Blog Posts
- Home /
- Blog Posts

AWS Just Doubled the SCP Quotas. Here's What Actually Changes.
If you’ve ever opened a pull request to add one more Service Control Policy to your Landing Zone and watched it fail with “Max Allowed SCPs for ou ‘Infrastructure’ is 5, found total 6”, you’ve felt the pressure I’m about to talk about.
Read More
Building a personal feed system, part 1: drowning in the firehose
I had 47 tabs open. AWS What’s New, a couple of company blogs, three podcast feeds, two YouTube subscriptions, X bookmarks, Substacks I’d been meaning to read. None of them were going to read themselves. That’s the moment I knew I had a problem the existing tools weren’t solving.
Read More
AWS IP Ranges, Visualised
AWS publishes a JSON file every day that nobody reads. It’s at ip-ranges.json. 2.4MB, no story.
Read More
Keeping Your AI Workloads Sovereign on AWS
An Australian lawyer asked me last week whether he could run “frontier Claude” on AWS Bedrock in Sydney and keep his client data in Australia. Simple enough question. The answer is one of those ones where you open your mouth ready to say “yes, obviously” and then close it again, because as of April 2026 the honest answer is “not the way you think, and here is the bit that will bite you.”
Read More
Sovereign Cloud Gets Real When Security Services Show Up
In March 2026, AWS Network Firewall became available in the European Sovereign Cloud. If you’re not paying close attention to the sovereign cloud space, that probably sounds like a minor service addition. I’d argue it’s one of the most significant milestones since the partition launched.
Read More
Patterns, Distribution, and Troubleshooting Your Claude Skills
This is Part 3 of a three-part series on building skills for Claude. Part 1 covered what skills are and why they matter. Part 2 walked through building and testing your first skill. Now we get into the stuff that separates a toy skill from a production one: proven patterns, distribution mechanics, and how to fix things when they break.
Read More
Your AI Agent's Memory is a Liability: Why Flat RAG Fails at Scale
I asked my agent to find a deployment guide. It loaded 47 documents, burned 23,000 tokens, and returned the wrong one.
Read More
Building Your First Skill: From YAML to Working Workflow
Welcome back to the series. In Part 1, we covered what Claude Code skills are, why they matter, and how they transform Claude from a general-purpose assistant into a specialist that knows your workflows. Now it’s time to build one.
Read More
What Are Claude Skills and Why Should You Care?
This is Part 1 of a 3-part series on building skills for Claude. If you’ve ever wished Claude could just remember how you like things done, this series is for you.
Read More
Agent Plugins Are the Future. But You Might Be Giving Away Your Best Engineering.
A few weeks ago AWS dropped Agent Plugins, a packaging model that bundles skills, MCP servers, hooks, and reference docs into installable units for AI coding agents. Two commands and your Claude Code or Cursor agent knows how to deploy to AWS, estimate costs, and generate IaC.
Read MoreCategories
Tags
- Actions
- Agent-Plugins
- Agentcore
- Agentic-Ai
- Agents
- Ai
- Ai-Agents
- Ai-Workflows
- Airia
- Amazon Bedrock
- Amazon-Q-Dev-Cli
- Ami
- Anthropic
- Architecture
- Audit
- Authentication
- Automation
- Autonomous
- Aws
- Aws-Organizations
- Azure
- Azure-Devops
- Bedrock
- Bgp
- Build-Games-Challenge
- Building
- Cdk
- Certificates
- Ci-Cd
- Ciso
- Claude
- Claude-Code
- Cli
- Cloud
- Cloud-Computing
- Cloud-Governance
- Cloud-Infrastructure
- Cloud-Security
- Cloudflare
- Cloudformation
- Cloudtrail
- Cloudwatch
- Codebuild
- Coding
- Community
- Compliance
- Config
- Containers
- Context-Database
- Context-Management
- Cost
- Cost-Optimization
- Crypto-Agility
- Cryptography
- Data-Sovereignty
- Data-Visualisation
- Developer Tools
- Developer-Culture
- Development
- Devops
- Directconnect
- Docker
- Document-Processing
- Ebs
- Ec2
- Ecs
- Elixir
- Engineering-Culture
- Enterprise
- Enterprise-Architecture
- European-Sovereign-Cloud
- Eventbridge
- Extensions
- Finops
- Firewall
- Fsx
- Ghcr
- Git
- Github
- GitHub Actions
- Github-Pages
- Governance
- Hackathon
- Hashicorp
- Hashicorp-Vault
- Http
- Hybrid-Cloud
- Iac
- IAM
- Identity
- Inference-Profiles
- Infrastructure
- Infrastructure as Code
- Iot
- Jwt
- Lambda
- Landing-Zone
- Latency
- Legacy
- Lightsail
- Llm
- Logging
- Make
- Makefile
- Mcp
- Meta
- Multi-Cloud
- N8n
- Network-Firewall
- Networking
- New-Zealand
- Nova
- Observability
- OIDC
- Open Source
- Openai
- Opensource
- Openviking
- Opinion
- Orchestration
- Packer
- Patterns
- Personal-Infrastructure
- Pipeline
- Policy-Controls
- Pqc
- Productivity
- Prompt-Injection
- Prowler
- Python
- Q-Developer
- Quantum
- Rag
- Regions
- Risk-Management
- Route53
- S3
- Scp
- Secrets
- Secrets-Management
- Security
- Securityawareness
- Semgrep
- Serverless
- Service-Control-Policies
- Skills
- Sovereign-Cloud
- Sovereignty
- Ssm
- Steampipe
- STS
- Systems
- Systems-Thinking
- Technology
- Terraform
- Testing
- Time-Series
- TLS
- Transit-Gateway
- Troubleshooting
- Tutorial
- Vault
- Vector-Search
- Virtualisation
- Vpc
- Vpc-Lattice
- Yaml