Engineering & Life

Jayanth's Blog

Thoughts on AWS, Terraform, Kubernetes, platform engineering, and the quieter things in life.

471Posts

19Topics

5530Min of reading

Nov 3, 2026Latest

$ |

471 posts

AWS Daily IntelligenceNov 3, 2026

AWS Daily Intelligence #67 - Allowed AMIs does not apply to the AMIs you build

Inspector can now scan AMIs without launching them, which is a genuinely good place to find a vulnerability — upstream of every instance that would have inherit…

GCP Architecture SeriesNov 3, 2026

GCP Architecture Series #82 — Network Connectivity Center: Hubs and Spokes

#81 left two problems: peering gives no transitive routing, and its address-overlap constraint reaches one hop further than its connectivity does. This is the p…

Azure Architecture SeriesNov 3, 2026

Azure Architecture Series #82 — Virtual WAN Routing Intent and Policies

#78 built traffic steering out of route tables by hand, and #79 showed what it costs to force everything through an inspection point. #81 handed the hub to Micr…

AWS Architecture SeriesNov 3, 2026

AWS Architecture Series #102 — Blocked is not unshared

The feature does what the name says: “After you enable block public access for snapshots in a Region, any attempt to publicly share snapshots in that Region is…

GCP Architecture SeriesNov 2, 2026

GCP Architecture Series #81 — VPC Network Peering, and Its Non-Transitivity

#79 and #80 covered sharing one network across many projects. This is the other shape: joining two networks that stay separate. Google Cloud VPC Network Peering…

Azure Architecture SeriesNov 2, 2026

Azure Architecture Series #81 — Azure Virtual WAN: Hubs and Connectivity

#77 built a hub by hand and quoted Microsoft's own list of reasons to keep doing so: “ Cost savings … Overcoming subscription limits … Workload isolation … More…

AWS Architecture SeriesNov 2, 2026

AWS Architecture Series #101 — You cannot delete the snapshot; you can delete its key

The opening sentence is the one people quote:

GCP Architecture SeriesNov 1, 2026

GCP Architecture Series #80 — Shared VPC IAM, and the Network Admin Split

#79 ended on the division of labour Google draws inside a host project: Network Admins have full control over all network resources except for firewall rules an…

Azure Architecture SeriesNov 1, 2026

Azure Architecture Series #80 — BGP on Azure Gateways

BGP has been doing quiet work in the background of this whole networking run. #78 put it second in the route-selection priority order; #79 used it as one of two…

AWS Architecture SeriesNov 1, 2026

AWS Architecture Series #100 — Delete a 10 GiB snapshot, free 4

Two sentences from the EBS snapshot documentation, both correct, describing the same object:

AWS Weekly IntelligenceOct 31, 2026

AWS Weekly Intelligence #13 - 26-30 October 2026

Sixty-two announcements across five working days, and for once the week has a clear spine: post-quantum cryptography stopped being a single service’s preview an…

AWS Daily IntelligenceOct 31, 2026

AWS Daily Intelligence #66 - The upgrade became optional; the obligation did not

Four Oracle options used to force automatic minor version upgrades on. They no longer do. The capability is genuinely useful and the thing worth noticing is wha…

GCP Weekly IntelligenceOct 31, 2026

GCP Weekly Intelligence #12 - 26-30 October 2026

Two hundred and thirty-one notes across Monday to Friday, and the two that matter most are both security bulletins describing vulnerabilities that were already…

Azure Weekly IntelligenceOct 31, 2026

Azure Weekly Intelligence #12 - 26-30 October 2026

Fifty-seven distinct items, and a quiet week for infrastructure after a loud one. Four Tech Community blogs that carried items last week — Infrastructure, Netwo…

GCP Architecture SeriesOct 31, 2026

GCP Architecture Series #79 — Shared VPC: Host Projects and Service Projects

Shared VPC has been a footnote in three of the last four posts — whose project the firewall logs name, which project flow logs are reported in, which project pa…

Azure Architecture SeriesOct 31, 2026

Azure Architecture Series #79 — Forced Tunnelling and Its Consequences

The requirement is usually handed down rather than designed: nothing leaves the cloud estate without passing the corporate perimeter. Azure's own framing agrees…

AWS Architecture SeriesOct 31, 2026

AWS Architecture Series #99 — A restore that finished is not a restore you can use

#98 was about settings AWS accepts and ignores. This one is about a result AWS reports accurately that is read as something larger. Restore testing is described…

AWS Daily IntelligenceOct 30, 2026

AWS Daily Intelligence #65 - The steps run in order; how many times is the agent's call

Step Functions workflows can now be exposed to AI agents as MCP tools through Bedrock AgentCore Gateway. The determinism this buys is real and it is narrower th…

AWS Weekly LabOct 30, 2026

Week 25 - Serverless Microservices: The Neighbour That Starved Checkout

A shared office printer is fine until the person next to you sends a 400-page document. Nothing about your one-page memo changed. You just cannot get to the pri…

GCP Architecture SeriesOct 30, 2026

GCP Architecture Series #78 — Packet Mirroring

#75, #76 and #77 all ended in the same place: the record is incomplete, and the incompleteness leans toward silence. Packet Mirroring is the escape from that. I…

Azure Architecture SeriesOct 30, 2026

Azure Architecture Series #78 — User-Defined Routes and Route Tables

Every post since #71 has deferred something to this one. Spoke-to-spoke past the peering limit, forcing traffic through a hub firewall, the preview that suppres…

AWS Architecture SeriesOct 30, 2026

AWS Architecture Series #98 — Ignored is not refused

Most services tell you when a setting is wrong. The request fails, the plan will not save, the console turns red. AWS Backup does that for some things and not f…

GCP Weekly LabOct 29, 2026

Week 11 — Just-in-Time Privileged Access with Privileged Access Manager

The problem. Ten weeks of this lab granted roles that stay granted. A role is written once and then holds until somebody writes a change to remove it, and nobod…

AWS Daily IntelligenceOct 29, 2026

AWS Daily Intelligence #64 - It exports step input and output, and redaction is something you configure

Lambda durable functions can now export their step-by-step execution history to thirteen destinations, with an MCP server so an AI agent can query it in natural…

AWS

↗114

↗104

15

15

14

12

12

11

9

8

8

8

7

7

6

5

5

5

5

4

4

4

4

4

4

4

4

4

4

3

3

3

3

3

3

3

3

3

2

2

2

2

2

2

2

2

2

2

2

2

2

2

2

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

1

Azure

GCP

223 AWS services across 257 AWS posts, 23 Azure across 109, 25 GCP across 105, by number of posts. Click one to filter; hover for what it does.