Articles about cloud infrastructure, containers, IaC, and platform engineering
Hands-on verification of S3 account regional namespaces via CLI. Measured per-region prefix length limits, tested IAM condition key enforcement, and discovered built-in name protection in the global namespace.
Verified DevOps Agent's EKS integration. Compared investigation processes for application vs. infrastructure failures, measured audit log-based operator identification, and evaluated preventive recommendations for critical system components.
Measured Blue/Green Switchover downtime through RDS Proxy with psql. Compared against direct connection (26s) and JDBC BG plugin (0s) to quantify RDS Proxy's effect and constraints.
Hands-on verification of EKS managed node group warm pools. Measured Running 28s, Stopped 48s, and cold start 62s for scale-out, plus a 16-minute drain wait for reuseOnScaleIn. Provides a decision framework for poolState selection.
Verify S3 Files from file system creation to mount, bidirectional sync delay measurement, and read performance. Includes comparison with EFS, Mountpoint for S3, and FSx for Lustre, plus measured data for selection decisions.
End-to-end CLI verification of Route 53 Global Resolver covering Do53/DoH authentication, DNS filtering, and propagation timing. Provides data to evaluate whether the 20x cost premium over VPC Resolver is justified.
Deployed AWS Lambda Managed Instances and measured 67s provisioning, auto-distribution across 10 execution environments with multi-concurrency, and throttling under CPU load. Includes an LMI migration checklist.
Hands-on verification of VPC Encryption Controls Monitor/Enforce modes. Reveals that encryption-status 2 only applies to PrivateLink, Enforce migration takes 15+ minutes asynchronously, and VPC endpoint ENI migration can silently block the transition.
Tested with no auth, single role (with 2FA), and multiple roles. Without credentials, the agent autonomously chained SQL Injection → credential extraction → TOTP guessing → admin login. Providing credentials via Secrets Manager enabled stable authenticated testing including 2FA bypass.
AWS officially states Security Agent can test GraphQL APIs, but how well does it actually work? Testing under 4 conditions revealed that HTML link structure is the critical factor — when present, the agent performs GraphQL-specific tests including Introspection, nested query analysis, and Mutation parameter testing.