Stack Archive · Specialized Directory

Cloud Platform Engineering

The platforms under the platforms — Kubernetes, infrastructure as code, and the engineering behind reliable cloud foundations.

259analyses
14blueprints
Oct 24updated
Latest Analysis 259All analysis →

How to Track Generative AI Costs by Department Using Amazon Bedrock Inference Profiles

Amazon Bedrock application inference profiles let engineering, HR, and finance teams share a single foundation model while seeing per-department spend in Cost Explorer — at zero additional cost. Here's how the architecture works.

· 3 min

Three AWS Strategies for Disaster Recovery Under Data Residency Requirements

Meeting data residency regulations while maintaining disaster recovery capability forces a choice between three architecturally distinct approaches. AWS's framework maps the tradeoffs clearly — here's how to navigate them.

· 3 min

Adobe Firefly Cut GPU Metric Query Times 28x by Moving to Amazon Managed Prometheus

Adobe moved 2 million GPU time-series metrics from self-hosted Prometheus to Amazon's managed service. 24-hour queries that took 2 minutes now complete in 10 seconds — and the team got there without replacing their existing stack.

· 3 min

Text2SQL at 80% Lower Latency: What AWS's Template Cache Actually Does

Parameterized query templates cut Text2SQL latency 80% and token consumption 50% in production. Here's the architecture behind the numbers and what it means for AI-powered data access at scale.

· 3 min

Databricks Acquires Electric: Every AI Agent Gets Its Own Postgres Database

Databricks bought Electric, the startup behind WASM-based PGlite, to give AI agents isolated Postgres instances in their sandboxes — synchronizing back to Lakebase.

· 3 min

Pulling Multi-Gigabyte Container Images in Seconds on Amazon EKS

SOCI lazy loading cuts a 1.3 GB container image pull from 20 seconds to 2.8 seconds on EKS — with no image format changes required. Here's the mechanism and how to enable it.

· 2 min

How to Pull Multi-Gigabyte Container Images in Seconds on Amazon EKS

SOCI (Seekable OCI) lazy loading lets EKS pods start before the full image is pulled — cutting a 10 GB image from minutes to seconds. Here's how the technique works and how to deploy it.

· 3 min

How to Bring Organizational Knowledge Into Kiro Using Amazon Bedrock and MCP

AWS shows how to connect Kiro to Amazon Bedrock Knowledge Bases via MCP so developers get instant, cited answers about ADRs, API specs, and coding standards without leaving their editor.

· 4 min

Platform Engineering ROI: The Real Cost of Building Your Own Internal Platform

A DIY internal developer platform runs $7.5M/year at enterprise scale. The ROI is real but requires 50+ engineers to capture. Here's how to read the math before committing.

· 3 min

AWS DevOps Agent + SageMaker HyperPod: Automated Incident Triage at ML Scale

HyperPod self-heals hardware faults automatically, but configuration issues and stuck pods still require 30-45 minutes of manual triage. AWS's DevOps Agent cuts that to minutes.

· 3 min

The npm Attack That Turned Provenance Attestations Into Camouflage

The August 2026 npm worm compromised packages with 150M+ weekly downloads by publishing from legitimate GitHub Actions runners — making valid provenance attestations a false safety signal.

· 3 min

Shadow AI in CI/CD: The Six-Stage Threat Model from Laptop to Kubernetes

CNCF maps six attack surfaces where unapproved AI agents gain privileged access in the software pipeline — every enterprise has at least one gap, and CI credentials are the target.

· 4 min

AWS Kiro's Agent Client Protocol: The LSP Moment for AI Coding Agents

AWS rebuilt Kiro around the Agent Client Protocol, separating coding agents from editors. Here's why this LSP-like shift matters for platform teams.

· 2 min

Anthropic Says: One Worktree Per Agent. Your Infrastructure Says: Not So Fast.

Anthropic recommends one git worktree per agent. That solves the file layer — but platform teams running multi-agent workflows still face runtime collisions.

· 2 min

Bedrock AgentCore Runtime Instances: Persistent Compute for Production AI Agents

AWS launched runtime instances in Bedrock AgentCore — managed EC2 infrastructure with GPU support, multi-agent collaboration, and sessions lasting up to 14 days for long-running agent workflows.

· 2 min

DynamoDB Now Supports Vector Search: No Separate Database Required

Amazon DynamoDB added native vector search with single-digit millisecond latency, 99%+ recall, and support for trillions of vectors — eliminating the sync pipeline that separate vector DBs require.

· 2 min

AWS IaC MCP Server: What CloudFormation Development Looks Like with Unified AI Tooling

AWS's IaC MCP Server consolidates CloudFormation documentation search, syntax validation, compliance checking, and runtime troubleshooting into one conversational interface. Here's what that workflow change actually delivers.

· 3 min

OpenCost 1.121.0: Now You Can See What Your Self-Hosted AI Models Actually Cost Per Token

OpenCost's new inference cost tracking shows the real per-token cost of running models on Kubernetes — including the KV cache effect and why low utilization makes self-hosting more expensive than it looks.

· 3 min

5 AWS Updates That Matter This Week: Bedrock Price Cuts, Prometheus, IAM

AWS cut Bedrock GPT-5.6 pricing up to 80%, shipped managed Prometheus collectors for CloudWatch, and added multi-region IAM Identity Center — here's what to actually act on.

· 2 min

Why Queue Depth Beats CPU as a Kubernetes Autoscaling Signal

KEDA's SQS-based autoscaling replaces CPU and memory metrics with queue backlog — the metric that actually reflects whether an event-driven workload is under load.

· 3 min

Admission Webhooks Have a Bypass Problem — Runtime Verification Fixes It

A new NRI plugin moves supply chain verification below the Kubernetes API server, closing the static-pod and kubelet-bypass gaps that admission webhooks like Kyverno and OPA Gatekeeper can't cover.

· 3 min

AWS DevOps Agent + Wiz: Same Alert, Three Different Incidents

AWS DevOps Agent now queries Wiz over MCP mid-investigation, turning an ambiguous CPU spike into a confirmed security incident, an operational fix, or a coverage gap.

· 3 min

The Practical Guide to EC2 Image Builder and AWS CDK for Studio-Scale AMI Management

Company 3's post-production teams eliminated custom-resource workarounds for AMI versioning by adopting EC2 Image Builder auto-versioning and CDK L2 constructs.

· 3 min

AWS's Latest Roundup Is Really About De-Risking Agents in Production

Local Zone latency in Athens, zero data retention for Claude Opus 5, and a year-long pause window for Lambda workflows — three AWS releases with one thread: agent compliance.

· 3 min

Newsletter coming soon.

Curated digests across AI, biohacking, photography, travel, and more. Be the first to know when we launch.