Personal Tech Blog | hidekazu-konishi.com

Here I plan to share my technical knowledge and experience, and my interests in the subject. Note: this tech blog is a space for sharing my personal views and ideas, and it does not represent the opinions of any company or organization I am affiliated with.
The main purpose of this blog is to deepen my own technical skills and knowledge, to create an archive where I can record and reflect on what I have learned and experienced, and to share information.
My interests span Amazon Web Services (AWS), AI-augmented development, AI agent engineering, cloud architecture, and related topics including DevOps, MLOps, AIOps, and Generative AI.
The articles are based on my personal learning and practical experience. Of course, I am not perfect, so there may be errors or inadequacies in the articles. I hope you will enjoy this technical blog with that in mind. Thank you in advance.

Personal Tech Blog Entries

First Published:
Last Updated:

  1. What Can Be Made Public on AWS - Storage and Data, the Block Public Access Family, and What Each Switch Does Not Promise
  2. Resource-Based Policies by Service on AWS - Where the Second Policy Lives, What It Can Say, and When It Is Required
  3. Where the Logs Come From on AWS - Identity and the Control Plane, What Is On by Default, and What Is Not Recorded at All
  4. Replication Topologies on Amazon Aurora MySQL - Multi-Source Channels, Delayed Replicas, and the Window You Build Yourself
  5. Amazon ECS Deployment Lifecycle - Early Success Criteria, Deferred Cleanup, and Managed Daemon Rollouts
  6. Rolling Back an Amazon EKS Cluster Version - What Decides Eligibility, What Rollback Readiness Insights Do Not Decide, and Where the Primary Sources Disagree
  7. AWS Agent Registry and the Agentic Resource Discovery Specification - Governance Before Discovery
  8. AWS WAF AI Traffic Monetization - Returning HTTP 402, and What It Puts on the Request Path
  9. AWS DevOps Agent - What It Investigates by Default, What Needs Approval, and What It Refuses Even When the Role Allows It
  10. AWS Interconnect - What One Managed Object Replaces in Multicloud and Last Mile Connectivity
  11. How Amazon S3 Files Keeps a Bucket and a File System in Sync - The Export Window, Close-to-Open Consistency, and Where the Losing Write Goes
  12. Amazon Bedrock AgentCore Harness - The Managed Agent Loop and the Export-to-Code Boundary
  13. Computer Time and Leap Seconds History and Timeline - UT1, TAI, UTC, Leap Smearing, and Who Decides When a Second Is Added
  14. LLM Benchmark History and Timeline - Who Built Each Yardstick, Who Declared It Saturated, and What Replaced It
  15. AWS Service Quotas History and Timeline - From Service Limits to Quotas, the Defaults That Moved, and Where Each Change Was Recorded
  16. API Design Paradigms History and Timeline - XML-RPC, SOAP, REST, gRPC, GraphQL, and OpenAPI
  17. Microsoft Identity History and Timeline - Active Directory, AD FS, Microsoft Entra ID, and the Bridge Between Them
  18. AWS History and Timeline regarding AWS Transit Gateway - Overview, Functions, Features, Summary of Updates, and Introduction
  19. Certificate Distribution in Kubernetes with AWS Private CA - Issue, Request, Store, Consume, and the Layer Where Renewal Stops
  20. Amazon Linux History and Timeline - Amazon Linux AMI, Amazon Linux 2, AL2023, AL2027, and the Clocks That Do Not Move Your Instances
  21. AWS Security Defaults History - Block Public Access, Default Encryption, IMDSv2, and How Far Each Changed Default Reached
  22. Controlling How Much a Model Thinks - Why the Same Request Means Different Things Across Model Generations, and What the Output Cap Actually Counts
  23. Sharing One GPU on Amazon EKS - Where the Split Is Declared, Where It Is Enforced, and What Each Method Leaves Shared
  24. Internal Developer Platforms on AWS - What Narrows the Choices, What Enforces the Permissions, and What Still Gets Around Both
  25. Synthetic Monitoring and Real User Monitoring on AWS - What a Canary Run Proves, What a Real Session Proves, and What Neither One Can Tell You
  26. Continuous Profiling on AWS - Which Clock the Flame Graph Is Showing You, What Runtime Metrics Cannot Replace, and What Sampling Never Sees
  27. Orchestrating Regional Failover with Amazon Application Recovery Controller Region Switch - What Plan Evaluation Checks, Which Region the Plan Runs From, and What a Green Status Does Not Guarantee
  28. CI/CD Tools History and Timeline - Trademarks, Acquisitions, Foundations, and Where the Build Runs
  29. Observability and OpenTelemetry History and Timeline - Competing Specifications, a Foundation Merger, and the Path to a Single Standard
  30. Terraform and OpenTofu History and Timeline - A License Clause, a Fork, a Foundation, and an Acquisition
  31. PostgreSQL Autovacuum, Bloat, and Planner Statistics on Aurora and RDS - Why the Defaults Stop Being Enough, and What to Tune First
  32. The Iceberg Catalog Layer on AWS - Catalog Federation, the REST Catalog API, and Scoped Credential Vending
  33. Change Data Capture on AWS Beyond Zero-ETL - Logical Decoding, Streaming Connectors, and the Guarantees Each Capture Point Gives You
  34. Running VMware Workloads on AWS with Amazon EVS - What Carries Over, What the VPC Makes You Rebuild, and Who Installs VCF
  35. Running Windows Server Workloads on AWS - What Carries Over, Why the License Decides the Tenancy, and Which Path Into the Domain
  36. Data Pipeline Orchestration on AWS - What Carries Over, What the Runtime Makes You Rebuild, and Who Owns the Airflow Version
  37. Agentic Payments on AWS - Where the Spending Limit Is Enforced, and What It Does Not Stop
