Securing Active Directory on AWS: A Practical Guide to AD Tiering with ANSSI and AWS SRA Alignment
How to map the ANSSI AD tiering model onto AWS, why Managed AD may not be enough for Tier 0, and which AWS security services close the compliance gaps.
Building a RAG System That Actually Works: Chunking, Vector Engines, and Testing
Most RAG tutorials stop at 'put vectors in a database.' This post covers what actually determines quality: how you chunk documents, which vector search engine to pick, and how to measure and iterate on retrieval performance using Bedrock Knowledge Bases and LLM-as-judge evaluation.
Vector Search vs Semantic Search: They're Not the Same Thing
Vector search, semantic search, keyword search, hybrid search â these terms get used interchangeably but they mean different things. This post breaks down what each actually does, when each matters, and why hybrid search wins for RAG.
HTTPS on AWS Lightsail: Setting Up Let's Encrypt with Apache and Route 53
Step-by-step guide to configuring a custom subdomain with Route 53 and securing an AWS Lightsail instance with a free TLS certificate using Let's Encrypt and Certbot.
Migrating 180+ Public Certificates to AWS ACM Exportable Certificates
A practical guide to replacing a third-party CA with ACM exportable public certificates â covering pricing, automation patterns, industry validity changes, and the gotchas nobody mentions.
When Your Keys Get Locked In: Navigating AWS KMS Import Limitations
AWS KMS doesn't allow key material export by design. When an external PKI partner generates keys but doesn't retain them, you're stuck. Here are the four AWS alternatives â CloudHSM, XKS, Private CA, and fixing the process â with a decision framework to pick the right one.
OpenClaw vs NanoBot vs PicoClaw vs TinyClaw: Four Approaches to Self-Hosted AI Assistants
A deep architectural comparison of four open-source frameworks that turn messaging apps into AI assistant interfaces â from a 349-file TypeScript monolith to a 10MB Go binary that runs on a $10 board.
Inside AWS Security Agent: How Multi-Agent Systems Automate Penetration Testing
A deep dive into the multi-agent architecture behind AWS Security Agent's automated penetration testing â from specialized agent swarms to assertion-based validation.
Your Security Team Wants to Privatize Your App â Here's What They Actually Need
When your security team says 'make it private', they usually mean 'make it secure.' This post compares four approaches â VPC privatization, WAF IP allowlisting, CloudFront + auth hardening, and AWS Verified Access â and explains why Zero Trust beats network perimeters for internal applications.
MPLS vs SD-WAN vs CloudWAN: Enterprise Networking Explained Simply
A visual, jargon-free guide comparing MPLS, SD-WAN, and AWS CloudWAN for enterprise networking â with analogies, comparison tables, and an architecture diagram showing how the three layers connect.
Python, Transformers, and SageMaker: A Practical Guide for Cloud Engineers
Everything a cloud/AWS engineer needs to know about Python, the Hugging Face Transformers framework, SageMaker integration, quantization, CUDA, and AWS Inferentia â without being a data scientist.
AWS Weekly Roundup â February 2026: AgentCore, Bedrock, EC2 and More
A curated summary of the most important AWS announcements from February 2026 â from Bedrock AgentCore deep dives to new EC2 instances and the European Sovereign Cloud.
Fine-Tuning Mistral with Transformers and Serving with vLLM on AWS
End-to-end guide: fine-tune Mistral models with LoRA using Hugging Face Transformers, then deploy at scale with vLLM on AWS â from training to production serving on SageMaker, ECS, or Bedrock.
Deploying a Personal AI Assistant on AWS with Bedrock AgentCore Runtime
A hands-on walkthrough of deploying OpenClaw on AWS using AgentCore Runtime for serverless agent execution, Graviton ARM instances, and multi-model Bedrock access â from CloudFormation template to customizing the agent's personality.
Replacing Legacy SFTP with AWS Transfer Family in a Multi-Account Landing Zone
How to architect a secure, multi-tenant SFTP service across AWS accounts using Transfer Family, NLB, Transit Gateway, and per-partner S3 isolation.
RAG on AWS: Which Vector Store Is Right for You?
AWS now offers 9 different ways to store and search vectors for RAG workloads. This guide compares every option through the Well-Architected Framework to help you pick the right one.
How to Track and Cap AI Spending per Team with Amazon Bedrock
AI platform teams need governance before scaling. Learn how to use Amazon Bedrock inference profiles, AWS Budgets, and a proactive cost control pattern to track, allocate, and cap AI spending per team.
Cloud Sovereignty Deep Dive - AWS KMS Control Plane Analysis
XKS protects key material from extraction, but does it protect against legal compulsion to use those keys? Updated with AWS European Sovereign Cloud (GA January 2026).
Managing Local Storage in the AI Development Era
How to identify, clean, and monitor the hidden storage consumers that come with AI-assisted development tools like Claude Code and Kiro
Building ReachyArchi: A Voice-Driven Robotic AWS Solutions Architect
How we combined a Reachy humanoid robot with Amazon Bedrock Nova Sonic to create an AI-powered Solutions Architect for AWS Summits
AWS Backup Cost Analysis
EBS snapshot costs were growing month-over-month with no clear explanation or optimization strategy.
How I Built This Blog with AI-DLC: A New Way to Develop Software with AI
Discover AI-DLC (AI Development Lifecycle), a structured framework for AI-assisted software development. Learn how I used it to build this blog from scratch and how it enables continuous iteration.
Getting Started with Amazon Bedrock
A practical guide to building generative AI applications with Amazon Bedrock
Browser Automation Agents - Amazon Bedrock AgentCore
Enterprise workflows often require interacting with web applications that lack APIs. Traditional automation scripts are brittle and break when UIs change.
Time Series Forecasting App - Amazon Chronos-2
Building a production forecasting application without the complexity of traditional ML model training and feature engineering.