Engineering & Life

Jayanth's Blog

Thoughts on AWS, Terraform, Kubernetes, platform engineering, and the quieter things in life.

459Posts

19Topics

5335Min of reading

Oct 31, 2026Latest

$ |

459 posts

AWS Weekly IntelligenceOct 31, 2026

AWS Weekly Intelligence #13 - 26-30 October 2026

Sixty-two announcements across five working days, and for once the week has a clear spine: post-quantum cryptography stopped being a single service’s preview an…

AWS Daily IntelligenceOct 31, 2026

AWS Daily Intelligence #66 - The upgrade became optional; the obligation did not

Four Oracle options used to force automatic minor version upgrades on. They no longer do. The capability is genuinely useful and the thing worth noticing is wha…

Azure Weekly IntelligenceOct 31, 2026

Azure Weekly Intelligence #12 - 26-30 October 2026

Fifty-seven distinct items, and a quiet week for infrastructure after a loud one. Four Tech Community blogs that carried items last week — Infrastructure, Netwo…

Azure Architecture SeriesOct 31, 2026

Azure Architecture Series #79 — Forced Tunnelling and Its Consequences

The requirement is usually handed down rather than designed: nothing leaves the cloud estate without passing the corporate perimeter. Azure's own framing agrees…

AWS Architecture SeriesOct 31, 2026

AWS Architecture Series #99 — A restore that finished is not a restore you can use

#98 was about settings AWS accepts and ignores. This one is about a result AWS reports accurately that is read as something larger. Restore testing is described…

AWS Daily IntelligenceOct 30, 2026

AWS Daily Intelligence #65 - The steps run in order; how many times is the agent's call

Step Functions workflows can now be exposed to AI agents as MCP tools through Bedrock AgentCore Gateway. The determinism this buys is real and it is narrower th…

AWS Weekly LabOct 30, 2026

Week 25 - Serverless Microservices: The Neighbour That Starved Checkout

A shared office printer is fine until the person next to you sends a 400-page document. Nothing about your one-page memo changed. You just cannot get to the pri…

GCP Architecture SeriesOct 30, 2026

GCP Architecture Series #78 — Packet Mirroring

#75, #76 and #77 all ended in the same place: the record is incomplete, and the incompleteness leans toward silence. Packet Mirroring is the escape from that. I…

Azure Architecture SeriesOct 30, 2026

Azure Architecture Series #78 — User-Defined Routes and Route Tables

Every post since #71 has deferred something to this one. Spoke-to-spoke past the peering limit, forcing traffic through a hub firewall, the preview that suppres…

AWS Architecture SeriesOct 30, 2026

AWS Architecture Series #98 — Ignored is not refused

Most services tell you when a setting is wrong. The request fails, the plan will not save, the console turns red. AWS Backup does that for some things and not f…

GCP Weekly LabOct 29, 2026

Week 11 — Just-in-Time Privileged Access with Privileged Access Manager

The problem. Ten weeks of this lab granted roles that stay granted. A role is written once and then holds until somebody writes a change to remove it, and nobod…

AWS Daily IntelligenceOct 29, 2026

AWS Daily Intelligence #64 - It exports step input and output, and redaction is something you configure

Lambda durable functions can now export their step-by-step execution history to thirteen destinations, with an MCP server so an AI agent can query it in natural…

GCP Architecture SeriesOct 29, 2026

GCP Architecture Series #77 — VPC Flow Logs: Sampling, and What They Cost

#76 deferred to this instrument twice: once for continuous visibility into long-lived flows, once for the protocols firewall logs ignore. So here it is. VPC Flo…

Azure Architecture SeriesOct 29, 2026

Azure Architecture Series #77 — Hub-and-Spoke Topology

This is not a pattern you choose so much as one you are given. “The hub-spoke network pattern… is the network topology that the Cloud Adoption Framework for Azu…

AWS Architecture SeriesOct 29, 2026

AWS Architecture Series #97 — Twenty kilobytes is an architecture decision

The documentation opens the whole subject with a size limit rather than a principle:

AWS Daily IntelligenceOct 28, 2026

AWS Daily Intelligence #63 - It packs by memory and shares everything else

ECS can now run several tasks on one NVIDIA GPU through MPS, which is a real utilisation win for small-model inference. The documentation is unusually candid ab…

Azure Weekly LabOct 28, 2026

Week 11 — Managed Prometheus, With No Cluster and No Password

Almost everything written about Azure Monitor managed service for Prometheus assumes Kubernetes. The add-on scrapes AKS. The sample dashboards are cluster dashb…

GCP Architecture SeriesOct 28, 2026

GCP Architecture Series #76 — Firewall Rules Logging

#75 ended on a dependency: five of the six Firewall Insights are only as complete as Firewall Rules Logging was, so the obvious conclusion is to turn logging on…

Azure Architecture SeriesOct 28, 2026

Azure Architecture Series #76 — ExpressRoute Direct, FastPath and Global Reach

#75 covered the circuit: three parties, two peerings, a provider in the middle. These three capabilities all appear in the same documentation set as things you…

AWS Architecture SeriesOct 28, 2026

AWS Architecture Series #96 — Nothing non-compliant is three different answers

Config is usually introduced as a compliance dashboard, and the word implies that an absent finding means a passed check. Two layers sit under that assumption,…

AWS Daily IntelligenceOct 27, 2026

AWS Daily Intelligence #62 - The account setting applies to the groups nobody configured

Launch Before Terminate can now be set once for the account instead of group by group. It is a good default and a small amount of work, and the documentation ad…

GCP Architecture SeriesOct 27, 2026

GCP Architecture Series #75 — Firewall Insights and Rule Hygiene

Posts #70 to #74 built up a firewall model with four places a rule can live and no mechanism at all for noticing that a rule has stopped mattering. Rules accumu…

Azure Architecture SeriesOct 27, 2026

Azure Architecture Series #75 — ExpressRoute Circuits, Peerings and Providers

#72 established why you would choose ExpressRoute: “Because ExpressRoute connections don’t go over the public internet , they offer more reliability, faster spe…

AWS Architecture SeriesOct 27, 2026

AWS Architecture Series #95 — A certificate renews because something is using it

“ACM provides managed renewal for your Amazon-issued SSL/TLS certificates. This means that ACM will either renew your certificates automatically ( if you are us…

AWS

↗114

↗103

15

15

14

12

12

11

9

8

8

8

7

7

6

5

5

5

5

4

4

4

4

4

4

4

4

4

4

3

3

3

3

3

3

3

3

3

2

2

2

2

2

2

2

2

2

2

2

2

2

2

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

Azure

GCP

222 AWS services across 253 AWS posts, 23 Azure across 106, 25 GCP across 100, by number of posts. Click one to filter; hover for what it does.