  38. Workload Isolation Levels on Amazon EKS - Which Level You Stopped At, and What That Level Does Not Stop
  39. Detection Engineering on AWS - What a Custom Source Must Satisfy Before a Detection Can Be Written, and What the Detection Still Does Not See
  40. Model Customization on Amazon Bedrock - What Each Method Demands as Input, and What It Takes to Call the Model You Built
  41. Distributed Training Resilience on AWS - Where the Checkpoint Lives, How Far a Failure Sends You Back, and What Each Mechanism Requires
  42. Programming AWS Trainium with the Neuron Kernel Interface - What the Compiler Stops Deciding for You, Which Names Do Which Jobs, and When Not to Descend
  43. AWS Network and Application Protection Decision Guide - Where AWS WAF, AWS Shield, AWS Network Firewall, and AWS Firewall Manager Sit on the Request Path and What Each One Does Not Stop
  44. AWS History and Timeline regarding AWS Shield and AWS Firewall Manager - Overview, Functions, Features, Summary of Updates, and Introduction
  45. AWS History and Timeline regarding AWS Network Firewall - Overview, Functions, Features, Summary of Updates, and Introduction
  46. Amazon EFS Performance Engineering - Throughput Modes, IOPS Ceilings, Per-Client Limits, and Burst Credits
  47. Batch and HPC Job Scheduling on AWS - Job Queues, Fair-Share Policies, Multi-Node Parallel Constraints, and the Slurm Route
  48. Sharding Aurora PostgreSQL with Limitless Database - Table Types, Shard Keys, Single-Shard Optimization, and What You Cannot Change Later
  49. Apache Iceberg V3 on AWS - Which Engines Read Format Version 3, Where the Official Support Matrices Disagree, and What to Check Before You Upgrade
  50. Running Apache Spark on AWS - Where the Billed Clock Starts, What Gets Measured, and What You Rewrite When You Move a Job Between EMR Serverless, EMR on EKS, and AWS Glue
  51. Data Quality and Data Contracts on AWS - Where to Evaluate, What Each Failure Action Does to Your Data, and Why the Default Is to Keep Going
  52. AWS History and Timeline regarding AWS Glue - Overview, Functions, Features, Summary of Updates, and Introduction
  53. AWS History and Timeline regarding Amazon Athena - Overview, Functions, Features, Summary of Updates, and Introduction
  54. Cloud Data Warehouse History and Timeline - Separation of Storage and Compute, Open Table Formats, and Convergence with the Data Lake
  55. What AWS Transform Automates and What Stays Human - Agentic and Self-Directed Paths, the Handoff Points That Are Designed In, and What Functional Equivalence Testing Actually Covers
  56. Transaction Isolation on AWS Databases - Same Level Name, Different Anomalies, and the Statement That Changes Nothing
  57. Load Testing on AWS - Which Policy Actually Applies, Why the Load Generator Runs Out First, and What a One-Minute Metric Hides
  58. Life After Ingress NGINX on Amazon EKS - Where the Upstream and AWS Disagree About the Order of Migration, and What GatewayClass Actually Decides
  59. Gang Scheduling and Dynamic Resource Allocation on Amazon EKS - Why One Half of the Vocabulary Is Still Alpha, and What Decides Which Device Allocation Path You Get
  60. eBPF on Amazon EKS - What Loads Into Your Nodes, When a Network Policy Starts Enforcing, and Where the Coverage Stops
  61. Passkeys and WebAuthn in Practice - Discoverable Credentials, Synced Versus Device-Bound Keys, and Why Account Recovery Decides the Design
  62. Hardening GitHub Actions for AWS Deployments - Workflow Permissions, Untrusted Triggers, Action Pinning, and What the Trust Policy Cannot Catch
  63. Policy Engines Compared - What IAM, Cedar, Rego, and Kyverno Do When Nothing Matches, When an Input Is Missing, and When the Engine Never Answers
  64. Reproducible LLM Inference - Batch Invariance, the Cost of Determinism, and Where Bitwise Identity Is Actually Required
  65. Speculative Decoding and Draft Models on AWS - Acceptance Rates, Which Methods Preserve the Output Distribution, and What the Managed Draft Model Takes Away
  66. LLM Weight Quantization on AWS - Weight-Only and Activation Formats, What Each Costs in Accuracy, and When the Platform Quantizes for You
  67. Zero-ETL Integrations on AWS - The Source and Target Matrix Across Amazon Redshift, AWS Glue, and Amazon OpenSearch Service
  68. Heterogeneous Database Migration on AWS - Schema Conversion, Full Load with CDC, Data Validation, and a Cutover You Can Reverse
  69. Amazon MSK Broker Types and Storage Tiers - What Standard Brokers, Express Brokers, and MSK Serverless Each Take Away
  70. Identity-Aware Data Access on AWS - Propagating Workforce Identity from IAM Identity Center to Lake Formation and S3 Access Grants
  71. AWS IAM Inbound Workload Federation - IAM Roles Anywhere, OIDC, and SPIFFE Converging on One Trust Policy Condition
  72. Identity Lifecycle for AI Agents - Registration, Delegated Authorization, Access Review, and What Retirement Leaves Behind
  73. Threat Detection for AI Workloads on AWS - What GuardDuty AI Protection Detects, What It Does Not, and How to Read a Finding
  74. AI-Assisted Security Testing on AWS - What You Approve, What You Can Only Stop, and What the Findings List Hides by Default
  75. Amazon EKS Control Plane Configuration - What You Can Set, What Blocks the Way Back, and How Far Each Setting Reaches
  76. Disaggregated Prefill and Decode for LLM Serving on AWS - The KV Transfer, the Routing Threshold, and What Disaggregation Does Not Fix
  77. Express Mode and Pre-Deployment Validation in AWS CloudFormation - What Completion Stopped Meaning, What Rollback Now Defaults To, and Which Checks Silently Skip
  78. Migrating to the Stateless Model Context Protocol - What Breaks in Session-Based Servers and What Replaces It
