AWS Lambda Durable Functions vs Step Functions: The Serverless Workflow Decision Framework
AWS Lambda Durable Functions change a decision that used to be almost automatic. For years, if a serverless workflow needed to wait,...
Latest Publications
OpenAI on Amazon Bedrock: Codex, GPT-5.5, and Managed Agents for AWS Teams
On April 28, 2026, AWS announced something that changes the enterprise AI architecture conversation: OpenAI models, Codex on Amazon Bedrock, and Amazon...
Terraform for_each vs count: When to Use Each in 2026
I’ve made the mistake of using count where I should have used for_each. Most people have. You end up with a Terraform...
OpenTelemetry + CloudWatch: Practical Observability for AWS in 2026
I used to instrument AWS services the hard way. AWS X-Ray SDK here, CloudWatch Logs there, custom metrics scattered across a dozen...
Cloudflare Terraform Provider v4 to v5: tf-migrate Without State Surgery
Cloudflare released cf-terraforming tf-migrate on April 24, 2026, and the target audience is every team that looked at the Cloudflare Terraform provider...
Amazon Bedrock Trust and Safety: A Production Checklist for AI Apps
AWS published Bedrock trust-and-safety guidance on April 29, 2026, and two numbers should catch every AI platform team’s attention: AWS cites an...
IAM Identity Center Session Tags: Practical ABAC with Entra ID and AWS
AWS published a practical IAM Identity Center session-tags walkthrough on April 28, 2026, and the pattern is worth copying: take attributes from...
Terraform 1.15: Dynamic Module Sources, Backend Validation, and Upgrade Gotchas
Terraform 1.15 is the kind of release that can break a quiet CI lane before anyone notices the changelog. The headline features...
AWS Client VPN Native Transit Gateway Attachment: Remote Access Without the VPN VPC
AWS Client VPN can now attach natively to AWS Transit Gateway. AWS announced the integration on April 23, 2026, and the practical...
Kubelet Fine-Grained Authorization: Kill the nodes/proxy Anti-Pattern
Kubernetes v1.36 makes fine-grained kubelet API authorization generally available. That sounds dry. It is not. It is the upstream answer to a...
Kubernetes v1.36 User Namespaces GA: Rootless Isolation That Actually Changes Risk
Kubernetes v1.36 promotes User Namespaces to GA, and the important field is only two words: hostUsers: false. That setting lets a pod...
GitHub Copilot Usage-Based Billing: Budget Controls for DevOps Teams
GitHub Copilot changes its billing model on June 1, 2026. Premium request units go away, GitHub AI Credits become the unit of...