns and CDK examples.

aws · secrets-management · security +7

A production guide to feature flags in distributed systems, comparing LaunchDarkly, Unleash, and AWS AppConfig with examples for rollouts and A/B testing.

feature-flags · devops · ci-cd +5

A practical guide to multi-tier caching: in-memory, Redis, and CDN layers, cache-aside vs write-through, ElastiCache vs MemoryDB, and stampede prevention.

caching · redis · aws +4

The order that makes AWS cost work stick: visibility with Cost Explorer and Budgets, right-sizing with Compute Optimizer, then commitments.

aws · cost-optimization · aws-cdk +1

Learn how the Transactional Outbox Pattern solves the dual-write problem in distributed systems, with practical implementations using PostgreSQL, DynamoDB, and CDC tools.

distributed-systems · microservices · event-driven +5

Building scalable real-time APIs with AWS AppSync: JavaScript resolvers, subscription filtering, caching strategies, and infrastructure as code patterns.

aws · graphql · serverless +4

A practical guide to building Internal Developer Platforms with golden paths, self-service infrastructure, and product thinking, using Backstage, Port, and AWS.

platform-engineering · developer-experience · aws +2

Implement secure cross-account event distribution with Amazon SNS and SQS: IAM policies, KMS encryption, AWS CDK, and common production pitfalls.

aws · sns · sqs +6

Prompt caching, model routing, token budgets, and semantic caching: how to keep production LLM spend predictable without giving up answer quality.

aws · cost-optimization · llm +3

Choose between SQS, SNS, and EventBridge by communication pattern, not features, with working CDK examples and a clear cost analysis.

sqs · sns · eventbridge +5

Build production serverless workflows with Step Functions: Standard vs Express, Distributed Map, error handling, and cost optimization with working CDK examples.

step-functions · aws-cdk · serverless +4

How AWS Bedrock AgentCore solves the infrastructure challenges of deploying agentic AI at scale, with runtime, memory, gateway, and multi-agent coordination.

aws-bedrock · ai-agents · aws +3

A guide to Aurora architecture, I/O cost analysis, and when to choose it over RDS, with migration strategies and real-world decision frameworks.

aws · data-storage-orm · postgresql +3

Overcome CloudFormation's 500 resource limit with nested stacks, cross-stack references, SSM Parameter Store, and microstack architecture, shown in TypeScript CDK.

aws-cdk · infrastructure-as-code · aws +2

Model relationships, choose between GSI and LSI, integrate DAX caching, and avoid hot partitions in production DynamoDB single-table designs with working examples.

dynamodb · data-storage-orm · aws +1

A practical guide to implementing customer relationship management using event sourcing, CQRS, and event-driven patterns for marketing automation and consent management

event-driven · architecture · microservices +3

Practical approaches to managing Lambda Layer versions across dev, staging, and production with AWS CDK, automated deployment pipelines, and rollbacks.

aws · lambda · aws-cdk +4

A practical guide to deploying Next.js beyond Vercel, covering the cost profile, implementation details, and migration path for each target platform.

nextjs · deployment · aws +4

Learn to build automated preview environments using AWS CDK, Lambda, and GitHub Actions for seamless PR testing and review workflows

aws-cdk · serverless · ci-cd +5

Path-based API versioning on AWS API Gateway with CDK: a lifecycle registry per version, per-version Lambda handlers, discovery, and deprecation signals.

api-gateway · aws · aws-cdk +3

A practical guide to AWS Fargate: task definitions, awsvpc networking, cost trade-offs, and when serverless containers beat managing EC2 hosts yourself.

aws · fargate · ecs +3

Advanced Fargate patterns learned from running production workloads. From cost optimization to stateful containers, here's what the docs won't tell you.

aws · fargate · ecs +4

Fargate failure modes that green dashboards hide: ENI quota exhaustion, subnet routing breaks, memory leaks, and the checks that find each one.

aws · fargate · debugging +4

How to deploy Fargate effectively with different IaC tools. Practical patterns, common gotchas, and what works best for each approach.

aws · fargate · aws-cdk +4

Production-tested strategies for cutting AWS Lambda cold starts: runtime selection, provisioned concurrency, and practical optimization techniques.

lambda · serverless · cold-start +3

Tune AWS Lambda performance: the memory-to-CPU model, benchmarking with Power Tuning, cost analysis, and adaptive allocation patterns.

lambda · serverless · performance +2

Advanced AWS Lambda patterns and cost optimization: Lambda Layers, VPC configuration, cross-account execution, and architectural decisions.

lambda · serverless · cost-optimization +5

Discover how Middy transforms Lambda development with middleware patterns, moving from repetitive boilerplate to clean, maintainable serverless functions

lambda · middleware · serverless +5

Hold AWS Lambda warm-path latency inside a 10 ms budget with runtime choice, connection reuse, bundle discipline, caching, and memory tuning.

aws · lambda · performance +4

Handle large file uploads with S3 presigned URLs instead of Lambda proxies: a full CDK stack, both handlers, the browser side, and the security trade-offs.

lambda · aws-cdk · aws +2

Multi-account AWS architecture patterns for resilient event-driven systems: account structure, EventBridge routing, and cross-service communication.

aws · eventbridge · multi-account +5

Why migrate from Serverless Framework to AWS CDK: licensing changes, architectural advantages, and when CDK becomes the better choice for your apps.

aws · aws-cdk · migration

Migrate Lambda functions, API Gateway, request validation, and error handling from Serverless Framework to AWS CDK with practical examples.

api-gateway · aws · aws-cdk +2

Master DynamoDB migrations, environment variable management, secrets handling, and VPC configurations when moving from Serverless Framework to AWS CDK.

aws · aws-cdk · dynamodb +4

Move from raw AWS SDK complexity to production-ready single-table design with practical DynamoDB Toolbox patterns, common pitfalls, and scaling decisions.

aws · dynamodb · serverless +1