  79. OWASP Top 10 for Large Language Model Applications Mapped to AWS Controls - What Each Control Covers, Where It Stops, and What the Application Still Owns
  80. AWS IAM AccessDenied Reference - Reading the Error and Locating the Deciding Statement
  81. Agent Sandboxing and Blast-Radius Isolation on AWS - Choosing the Unit of Each Containment Boundary and What Each One Does Not Stop
  82. Amazon EKS Capabilities - Managed Argo CD, ACK, and kro, and What Changes When the Controllers Move Off Your Cluster
  83. Software Supply Chain Security on AWS - Signing, Attestation, and Admission Control
  84. AI Bill of Materials on AWS - Discovering Models, Agents, and External Endpoints
  85. Content Provenance for AI-Generated Media - C2PA, Watermarking, and Machine-Readable Marking
  86. Threat Modeling Generative AI Applications on AWS - STRIDE for RAG, Agents, and Tool Use
  87. Zero-Downtime Database Change on RDS and Aurora - Blue/Green Deployments, Upgrades, and Rollback Design
  88. AWS Service Lifecycle States - Maintenance, Sunset, Full Shutdown, and What Each One Takes Away
  89. AWS Lambda Managed Instances - Capacity Providers and the Multi-Concurrency Trap
  90. Surviving Forced Maintenance on AWS - Retirements, Grace Periods, and Health-Driven Operations
  91. OWASP Top 10 for Agentic Applications Mapped to AWS Controls - What Each Control Mitigates and What Residual Risk Remains
  92. VPC Encryption Controls - Auditing and Enforcing Encryption in Transit
  93. OpenTelemetry-Native Observability on AWS - OTLP Ingestion, PromQL, and the X-Ray SDK Transition
  94. How Elastic Load Balancing Scales - Scaling Rate, Capacity, and Load Balancer Capacity Unit Reservation
  95. The Boundaries of the AWS Global Network - Autonomous Systems, Partitions, and What a Private Path Does Not Guarantee
  96. AWS IAM Outbound Identity Federation - Issuing Short-Lived Tokens from AWS to External Services
  97. Designing for Spot Interruptions on AWS - Allocation Strategies, Rebalance Signals, and Graceful Degradation
  98. AWS Data Movement Decision Guide - DataSync, Transfer Family, Storage Gateway, and Data Transfer Terminal
  99. Elastic Fabric Adapter and the AWS Network Fabric - SRD, ENA Express, and Placement Group Design
  100. Chaos Engineering on AWS with AWS Fault Injection Service - Experiment Design, Stop Conditions, and Safety Rails
  101. AWS Systems Manager Fleet Operations at Scale - Patch Manager, State Manager, Automation Runbooks, and Session Manager
  102. Amazon CloudWatch Alarm Design and Alert Fatigue - Composite Alarms, Anomaly Detection, Metric Math, and Metric Cardinality
  103. AWS Private CA Hierarchy Design - Root and Subordinate CAs, Revocation, Short-Lived Mode, and mTLS on ALB
  104. AWS Nitro Enclaves and Confidential Computing on AWS - Attestation, PCR Measurements, and KMS Condition Keys
  105. Amazon GuardDuty Extended Threat Detection Architecture - Attack Sequences, Runtime Monitoring, and Response Automation
  106. Amazon EBS Performance Engineering - Volume Types, io2 Block Express, Snapshot Initialization, and Multi-Attach
  107. Amazon FSx Family Decision Guide - Choosing Between Lustre, NetApp ONTAP, OpenZFS, and Windows File Server
  108. AWS IAM Access Analyzer Deep Dive - External, Internal, and Unused Access Analyzers with Custom Policy Checks in CI
  109. Japanese and CJK Text Preprocessing for RAG - Tokenization, Normalization, and Chunk Boundaries
  110. IPv6-First VPC Design on AWS - IPv6-Only Subnets, DNS64 and NAT64, and Dual-Stack Migration
  111. Agent Reliability Engineering Design Guide - Retries, Loop Detection, Timeout Budgets, and Human Escalation for AI Agents
  112. Post-Quantum Cryptography Standardization Timeline and Migration on AWS - From Algorithm Selection to Service Support
  113. Amazon EKS Pod Identity and IRSA Decision Guide - Workload Identity Design, Trade-offs, and Migration Paths
  114. Email Authentication History and Timeline - SPF, DKIM, DMARC, and BIMI
  115. OpenTelemetry GenAI Semantic Conventions Implementation Guide - Vendor-Neutral Instrumentation for LLM and Agent Applications
  116. AWS KMS Envelope Encryption and Data Key Caching Patterns - Design Decisions for the AWS Encryption SDK and Multi-Region Keys
  117. TLS Certificate Ecosystem History and Timeline - Certificate Authorities, Automation, and Shrinking Certificate Lifetimes
  118. LLM Output Verification Patterns - Grounding Checks, Self-Verification, Cross-Model Review, and Citation Enforcement
  119. Major Security Vulnerabilities History and Timeline - Disclosure, Impact, and the Response Practices They Changed
  120. Cell-Based Architecture and Shuffle Sharding on AWS - Blast Radius Reduction Patterns for Large-Scale Workloads
  121. AWS Retired Services History and Timeline - Discontinued, Sunset, and Closed-to-New-Customer Services
  122. AWS History and Timeline regarding Amazon OpenSearch Service - Overview, Functions, Features, Summary of Updates, and Introduction
  123. AWS History and Timeline regarding Amazon ElastiCache - Overview, Functions, Features, Summary of Updates, and Introduction
  124. AWS History and Timeline regarding AWS WAF - Overview, Functions, Features, Summary of Updates, and Introduction
  125. AWS Custom Silicon History and Timeline - Nitro System, Graviton, Inferentia, Trainium, and Introduction
  126. LLM API Parameter Compatibility Reference - Anthropic, OpenAI, Google Gemini, and Amazon Bedrock
  127. LLM Context Window Growth Timeline - Milestones, Current Sizes by Provider, and Official Sources
  128. RAG and Prompting Techniques History and Timeline - Chain-of-Thought, ReAct, RAG, and GraphRAG
  129. Protecting Your Family from Tech Support Scams and Phishing - A Practical Guide for the Family IT Helper
