All blog posts
Verify S3 Files from file system creation to mount, bidirectional sync delay measurement, and read performance. Includes comparison with EFS, Mountpoint for S3, and FSx for Lustre, plus measured data for selection decisions.
End-to-end CLI verification of Route 53 Global Resolver covering Do53/DoH authentication, DNS filtering, and propagation timing. Provides data to evaluate whether the 20x cost premium over VPC Resolver is justified.
Deployed AWS Lambda Managed Instances and measured 67s provisioning, auto-distribution across 10 execution environments with multi-concurrency, and throttling under CPU load. Includes an LMI migration checklist.
Hands-on verification of VPC Encryption Controls Monitor/Enforce modes. Reveals that encryption-status 2 only applies to PrivateLink, Enforce migration takes 15+ minutes asynchronously, and VPC endpoint ENI migration can silently block the transition.
Ran Code Remediation on 7 pentest findings. All received GitHub PRs with accurate fixes — from parameterized queries for SQLi to full credential hashing refactors. NAT Gateway required for VPC-to-GitHub access.
Tested with no auth, single role (with 2FA), and multiple roles. Without credentials, the agent autonomously chained SQL Injection → credential extraction → TOTP guessing → admin login. Providing credentials via Secrets Manager enabled stable authenticated testing including 2FA bypass.
AWS officially states Security Agent can test GraphQL APIs, but how well does it actually work? Testing under 4 conditions revealed that HTML link structure is the critical factor — when present, the agent performs GraphQL-specific tests including Introspection, nested query analysis, and Mutation parameter testing.
Hands-on verification of the Aurora DSQL SQLx connector for Rust. Connection code drops from ~50 lines to one, and the OCC retry helper works — but default max_attempts=3 falls short under high concurrency.
Verify CloudWatch Query Studio (Preview) with OTel enrichment — from enabling PromQL on vended metrics to creating alarms. Covers histogram function requirements, tag-based cross-service queries, and practical tips for Prometheus users.
Git Directory Generator auto-creates dev/staging/prod Applications from directory structure. Adding an environment is just a directory push, and per-environment changes don't affect others. Watch out for the longer polling interval.