Jayanth's Blog

The discovery report lands: 340 servers, a data centre lease expiring in fourteen months, and a column headedMigration strategy. Somebody has filled it in…

AWS Backup can now expose an S3 recovery point through an S3 access point, so you read backup data with ordinary S3 calls —GetObject,HeadObject,ListObjectsV2,Li…

A payments team gets paged: their Lambda function is throttling. Requests are being dropped, and the CloudWatch graph shows the function pinned flat at 40…

On 10 August 2026, AWS added a fourth type of EC2 status check. Alongside system, instance and attached EBS checks — all managed by AWS and always running — the…

A team ran about forty DynamoDB tables, every one of them on-demand. The reasoning was reasonable and entirely unexamined: on-demand is the serverless opt…

An order-processing workflow runs about a million times a month. Ten states each: validate, reserve stock, charge the card, write the ledger entry, emit a…

A platform team inherited a rule written by somebody sensible three years earlier:secrets go in Secrets Manager. It is good advice. The problem is what happened…

An internet-facing endpoint receives traffic nobody wrote code for. Path scanners looking for/wp-adminand.env. Log4Shell probes in headers. A single IP sending…

Sixty-six announcements in five days, unevenly spread: 14 on Monday, 13 Tuesday, 8 Wednesday, a startling 21 on Thursday, and 10 on Friday. The theme, if there…

On 7 August 2026, AWS announced general availability of BGP route protection monitoring and delegated RPKI management in Amazon VPC IPAM, for Bring Your Own IP…

A platform team runs about 300 EC2 instances and a few dozen ECS services across three Availability Zones, all in private subnets. Egress goes through NAT…

On 6 August 2026, AWS announced general availability of fractional GPU scheduling in Amazon ECS with EC2 G6f instances. A task definition can requestGPU=0.125,G…

A telemetry platform writes device events to S3. Four billion objects, averaging 20 KB each — roughly 80 TB. Finance asked for a storage reduction, and th…

On 5 August 2026, AWS announced general availability of native vector search in Amazon DynamoDB. You store an embedding as an ordinary attribute on an item, cre…

An e-commerce platform put CloudFront in front of its product pages and API eighteen months ago. The origin is an ECS service behind an ALB in eu-west-1.…

On 4 August 2026, AWS announced RFC 9151 compliant TLS security policies for Application Load Balancers and Network Load Balancers. RFC 9151 defines how to use…

A platform team runs 60 AWS accounts across four organisational units. Observability grew the way it usually does: the CloudWatch agent went onto everythi…

On 3 August 2026, AWS raised the maximum number of event pollers on a Provisioned Mode SQS event source mapping from 2,000 to 10,000. Because each event poller…

A retail platform runs 40 microservices across four AWS accounts. Two years ago the team made a reasonable-sounding decision: standardise on one messaging…

On 30 July 2026, AWS announced general availability of Policy-Based Routing (PBR) on AWS Transit Gateway. Since Transit Gateway launched, a forwarding decision…

A B2B SaaS company serves its public API from 240 m5.2xlarge instances spread across three Availability Zones in us-east-1. The fleet scales between 180 a…

A fintech company has 12 AWS accounts managed by a single platform engineer running a bespoke Python script that calls Organizations and Service Catalog APIs. N…

Security Hub's FSBP standard checks roughly 300 controls, and by Week 11 it already covered nearly every security-relevant misconfiguration in this account — op…

A payments platform processes card authorisations across two AWS regions: us-east-1 (active) and us-west-2 (passive). Their RTO target is 3 minutes, RPO is 30 s…