  130. AWS Security Incident Response Playbooks - First-Response Runbooks for Common Scenarios
  131. AWS End-of-Support and EOL Reference - Lambda, EKS, RDS and Aurora, ElastiCache, and OpenSearch Service
  132. Open-Weights LLM Release History and Timeline - Llama, Mistral, Qwen, DeepSeek, and gpt-oss Model Families, Capability Evolution, and Licenses
  133. Java Version and LTS Timeline - Release History, the LTS Model, and Support Across Distributions
  134. Node.js Release and EOL Timeline - LTS Schedule, Active LTS and Maintenance, and End-of-Life Dates
  135. Python Version Support and EOL Timeline - Release Schedule, Support Policy, and End-of-Life Dates
  136. Model Context Protocol Specification Version Timeline - Version-by-Version Changes and Adoption Milestones
  137. Designing Websites for AI Agents - llms.txt, Structured Data, and Agent-Readable Web Practices
  138. AWS Backup Data Protection and Governance - Backup Plans, Vault Lock, and Cross-Account Copy Design
  139. AWS Config Rules and Conformance Packs - Compliance Detection, Automated Remediation, and Organizations Deployment
  140. Event-Driven Architecture Anti-Patterns on AWS - Failure Modes, Root Causes, and How to Design Around Them
  141. AWS Organization Guardrails - Service Control Policies, Resource Control Policies, and Data Perimeter Design
  142. How Amazon S3 Achieves Strong Consistency and Durability - The Architecture Behind the Guarantees
  143. How AWS Lambda Execution Environments Work - Firecracker MicroVMs, Lifecycle Phases, and SnapStart Internals
  144. Google Gemini Model Release Timeline - Model Family, Capability Evolution, and Platform Availability
  145. Microsoft Azure History and Timeline - Major Milestones from Windows Azure to the Present
  146. AWS History and Timeline regarding AWS Step Functions - Overview, Functions, Features, Summary of Updates, and Introduction
  147. Sakura Internet Ishikari Data Center and Sustainable Cloud Design - Cold-Climate Cooling, Renewable Energy, and Choosing Infrastructure by Sustainability
  148. Sakura Internet History and Timeline - Hosting, Data Centers, Cloud, and AI Infrastructure Milestones
  149. Sakura Cloud for AWS Users - Service Mapping, Terminology, and Design Differences
  150. Sakura Cloud Overview for Global Engineers - Services, Zones, APIs, and How It Complements Your Cloud Architecture
  151. Dynamic Model Routing and Configuration Management for Generative AI with AWS AppConfig - Feature Flags, Schema Validation, and Safe Deployments
  152. Fine-Grained Access Control for AI Data with AWS Lake Formation - LF-Tags, Column-Level Permissions, and Cross-Account Sharing
  153. LLM Inference Resilience Patterns on AWS - Retries with Backoff and Jitter, Circuit Breakers, and Stream Recovery
  154. Amazon Bedrock Knowledge Bases Ingestion and Isolation Patterns - Direct Ingestion, Sync Strategies, S3 Metadata Design, and Tenant Boundaries
  155. End-to-End Response Streaming Architecture for Generative AI on AWS - WebSocket APIs, Lambda Response Streaming, AppSync, and Voice Pipelines
  156. AWS Step Functions Orchestration Patterns for Generative AI - Direct Service Integration, Parallelism, Callbacks, and Payload Limits
  157. Amazon Bedrock Model Evaluation Practical Guide - Automatic Metrics, LLM-as-a-Judge, RAG Evaluation, and CI/CD Quality Gates
  158. Safe Foundation Model Rollout Strategies on AWS - Canary Traffic Shifting, Evaluation Gates, and Automated Rollback
  159. Semantic Caching for LLM Applications on AWS - Embedding-Based Cache Design with OpenSearch and Similarity Thresholds
  160. Prompt Lifecycle Management on AWS - Amazon Bedrock Prompt Management, Versioning, and Prompt-as-Code CI/CD
  161. Amazon Bedrock Converse API Deep Dive - Unified Model Interface, Conversation State, Tool Use, and Streaming
  162. Amazon Bedrock Knowledge Bases Retrieval Quality Engineering - Chunking Strategies, Hybrid Search, Metadata Filtering, Reranking, and Query Decomposition
  163. Vector Database Selection on AWS - OpenSearch, Aurora pgvector, MemoryDB, and S3 Vectors with Index Algorithm Internals
  164. Amazon Bedrock Cross-Region Inference and Data Residency Design - Geographic Inference Profiles, SCP and IAM Alignment, and Region-Contained RAG
  165. Amazon Bedrock Inference Throughput and Latency Optimization - Quotas, Provisioned Throughput, Latency-Optimized Inference, Prompt Caching, and Intelligent Prompt Routing
  166. Amazon Bedrock Security and Governance - IAM Condition Keys, SCP Design, PrivateLink, and Multi-Account Guardrail Enforcement
  167. PII Detection and Redaction Patterns for Generative AI on AWS - Layered Defenses with Amazon Comprehend, Bedrock Guardrails, and Macie
  168. Amazon Bedrock Guardrails Implementation Deep Dive - Policy Types, ApplyGuardrail API, Detection Modes, and Cross-Region Guardrail Profiles
  169. Anthropic Claude API Errors Reference - HTTP Status Codes, Error Types, Causes, and Official Solutions
  170. Amazon Bedrock Errors and Exceptions Reference - Runtime Exceptions, Causes, and Official Solutions
  171. AWS History and Timeline regarding Amazon Q - Overview, Functions, Features, Summary of Updates, and Introduction
  172. AWS History and Timeline regarding AWS Global Infrastructure - Regions, Availability Zones, Summary of Expansions, and Introduction
  173. AI Model Deprecation and Lifecycle Calendar - Anthropic, OpenAI, Google, and Amazon Bedrock
  174. AWS re:Invent History and Timeline - Keynotes, Major Announcements, and Evolution by Year
  175. Tool Use and Agent Protocol History and Timeline - Function Calling, MCP, and A2A
