Vercel vs Static Credentials: OIDC Push Comes With a Catch
Vercel wants Marketplace vendors off static credentials and onto OIDC by January 2027, while its own GitHub Actions deploys still need a long-lived token.
Automate GitHub CI/CD Failure Investigation with AWS DevOps Agent and CodePipeline
How to Prioritize AWS Health Alerts Using AWS User Notifications
Self-Hosting LLMs in Kubernetes with vLLM: The Data Residency Path
Navigating the ingress-NGINX Retirement: Migration Paths for Production Clusters
AWS Agent Toolkit: The 17-Line File That Unlocks 20+ Agent Skills
How to Set Up Amazon Cognito Multi-Region Replication for High Availability
AWS Continuum GA: Code Vulnerabilities Validated, Fixed as PRs
AWS Continuum for code vulnerabilities is GA: it proves which findings are exploitable, ranks them by business impact and opens fix PRs. What to test first.
Google Agent Compute Engine: A MicroVM Per Agent, Plus GKE
Google Agent Compute Engine gives each agent a hardware-isolated microVM, with Agent Substrate for GKE and wider governance. What platform teams should plan.
Azure DevOps Agentic Autofix Now Fixes Dependency Vulnerabilities
Copilot Autofix for Azure DevOps goes agentic, adding dependency fixes, third-party alerts and EPSS triage. What platform teams should set up first.
PHP2Shell: Two Critical PHP Flaws Platform Teams Must Patch Now
PHP2Shell covers two 9.2-severity PHP remote code execution flaws found with AI help. Patched versions, what auto-updates on Google Cloud, and what doesn't.
Amazon ECS Gateway: 25 Services on One ALB, Set Up Once
Amazon ECS Gateway lets platform teams define ingress once and share each ALB across 25 services. How it works, the limits, and when AWS teams should adopt it.
Kubernetes Autoscaling for AI: Why GPU Pods Stay Pending
Kubernetes autoscaling and the scheduler can disagree on which GPU node works, stranding pods with capacity free. How DRA, Kueue and new APIs close the gap.
Kubernetes Control Plane Scaling: 3 Limits, Not One Node Count
Kubernetes control plane scaling fails three ways: node count, churn and stored state. Why adding apiservers can backfire, and which seams fix each.
Air-Gapped Amazon ECR: 5 Decisions to Make Before the First Push
Air-gapped Amazon ECR migrations fail on drift, not scripts. Five decisions, from KMS keys to immutable tags, that repository creation templates lock in.
n8n on EKS: Why the Helm Chart Switch Needed a Full Cutover
Running n8n on EKS in production means queue mode, Postgres, Redis and S3. Why moving to the official Helm chart forced a full cutover, and how state survived.
API Gateway WebSocket Failover: Keep Sessions Across Regions
API Gateway WebSocket failover breaks every live connection. AWS's multi-Region pattern restores sessions using a canary, Route 53 and Global Tables.
DynamoDB Bulk Executor: Lessons From Building Glue Bulk Jobs
DynamoDB Bulk Executor's builders share what broke running bulk jobs on AWS Glue: cost estimates, Live Tail limits, error floods, rate limits. What to copy.
AWS Lambda Web Functions: 128 Requests per Environment
AWS Lambda Web Functions run Express or Next.js apps unchanged, with 128 concurrent requests per environment and CPU billing. What changes for serverless teams.
GPU Cost Attribution on Kubernetes: Bill on Memory, Not Compute
GPU cost attribution on Kubernetes breaks once pods share a GPU: DCGM can report 300% use. Why platform teams should split the bill on memory, not compute.
Google SRE Book Second Edition: What Changed in 10 Years
Google's SRE book second edition is a full rewrite for AI and platform engineering. What changed in SLOs, observability and team models, and who should read it.
kagent Agent Builder: Three Guardrails a Prompt Can't Replace
A kagent agent builder on Kubernetes turns one sentence into a running AI agent. A CNCF lab shows why allowlists, approval and RBAC, not prompts, keep it safe.
Cloudflare Buys Deno: Self-Hosted Workers Finally Get a Team
Cloudflare's Deno acquisition ends Deno Deploy and puts Ryan Dahl on self-hosted Workers. What merging workerd and Celld means for lock-in and migration.
Amazon ECS GPU Auto Repair: How It Replaces Failing GPUs
Amazon ECS Managed Instances now swap out failing NVIDIA GPU hosts automatically. How the DCGM checks, Xid codes, and 20% drain cap shape AWS GPU reliability.
Decision Model APIs: AWS and Ollama Back System One, Not OpenAI
AWS, Upstage, and Ollama now serve decision models through TypeSafe's System One API. Why a shared schema lets AI agents swap backends by changing a URL.
GitHub ReviewBench: Copilot Wins Its Own AI Code Review Test
Copilot tops GitHub's ReviewBench but ranks fourth on an independent leaderboard. What that gap means when choosing an AI code reviewer for CI/CD.
Valkey-Proxy: Percona Targets the Last Redis Migration Blocker
Self-hosted Valkey lacked the proxy managed Redis provides. Percona's open source Valkey-proxy lets platform teams cluster without app rewrites.
AWS Digital Sovereignty Lens: A Well-Architected Framework for Regulated Cloud Workloads
AWS's Digital Sovereignty Lens adds 21 questions and 37 best practices for data residency, access control, continuity, and auditability on regulated workloads.
AWS Prime Day 2026: The Infrastructure Numbers Behind Four Days of Peak Commerce
AWS's Prime Day 2026 numbers: 59 trillion DynamoDB requests and 2.3 trillion Lambda invocations a day. What that scale means for platform engineers.
AWS Bedrock Now Runs OpenAI Managed Agents Natively — What That Actually Means
AWS Bedrock now runs OpenAI Managed Agents natively — GPT-series models under IAM, VPC, and CloudWatch, without routing data through OpenAI's API endpoints.
One MCP Server Burned 18,000 Tokens Before Your Agent Did Anything. Here's the Fix.
One MCP server burned 9% of a 200K context window at initialization. Pi's Codemode pattern cuts that overhead to under 2% — and applies beyond Pi.