Stack Archive · Specialized Directory

Cloud Platform Engineering

The platforms under the platforms — Kubernetes, infrastructure as code, and the engineering behind reliable cloud foundations.

249analyses
14blueprints
Oct 14updated
Latest Analysis 249All analysis →

From Jupyter Notebook to Production: How to Ship AI Systems That Actually Work

Over 85% of ML models never reach production. The gap isn't technical capability — it's the five infrastructure decisions that separate a working notebook from a reliable system.

· 3 min

Snowflake's CoCo: When Data Infrastructure Becomes the Agentic Layer

Snowflake introduced CoCo, a native coding agent that orchestrates data workflows from VS Code and Excel. The 'joyous product' framing is a signal about where enterprise AI value will concentrate.

· 2 min

AI Agents Have an Access Problem. HashiCorp's Answer Is Just-in-Time Everything.

Traditional IAM wasn't built for AI agents that access infrastructure in unpredictable, dynamic ways. HashiCorp lays out the five requirements for production agentic AI access — and how Boundary and Vault provide the just-in-time credential layer that agents actually need.

· 3 min

How Google SRE Is Using Agentic AI to Improve Operations

Google SRE deployed agentic AI across reliability design, anomaly detection, incident management, and autonomous mitigation — with governance principles for production-safe deployment.

· 3 min

Cloud Native Is Now AI-Native: Three Kubernetes Primitives That Don't Work for AI

A KubeCon roundtable with AWS, Google, and Microsoft engineers identified the specific Kubernetes gaps holding back production-ready AI — and the primitives being built to close them.

· 3 min

"The AI Did It" Won't Save You When EU Regulators Come Knocking

The EU Cyber Resilience Act's Chapter IV takes effect June 11, 2026. For enterprises deploying AI agents in Europe, 'the model made that decision' is not a defense — it's the scenario the regulation was written to close.

· 2 min

OpenAI GPT-5.5 and Codex Are Now on Amazon Bedrock — With AWS Security and Pay-Per-Token Pricing

OpenAI's GPT-5.5, GPT-5.4, and Codex are now generally available on Amazon Bedrock with IAM controls, VPC isolation, and pricing that matches OpenAI first-party rates. Here's what this means for AWS-first platform teams.

· 2 min

AWS Resilience Hub's Next Generation Brings AI-Powered Failure Mode Analysis to SRE

AWS Resilience Hub now uses generative AI to automatically identify failure modes against defined policies. Here's what changed and why it matters for platform engineering teams managing production resilience at scale.

· 2 min

The Three-Layer IDP That Cut Deployment Failures from 30% to 5%

Separating infrastructure, platform, and application layers in a Kubernetes IDP cut deployment failures from 30% to 5% and provisioning time from hours to 15 minutes. Here's the full architecture.

· 4 min

Why AWS Rebuilt OpenSearch: AI Agents Don't Query Like Humans

AWS rebuilt Amazon OpenSearch Serverless from the ground up for agentic AI workloads: 20x faster scaling, 60% lower cost vs. peak-provisioned clusters, and a new architecture built for agent query burst patterns.

· 2 min

Kubernetes Cloud Waste: The 65% Problem Nobody Wants to Fix

Kubernetes clusters run at 20-35% utilization. The tools to fix it deliver 50-70% savings. The blocker isn't tool maturity — it's operational trust, and the market is now building around that insight.

· 3 min

GPU Autoscaling on Kubernetes with KEDA: Why CPU Metrics Fail AI Inference Workloads

KEDA's GPU external scaler reads VRAM and compute utilization via NVML, enabling scale-to-zero for AI inference pods — a different model than CPU-based Kubernetes HPA.

· 3 min

AI Agent Observability: Why 79% of Teams Can't See What Their Agents Are Actually Doing

79% of organizations run AI agents but only 26% rate their observability as mature — and traditional APM can't trace multi-step agentic decision chains.

· 3 min

Jaeger v2.18.0: 8.6× Compression and Sub-100ms Traces with ClickHouse Storage

Jaeger v2.18.0 hits 8.6× compression on 10 million spans with ClickHouse — 100ms trace retrieval on a single node, now in alpha.

· 2 min

Migrating From ingress-nginx to Envoy Gateway Without Dropping a Single Request

How weighted Route 53 DNS records enable zero-downtime Kubernetes ingress migration from ingress-nginx to Envoy Gateway — and where the naive approach fails.

· 3 min

Kubernetes Policy Enforcement Is Happening at the Wrong Stage of Development

Review-time Kubernetes policy enforcement fills the gap between IDE linters and admission controllers. Here's how the four-layer model and GuardOn address it.

· 3 min

Azure Kubernetes Fleet Manager Gets Cilium Cross-Cluster Networking

Azure Kubernetes Fleet Manager now spans clusters with Cilium-based cross-cluster networking. What changes for multi-cluster workload architecture.

· 2 min

End-to-End Ingress Tracing for Multi-Tenant SaaS: Why Adoption Is the Hard Part

Trace ID + Span ID propagation for multi-tenant SaaS on Kubernetes. Why the organizational adoption challenge beats the technical implementation every time.

· 3 min

OpenTelemetry Hits GA: Why the CNCF Graduation Matters for AI Platform Teams

OpenTelemetry graduated CNCF on May 11 with 1.36B JS downloads/year and Anthropic among its users. Here's what the AI era means for observability architecture.

· 3 min

Production RAG: Why Confident Answers at Scale Are Often Wrong

40–60% of RAG implementations never reach production. Those that do often return confident wrong answers as corpus size grows. Here's the architectural reason.

· 3 min

AWS CDK Mixins: Composable Infrastructure Without Construct Rewrites

CDK Mixins, now GA in CDK v2.241.0, let platform teams apply logging, encryption, and compliance features to any construct with a single .with() call — without touching existing definitions.

· 3 min

Mac Mini: The Accidental Infrastructure Platform for AI Agents

Three independent AI agent runtimes converged on Mac mini as reference hardware. What happens when a $600 desktop becomes the default agentic AI server.

· 3 min

Agentic Dev Tools: Why Audit Trails Can't Keep Up

As AI coding agents open merge requests and trigger pipelines, DevSecOps teams face a new compliance gap: the agents act, but the paper trail doesn't follow.

· 3 min

FinOps Is Optimizing the Wrong Budget

Finout and Google Cloud FinOps: cloud bill optimization is solved. The new challenge is AI token economics, where traditional FinOps playbooks don't apply.

· 3 min

Newsletter coming soon.

Curated digests across AI, biohacking, photography, travel, and more. Be the first to know when we launch.