  176. CLI Coding Agents Comparison - Claude Code, Codex CLI, Gemini CLI, and More
  177. Image and Video Generation Model Release Timeline - Major Text-to-Image and Text-to-Video Models across Vendors
  178. AWS Certification History and Timeline - Exams, Updates, Retirements, and Introduction
  179. Amazon EC2 Instance Types History and Timeline - Instance Families, Generations, and Introduction
  180. AWS History and Timeline regarding Amazon EBS - Overview, Volume Types, Features, Summary of Updates, and Introduction
  181. AWS History and Timeline regarding Amazon Redshift - Overview, Functions, Features, Summary of Updates, and Introduction
  182. AWS History and Timeline regarding Amazon Kinesis - Overview, Functions, Features, Summary of Updates, and Introduction
  183. AWS History and Timeline regarding Amazon SES - Overview, Functions, Features, Summary of Updates, and Introduction to Amazon Simple Email Service
  184. Amazon Nova Model Release Timeline - Model Family, Capability Evolution, and Availability on Amazon Bedrock
  185. Agentic RAG Architecture on Amazon Bedrock - Query Planning, Retrieval Grading, and Self-Correction with AgentCore, Knowledge Bases, and Reranking
  186. Multimodal Document Intelligence Pipeline on AWS - From Documents, Images, Audio, and Video to RAG with Amazon Bedrock Data Automation
  187. GraphRAG Architecture on AWS - Multi-Hop Retrieval with Amazon Bedrock Knowledge Bases and Neptune Analytics
  188. Generative BI and NL2SQL Agent Architecture on AWS - Safe Natural-Language Analytics with Bedrock, Athena, and Guardrails
  189. Real-Time Voice AI Agent Architecture with Amazon Nova Sonic - Bidirectional Streaming, Tool Use, and Knowledge Grounding
  190. Responsible-AI Guardrails Architecture on AWS - Independent Content Safety with Bedrock Guardrails, Comprehend, and WAF
  191. LLMOps Observability and Evaluation Architecture on AWS - Tracing, Metrics, and Automated Evaluation Gates with CloudWatch and OpenTelemetry
  192. Multi-Tenant Generative AI SaaS Architecture on AWS - Tenant Isolation, Per-Tenant Knowledge Bases, and Guardrails with ABAC
  193. Self-Managed LLM Inference on Amazon EKS - Serving Open-Weight Models with vLLM, Neuron/GPU, and Karpenter
  194. Agent Interoperability Architecture on AWS - Cross-Runtime Agents with A2A, MCP, and Amazon Bedrock AgentCore Gateway
  195. Large-Scale Batch Generative AI Pipeline on AWS - Asynchronous Inference at Scale with Bedrock Batch, Step Functions, and SQS
  196. AI Contact Center Architecture on AWS - Voice and Chat Automation with Amazon Connect, Lex, Bedrock, and Q in Connect
  197. OpenAI GPT Model Release Timeline - Model Lineage, ChatGPT and Codex Milestones, and Platform Availability
  198. Hardening and Governance Guide for Claude Code and Claude Desktop - Containerized Containment and Why Code and Desktop Govern Differently
  199. Event-Driven Serverless Architecture on AWS - Building Resilient Workflows with API Gateway, Lambda, EventBridge, Step Functions, and DynamoDB
  200. Amazon ECS on Fargate Microservices Architecture Guide - Service Connect, Auto Scaling, Deployments, and Data-Tier Integration
  201. AWS Multi-Region Active-Active Architecture Guide - Global Data Replication, Routing, and Failover with Route 53, DynamoDB Global Tables, and Aurora Global Database
  202. AWS Real-Time Streaming Data Pipeline Architecture Guide - Ingestion, Processing, and Delivery with Kinesis, Managed Service for Apache Flink, and OpenSearch
  203. AWS Data Lakehouse Architecture Guide - Building a Governed Lakehouse with S3, Lake Formation, Glue, Athena, and Apache Iceberg
  204. Production RAG Architecture on Amazon Bedrock - Knowledge Bases, Vector Stores, Retrieval, Guardrails, and Evaluation
  205. AWS SaaS Multi-Tenant Architecture Guide - Tenant Isolation, Pool and Silo Models, Onboarding, and Metering
  206. AWS Zero-Trust Network Architecture Guide - Segmentation, Inspection, and Identity-Aware Access with VPC, Network Firewall, VPC Lattice, and Verified Access
  207. AWS Observability Architecture Guide - End-to-End Tracing, Metrics, and Logs with CloudWatch, X-Ray, Application Signals, and OpenTelemetry
  208. Real-Time and GraphQL API Architecture with AWS AppSync - Resolvers, Subscriptions, Authorization, and Conflict Resolution
  209. Secure Web Application Reference Architecture on AWS - Edge-to-Data Request Flow with CloudFront, WAF, ALB, Cognito, and RDS
  210. Centralized Logging and Audit Architecture on AWS - Multi-Account Log Aggregation, Detection, and Query with CloudTrail, Config, Security Hub, and OpenSearch
  211. AWS Elastic Load Balancing Decision Guide - Choosing and Operating Application, Network, and Gateway Load Balancers
  212. AWS Hybrid Connectivity Decision Guide - Direct Connect, Site-to-Site VPN, and Resilient On-Premises Integration
  213. Amazon Route 53 DNS Architecture Guide - Routing Policies, Resolver, Private Hosted Zones, and Hybrid DNS
  214. AWS Messaging and Event Routing Decision Guide - Choosing Between SQS, SNS, EventBridge, and Kinesis
  215. Amazon API Gateway Decision Guide - REST, HTTP, and WebSocket APIs and Integration Patterns
  216. AWS Lambda Concurrency and Scaling Guide - Reserved and Provisioned Concurrency, Throttling, and Event Source Scaling
  217. Amazon EKS Networking Deep Dive - VPC CNI, IP Address Management, Security Groups for Pods, and Pod Connectivity
  218. Amazon DynamoDB Capacity and Global Tables Guide - Capacity Modes, Auto Scaling, Warm Throughput, and Multi-Region Design
  219. Amazon RDS and Aurora High Availability Guide - Multi-AZ, Read Replicas, RDS Proxy, and Global Database Failover
  220. AWS Disaster Recovery Strategies Guide - Backup and Restore, Pilot Light, Warm Standby, and Multi-Site Active-Active
