Responsible AI GRC on AWS: Bedrock Agent Controls for Financial Services
AWS updated its responsible AI governance, risk, and compliance guidance for financial services on May 13, 2026. The useful part is not...
Latest Publications
SageMaker Data Agent with IAM Identity Center: Secure AI Data Workflows
AWS announced SageMaker Data Agent availability for IAM Identity Center domains on May 13, 2026. That is a quiet sentence with a...
Agentic App Modernization on AWS: Strands, Transform Custom, and Bedrock AgentCore
AWS published an agentic modernization architecture in May 2026 that combines Strands, AWS Transform custom, and Bedrock AgentCore. The tempting headline is...
GitLab Functions: Reusable CI Logic Beyond Scripts and Components
GitLab Functions are experimental, but they deserve attention because they target a real CI problem: teams keep copying the same shell logic...
EKS Backup and Restore with Velero: Least-Privilege DR for Kubernetes
AWS published a fresh EKS and Velero backup guide on May 12, 2026. The important part is not that Velero exists. Most...
Karpenter ARC Zonal Shift: EKS AZ Failure Runbook for Platform Teams
AWS added Karpenter support for Amazon Application Recovery Controller zonal shift on May 12, 2026. For EKS operators, that changes an AZ...
AWS Security Agent Full Repository Code Review: AI SAST or Architecture Reviewer?
AWS announced full repository code review for AWS Security Agent on May 12, 2026. That sounds like a bigger SAST scanner at...
Dirty Frag and Fragnesia: Linux LPE Response Plan for Cloud Fleets
On May 7, 2026, the Dirty Frag disclosure put Linux local privilege escalation back on the priority board. On May 13, Fragnesia...
OPA + Terraform: Policy-as-Code Guardrails in 2026
The first time someone accidentally created a p4d.24xlarge instance in production, we started taking policy-as-code seriously. No one meant to. The Terraform...
Terraform Testing in 2026: Native Tests, Terratest, and OPA
I shipped Terraform code without tests for years. Then a terraform apply deleted a production database because a conditional flipped. The resource...
AWS VPC Design Patterns in 2026: From Single Account to Multi-Account Landing Zone
The VPC decisions you make on day one will follow you for years. I’ve lived through the consequences—redesigning a network that was...
Migrate Jenkins to GitLab CI: The Complete 2026 Guide
I’ve migrated three organizations from Jenkins to GitLab CI. Here’s everything I wish someone had told me before starting.