Three Layers to Stop ML Data Exfiltration in AWS SageMaker Environments
iBusiness built a three-layered security architecture using SageMaker AI, WorkSpaces Secure Browser, and VPC isolation — cutting per-user cost 80% while closing every major data movement path.
Okta Brings AI Agent Governance Inside FedRAMP Boundaries First
Okta is now the first identity platform to extend AI agent lifecycle management into FedRAMP and HIPAA environments — meaning federal agencies can finally deploy agents against regulated data.
Workday's Argument: AI Guardrails Must Live at the Inference Layer
Workday CTO Gabe Monroy argues that for HR and payroll data, agent gateways and external wrappers sit at the wrong layer — guardrails have to be wired into inference itself.
Coding Agents All Agree: Run the Code. The Debate Is What It Runs Against.
Runtime verification is now the baseline for AI coding agents. Greptile, Cursor, and Devin agree on execution — they disagree on what it runs against, and that choice matters at scale.
AWS, Google, and Microsoft All Agree the Session Is the New Unit of Compute. They Can't Agree on How to Isolate It.
All three major clouds have independently arrived at the same architectural conclusion: the AI agent session, not the container or the function invocation, is the fundamental unit of compute. Their isolation approaches couldn't be more different.
Codeplain's Argument: Code Should Be Regenerated, Not Maintained
Dušan Omerčević's Codeplain treats code as disposable output and specs as the durable artifact. In the age of AI-assisted development, the case for regenerative development is harder to dismiss than it sounds.
How to Cut AI Costs by 80%: What Port.io's 12,000-Query Study Found
Port.io ran 12,000 queries across three models and found that structured context management — a 'Context Lake' approach — cut costs by 80% compared to unstructured MCP-only setups. The tradeoffs are not what most teams expect.
Your AI Pipeline Is Broken and Your Dashboards Don't Know It
Traditional monitoring shows binary pass/fail. LLM pipelines fail probabilistically — silently returning plausible but wrong outputs while every health metric shows green. Here's what to instrument instead.
AWS Agent Toolkit: Why Your Agent Is Ignoring 20+ Skills Without This One File
AWS launched an Agent Toolkit with 20+ packaged skills for coding agents, but most developers miss the rules file that tells agents to use them — causing silent fallback to training data instead of authoritative AWS guidance.
AWS DevOps Agent Adds Release Management: Pre-Production Assessment Before Code Merges
AWS DevOps Agent's new release management capabilities add release readiness review and autonomous release testing — two preview features that assess code changes in isolated environments before they reach production.
AWS Security Agent Adds STRIDE Threat Modeling, Kiro Power, and Claude Code Plugin
AWS Security Agent now generates STRIDE-based threat models from design docs or source code, surfaces findings in Kiro and Claude Code IDEs, and adds full-repo code scanning with remediation — moving security earlier in the development workflow.
Building a Cluster-Aware AI Agent with Kubernetes, Argo CD, and GitOps
A CNCF reference architecture shows how to run an AI agent inside a Kubernetes cluster that observes live state, diagnoses pods via RAG, and delivers updates through a full GitOps pipeline — without write access to the cluster.
Amazon Bedrock Managed Knowledge Base Turns Enterprise RAG Into a Managed Primitive
Bedrock Managed Knowledge Base abstracts the full RAG stack — six native connectors, auto-selected embeddings and reranker, Agentic Retriever for multi-hop queries, and MCP exposure via AgentCore Gateway — so teams build retrieval applications without managing the pipeline.
Amazon Launches Web Search API for AI Agents Inside AWS: $7/1K Queries, Zero Data Egress
AgentCore Web Search gives AI agents access to current web knowledge via Amazon's search infrastructure — $7 per 1,000 queries, queries never leave AWS, returns snippets and publication dates, MCP connector via AgentCore Gateway. GA in US East as of June 17, 2026.
AWS Lambda MicroVMs: Stateful Sandboxes for the AI-Generated Code Era
AWS Lambda MicroVMs give every user their own isolated VM with state preserved up to 8 hours — solving the multi-tenant code execution problem regular Lambda can't touch.
Bedrock + Verified Permissions: Two-Layer Authorization for Multi-Tenant RAG
AWS's reference architecture solves enterprise RAG's hardest problem — keeping department data siloed without duplicating infrastructure — using Cedar policies and independent authorization layers.
Agentjacking: How a Public Sentry Key Hijacks Claude Code, Cursor, and Codex
A newly documented attack called agentjacking exploits Sentry's MCP integration to inject fake bug reports into AI coding agents, which then execute malicious commands with developer-level privileges.
50% of Your Metrics Are Never Queried: The Case for Sustainable Observability
CNCF's telemetry panel found that half of collected metrics are never acted on. Here's the framework for designing observability pipelines that produce signal, not storage overhead.
AWS DevOps Agent + LaunchDarkly: Feature Flags as Incident Response
AWS DevOps Agent now connects to LaunchDarkly's MCP server, enabling agentic feature flag orchestration at deployment and during incidents — flag-based containment in minutes, not rollbacks.
AWS DevOps Agent and Datadog MCP Server Are Both Generally Available — Here's What Changed
Both tools exit preview simultaneously: DevOps Agent now coordinates with Slack, PagerDuty, and ServiceNow; Datadog's MCP Server routes AI agent prompts to live observability data. Together they close the detection-to-prevention loop.
AWS Kiro IDE Now Integrates DevOps Agent: Incident Response Without Leaving Your Editor
The AWS DevOps Agent integration in Kiro brings CloudWatch metrics, X-Ray traces, deployment history, and cost optimization directly into the IDE — collapsing the context switch between writing code and investigating production issues.
AWS Summit New York 2026: What Actually Matters for Platform Engineers
AWS Summit New York 2026 delivered 15+ announcements. Here's what platform engineers should pay attention to: autonomous agents going GA, ECS 4.2x faster scaling, and the agentic CI/CD stack taking shape.
MCP's Missing Enterprise Authorization Layer Is Now Filled
The Enterprise-Managed Authorization extension for the Model Context Protocol eliminates per-server OAuth consent prompts, letting IT admins provision MCP server access centrally through existing identity providers.
AWS Summit New York 2026: Where Agentic AI Becomes Infrastructure
AWS's June 2026 Summit delivered seven announcements with one shared thesis: agentic AI is no longer a feature layer — it's a new runtime for how production systems operate.