  221. Amazon S3 Security and Access Control Guide - Bucket Policies, IAM, Access Points, Block Public Access, and Encryption
  222. AWS Secrets Manager and Parameter Store Decision Guide - Storing, Rotating, and Accessing Secrets and Configuration
  223. Claude Code Skills Complete Guide - Creating, Testing, and Distributing Agent Skills
  224. Agent Skills Security Vetting Guide - Static Inspection of SKILL.md and Malicious Skill Patterns
  225. Claude Code Plugins Complete Guide - Bundling Skills, Hooks, Agents, and MCP Servers for Team Distribution
  226. Claude Code Compaction and Long-Session Operations Guide - Managing Context Across Long and Multi-Session Work
  227. Anthropic Claude Model Migration Guide - Upgrading Prompts and Workloads Across Model Generations
  228. MCP Server Testing and Debugging Guide - Inspector, Integration Tests, Transports, and CI Regression
  229. AWS VPC Connectivity Decision Guide - VPC Peering, Transit Gateway, PrivateLink, VPC Lattice, and Cloud WAN
  230. AWS Step Functions JSONata and Variables Practical Guide - Modern Workflow Authoring Beyond JSONPath
  231. AWS VPC Network Troubleshooting Guide - Decision Trees for Security Groups, NACLs, Route Tables, and Flow Logs
  232. Amazon CloudFront Origin Architecture Guide - Origin Access Control, Origin Shield, Failover, and VPC Origins
  233. Amazon Bedrock AgentCore Policy Implementation Guide - Cedar-Based Agent Authorization and Default-Deny Design
  234. Amazon Bedrock AgentCore Evaluations Practical Guide - Built-In Evaluators and CI/CD Regression Testing for AI Agents
  235. Claude Code Extension Layer Decision Guide - Choosing Among Skills, Subagents, Hooks, and Plugins
  236. Strands Agents Multi-Agent Pattern Selection Guide - Agents-as-Tools, Swarm, Graph, and Workflow
  237. AI Agent Memory Design Guide - Working, Long-Term, and Procedural Memory with Forgetting and Staleness Management
  238. MCP Tool Poisoning Defense Guide - Client-Side Defense in Depth for AI Agents
  239. Amazon S3 Vectors Design Decision Guide - When to Use It, When Not to, and Tiered Designs with Amazon OpenSearch Service
  240. AWS Lambda Durable Functions Practical Guide - Checkpoint and Replay Determinism and When to Use Step Functions Instead
  241. Amazon Aurora DSQL Design Decision Guide - Distributed SQL Between Amazon DynamoDB and Aurora PostgreSQL
  242. Cost-Optimization Guide to Rolling Out Claude Code and Claude Desktop Across Your Organization - Choosing Delivery Models and Finding Break-Even
  243. Practical Guide to Deploying Claude Code and Claude Desktop Behind a Corporate Proxy - Domains, MSIX, NTLM/Kerberos, and VPN Coexistence
  244. Claude Code on Pay-As-You-Go API Billing - Anthropic API, Amazon Bedrock, and Google Cloud Vertex AI
  245. Claude Code Subagents and Multi-Agent Orchestration Guide - Delegation, Parallel Fan-Out, and Custom Agent Definitions
  246. Claude Code Hooks Complete Guide - Deterministic Enforcement Across the Tool Lifecycle
  247. Claude Agent SDK Complete Guide - Building Custom Agents Beyond the CLI
  248. Anthropic Claude API Prompt Caching and Token Efficiency Guide - Cache Breakpoints, Batch Processing, and Context Engineering
  249. Claude Code in CI/CD and Headless Automation - Running the Agent Unattended in Pipelines
  250. AWS History and Timeline regarding Amazon VPC - Overview, Functions, Features, Summary of Updates, and Introduction
  251. AWS History and Timeline regarding Amazon CloudWatch - Overview, Functions, Features, Summary of Updates, and Introduction
  252. AWS History and Timeline regarding Elastic Load Balancing - Overview, Load Balancer Types, Features, Summary of Updates, and Introduction to ELB
  253. AWS History and Timeline regarding Amazon Aurora - Overview, Engines, Features, Summary of Updates, and Introduction
  254. AWS History and Timeline regarding Amazon SNS - Overview, Functions, Features, Summary of Updates, and Introduction to Amazon Simple Notification Service
  255. AWS History and Timeline regarding AWS CloudTrail - Overview, Functions, Features, Summary of Updates, and Introduction
  256. AWS History and Timeline regarding Amazon SageMaker - Overview, Functions, Features, Summary of Updates, and Introduction
  257. AWS History and Timeline regarding AWS Organizations - Overview, Functions, Features, Summary of Updates, and Introduction
  258. Claude Code Operator's Handbook
  259. AWS History and Timeline regarding Amazon Bedrock - Overview, Functions, Features, Summary of Updates, and Introduction
  260. Amazon Bedrock Glossary - A Reference for AI Engineers and Architects
  261. AWS History and Timeline regarding AWS Identity and Access Management - Overview, Functions, Features, Summary of Updates, and Introduction to IAM
  262. AI Agent Engineering Glossary - Memory, Tools, Orchestration, and Protocols Explained
  263. AWS History and Timeline regarding Amazon EC2 - Overview, Functions, Features, Summary of Updates, and Introduction
  264. AWS IAM Glossary - Principal, Permission Boundary, SCP, RCP, ABAC, and Cedar Explained
  265. Amazon Bedrock AgentCore Master Index - A Hub for AgentCore Articles and Decision Patterns
  266. AWS History and Timeline regarding Amazon DynamoDB - Overview, Functions, Features, Summary of Updates, and Introduction
  267. AWS History and Timeline regarding Amazon CloudFront - Overview, Functions, Features, Summary of Updates, and Introduction
  268. AWS Networking Glossary - VPC, Transit Gateway, PrivateLink, and VPC Lattice Explained
  269. AWS History and Timeline regarding Amazon EKS - Overview, Functions, Features, Summary of Updates, and Introduction
  270. AWS Lambda Master Index - A Hub for Lambda Articles
