All blog posts
Just one IAM policy addition to the Capability Role enables CodeCommit private repo deployments. Watch out: URL typos and missing permissions produce the same error, and manual refresh is recommended after fixing permissions.
Deep dive into Strands Agents SDK's result.metrics to analyze cycle counts, token usage, and tool execution times. Compare how tool design choices impact performance and identify optimization targets.
Apply Bedrock Guardrails to Strands Agents SDK for automatic input/output filtering. Verify guardrail intervention behavior and implement shadow mode (monitor-only) using Hooks.
Use Strands Agents SDK Hooks to intercept the agent loop. Log tool calls, limit invocation counts, and modify results with real code examples showing how to control agent behavior in real time.
Use Strands Agents SDK's FileSessionManager to persist conversations to files and restore them after process restarts. Examine the stored data structure and the migration path to S3.
Use Strands Agents SDK's Structured Output to convert LLM responses into type-safe Pydantic objects. Verify tool integration, automatic validation retries, and conversation history extraction with code and metrics.
Verified ECS Managed Daemons on Managed Instances. Daemons start 18-21 seconds before app tasks, and rolling deployments complete in ~5 minutes with zero downtime.
Tested AWS Security Agent penetration testing with source code provided via documents and sourceCode methods, comparing detection rates and finding quality against URL-only baseline. Source code boosted findings from 5 to 13-28 with 5/5 vulnerability detection.
Verified AWS Security Agent's on-demand penetration testing in Tokyo region. Detected 4/5 planted vulnerabilities (0 false positives) including business logic flaws with HIGH confidence. Cost: ~$136/run.
Built a CloudWatch Alarm → SNS → Lambda → Generic Webhook pipeline to auto-trigger DevOps Agent investigations. Verified HMAC signature implementation, measured alarm-to-investigation latency (~65s), and discovered that duplicate incidentIds are linked rather than deduplicated.