Skip to content
~/sph.sh

iam

5 posts

iam
Managing IAM Policies and Roles at Scale Without Hitting AWS Limits

The exact IAM size, attach, and quota limits you will hit at scale, and the scoped-policy, permission-boundary, and SCP structure that keeps you far from every one.

aws · iam · security +2

Build a RAG Agent with AWS Bedrock and CDK

Building a RAG agent on AWS Bedrock + Knowledge Bases + OpenSearch Serverless with CDK in TypeScript: architecture, IAM wiring, automated ingestion, and the chat UI.

aws-bedrock · aws-cdk · rag +3

AWS Control Tower Multi-Account Strategy: From Landing Zone to Enterprise Governance

A practical guide to AWS Control Tower multi-account strategy: OU structure, SCPs, RCPs, Account Factory for Terraform, IAM Identity Center, and security.

aws · multi-account · security +3

Multi-Account AWS Architecture: Event-Driven Systems at Scale

Multi-account AWS architecture patterns for resilient event-driven systems: account structure, EventBridge routing, and cross-service communication.

aws · eventbridge · multi-account +5

Migrating from Serverless Framework to AWS CDK: Part 5 - Authentication, Authorization, and IAM1/1

Implement robust authentication with Cognito, API Gateway authorizers, and fine-grained IAM policies when migrating from Serverless Framework to AWS CDK.

authorization · aws-cdk · authentication +2