  271. AWS History and Timeline regarding Amazon API Gateway - Overview, Functions, Features, Summary of Updates, and Introduction
  272. AWS Database Glossary - RDS, Aurora, DynamoDB, DocumentDB, and Neptune Explained
  273. AWS Observability Glossary - CloudWatch, X-Ray, Application Signals, and OpenTelemetry Explained
  274. MCP Server Implementation Reference - Anthropic, OpenAI, Google, Cloudflare, and AWS
  275. IAM Policy Evaluation Logic Step-by-Step - Explicit Deny, RCP, SCP, Resource Policy, Identity Policy, Permission Boundary, and Session Policy
  276. HTTP Security Headers Complete Reference - CSP, HSTS, COOP, COEP, Permissions Policy
  277. AWS Generative AI History and Timeline - From SageMaker JumpStart to Bedrock AgentCore
  278. Anthropic Claude Model Release Timeline - Model Family Tree, Capability Evolution, and Platform Availability
  279. Cryptography Glossary for Engineers - AES, RSA, ECDSA, HKDF, Envelope Encryption, and TLS Explained
  280. AWS History and Timeline regarding AWS CloudFormation - Overview, Functions, Features, Summary of Updates, and Introduction
  281. Amazon DynamoDB Master Index - A Hub for DynamoDB Design, Key Modeling, and Capacity Planning Articles
  282. AWS History and Timeline regarding Amazon RDS - Overview, Engines, Features, Summary of Updates, and Introduction
  283. AI Agent Defense in Depth Model (AIDDM) - WAF, Guardrails, Reasoning Sandbox, and Output Filter
  284. IAM Anti-Patterns - Real-World Mistakes and Their Root Causes
  285. Amazon Bedrock Model Catalog 2026
  286. Claude Code Features and Settings Reference 2026
  287. AWS History and Timeline regarding Amazon ECS - Overview, Functions, Features, Summary of Updates, and Introduction
  288. AWS Service Quotas - A Practical Cheat Sheet for Major AWS Services
  289. AWS Verified Permissions and Cedar Policy Language Complete Guide
  290. MCP Server Ecosystem Reference 2026
  291. AWS VPC Lattice Complete Guide - Service-to-Service Networking Across VPCs and Accounts
  292. AWS Postmortem Case Studies - Design Lessons from AWS Public RCAs
  293. Regex Master Course - Interactive Recipes by Job Function
  294. Practical Git Techniques - Rebase, Worktree, Hooks, and Partial Clone for Mid-Level Engineers
  295. DynamoDB Key Design Dictionary: PK/SK, GSI/LSI Selection, Hot Partition Avoidance, and Re-Keying Patterns
  296. Code Review Checklist and Anti-Pattern Catalog: A Reviewer's Reference for Modern and AI-Augmented Codebases
  297. Indie Dev Guide: From Domain Acquisition to Live Site with AWS Route 53, S3, CloudFront, and ACM
  298. AWS Well-Architected - Practical Self-Audit Checklist by Pillar
  299. Route 53 Health Check and Failover - Common Pitfalls and Designs
  300. AWS Lambda Cold Start Mitigation Guide - Provisioned Concurrency, SnapStart, and Code-Level Techniques
  301. VSCode Extensions and Keybindings - Complete Guide by Use Case
  302. AWS Multi-Account Operational Patterns - Control Tower, Organizations, SCPs
  303. Software Design Principles in Practice - SOLID, DDD, Clean Architecture
  304. Web Performance Checklist for Core Web Vitals - LCP, INP, and CLS
  305. Architecture Decision Records: Templates and Operational Patterns for Teams That Actually Maintain Them
  306. AWS Tagging Strategy: Complete Guide for Operations, Automation, and Security
  307. VPC Design Review Checklist - CIDR, Subnets, Transit Gateway
  308. Amazon S3 Object Key Design Best Practices - Performance and Partitioning
  309. PWA Advanced Implementation Guide - Service Worker Cache Strategies, Push, and Background Sync
  310. Diagram Notation Selection — C4 vs PlantUML vs Mermaid
  311. Comparing Terraform, AWS CDK, AWS SAM, and CloudFormation - A Practitioner's Guide to Mental Models, State Management, and Migration
  312. Incident Triage Flowcharts - Network, DB, and Application Layer
  313. Self-Hosted Static Site Analytics - A Privacy-First Implementation Guide
  314. Claude Code Harness and Environment Engineering: Designing the Frontline Where Local AI Agents Actually Live
  315. Claude Code Getting Started - Why Knowing About Local AI Agents Changes Everything
  316. CloudWatch Logs Insights Query Cookbook: Practical Recipes for Incident Investigation, Cost Analysis, and Security Audits
  317. Amazon DynamoDB Single Table Design Complete Guide - Access-Pattern-Driven Data Modeling Patterns
  318. AWS IAM Identity Center Complete Setup Guide - Multi-Account SSO Design Patterns from Organization Structure to ABAC
  319. MCP Server on AWS Lambda Complete Guide - Building Model Context Protocol Servers with Streamable HTTP and OAuth 2.1
  320. Amazon Bedrock AgentCore Production Operations Guide - Observability, Cost Optimization, and Disaster Recovery
  321. Amazon Cognito Federation Complete Implementation Guide - Google, Apple, Microsoft, OIDC, and SAML
  322. AWS PrivateLink and VPC Endpoints Complete Guide - Interface, Gateway, and Resource Endpoint
  323. AWS WAF for Generative AI - Prompt Injection Defense Implementation Patterns
  324. CloudFront KeyValueStore and Edge Functions Cookbook: A/B Testing, Geo Routing, Feature Flags, and Token Validation
  325. EventBridge Pipes Event-Driven Architecture Implementation Patterns
  326. AWS Step Functions Distributed Map - Practical Patterns and Pitfalls for Large-Scale Parallel Workloads
  327. Enterprise AI Agent Environment Design Notes Part 3: Cloud Selection, Cost, and Operations
  328. Enterprise AI Agent Environment Design Notes Part 2: Implementing SharePoint ACL and Permission Controls
  329. Enterprise AI Agent Environment Design Notes Part 1: Comparing the Three Major Clouds and Designing Your Architecture
  330. Amazon Bedrock AgentCore Implementation Guide Part 4: Multi-Agent Orchestration
  331. Amazon Bedrock AgentCore Implementation Guide Part 3: Building a 4-Stack CDK Architecture with an Observability Pipeline
  332. Amazon Bedrock AgentCore Implementation Guide Part 2: Multi-Layer Security with Identity, Gateway, and Policy
  333. Amazon Bedrock AgentCore Implementation Guide Part 1: Runtime, Memory, and Code Interpreter Patterns
  334. Beyond Self-Disruption: The Paradigm Shift Software Engineers Need in the AI Era
  335. Amazon Bedrock AgentCore Beginner's Guide - AI Agent Development from Basics with Detailed Term Explanations
  336. Japan AWS Top Engineer and Japan All AWS Certifications Engineer: Special Award for 6 Consecutive Years and The 6 Growth Principles
  337. Using Claude 3.7 Sonnet Vision Capabilities on Amazon Bedrock to Verify, Regenerate, and Automate Image Generation with Stable Diffusion 3.5 Large
  338. Using Amazon Bedrock for titling, commenting, and OCR (Optical Character Recognition) with Claude 3.7 Sonnet
  339. Validating and Regenerating Videos Using Amazon Nova Pro Vision Model on Amazon Bedrock (Amazon Nova Reel Edition)
  340. Amazon Bedrock Models as of 2024 - An Analysis of the Comprehensive Model Catalog
  341. Using Amazon Bedrock for titling, commenting, and OCR (Optical Character Recognition) with Amazon Nova Pro
  342. Using Amazon Nova Pro Vision Capabilities on Amazon Bedrock to Verify, Regenerate, and Automate Image Generation with Amazon Nova Canvas
  343. AI and Machine Learning Glossary for AWS - Knowledge Gained While Studying for AWS Certified AI Practitioner and AWS Certified Machine Learning Engineer - Associate
  344. Evaluating OCR Accuracy of Claude on Amazon Bedrock and Amazon Textract Using Similarity Metrics
  345. How to Add an Approval Flow to AWS Step Functions Workflow (AWS CodePipeline and Amazon EventBridge Edition)
  346. How to Add an Approval Flow to AWS Step Functions Workflow (AWS Systems Manager Automation and Amazon EventBridge Edition)
  347. How to Add an Approval Flow to AWS Step Functions Workflow (AWS Systems Manager Automation Edition)
  348. Using Claude 3.5 Sonnet Vision Capabilities on Amazon Bedrock to Verify, Regenerate, and Automate Image Generation with Amazon Titan Image Generator G1
  349. Using Amazon Bedrock to repeatedly generate images with Stable Diffusion XL via Claude 3.5 Sonnet until requirements are met
  350. Using Amazon Bedrock for titling, commenting, and OCR (Optical Character Recognition) with Claude 3.5 Sonnet
  351. AWS History and Timeline regarding Amazon Cognito - Overview, Functions, Features, Summary of Updates, and Introduction
  352. AWS History and Timeline regarding AWS Lambda - Overview, Functions, Features, Summary of Updates, and Introduction
  353. AWS CloudFormation Templates and AWS Lambda Custom Resources for Associating AWS Certificate Manager, Lambda@Edge, and AWS WAF with a Website on Amazon S3 and Amazon CloudFront Cross-Region
  354. Deploy AWS Cloudformation Stack Cross-Region with AWS Lambda Custom Resources
  355. Using Amazon Textract for OCR(Optical Character Recognition)
  356. AWS History and Timeline regarding Amazon Simple Queue Service - Overview, Functions, Features, Summary of Updates, and Introduction to SQS
  357. Using Amazon Bedrock for titling, commenting, and OCR (Optical Character Recognition) with Claude 3 Haiku
  358. Using Amazon Bedrock for titling, commenting, and OCR (Optical Character Recognition) with Claude 3 Opus
  359. Using Amazon Bedrock for titling, commenting, and OCR (Optical Character Recognition) with Claude 3 Sonnet
  360. Setting up DKIM, SPF, DMARC with Amazon SES and Amazon Route 53 - An Overview of DMARC Parameters and Configuration Examples
  361. Summary of AWS Application Migration Service (AWS MGN) Architecture and Lifecycle Relationships, Usage Notes - Including Differences from AWS Server Migration Service (AWS SMS)
  362. Basic Information about Amazon Bedrock with API Examples - Model Features, Pricing, How to Use, Explanation of Tokens and Inference Parameters
  363. Summary of Differences and Commonalities in AWS Database Services using the Quorum Model - Comparison Charts of Amazon Aurora, Amazon DocumentDB, and Amazon Neptune
  364. AWS Amplify Features Focusing on Static Website Hosting - Relationship and Differences between AWS Amplify Hosting and AWS Amplify CLI
  365. Host a Static Website configured with Amazon S3 and Amazon CloudFront using AWS Amplify CLI
  366. Host a Static Website using AWS Amplify Hosting in the AWS Amplify Console
  367. Reasons for Continually Obtaining All AWS Certifications, Study Methods, and Levels of Difficulty
  368. Summary of AWS CloudFormation StackSets Focusing on the Relationship between the Management Console and API, Account Filter, and the Role of Parameters
  369. AWS History and Timeline regarding AWS Key Management Service - Overview, Functions, Features, Summary of Updates, and Introduction to KMS
  370. AWS History and Timeline regarding Amazon EventBridge - Overview, Functions, Features, Summary of Updates, and Introduction
  371. AWS History and Timeline regarding Amazon Route 53 - Overview, Functions, Features, Summary of Updates, and Introduction
  372. AWS History and Timeline regarding AWS Systems Manager - Overview, Functions, Features, Summary of Updates, and Introduction to SSM
  373. AWS History and Timeline regarding Amazon S3 - Focusing on the evolution of features, roles, and prices beyond mere storage
  374. How to create a PWA(Progressive Web Apps) compatible website on AWS and use Lighthouse Report Viewer
  375. AWS History and Timeline - Almost All AWS Services List, Announcements, General Availability(GA)

Written by Hidekazu Konishi