Blog Posts
- Home /
- Blog Posts

AWS Just Doubled the SCP Quotas. Here's What Actually Changes.
If you’ve ever opened a pull request to add one more Service Control Policy to your Landing Zone and watched it fail with “Max Allowed SCPs for ou ‘Infrastructure’ is 5, found total 6”, you’ve felt the pressure I’m about to talk about.
Read More
AWS IP Ranges, Visualised
AWS publishes a JSON file every day that nobody reads. It’s at ip-ranges.json. 2.4MB, no story.
Read More
Keeping Your AI Workloads Sovereign on AWS
An Australian lawyer asked me last week whether he could run “frontier Claude” on AWS Bedrock in Sydney and keep his client data in Australia. Simple enough question. The answer is one of those ones where you open your mouth ready to say “yes, obviously” and then close it again, because as of April 2026 the honest answer is “not the way you think, and here is the bit that will bite you.”
Read More
Sovereign Cloud Gets Real When Security Services Show Up
In March 2026, AWS Network Firewall became available in the European Sovereign Cloud. If you’re not paying close attention to the sovereign cloud space, that probably sounds like a minor service addition. I’d argue it’s one of the most significant milestones since the partition launched.
Read More
Patterns, Distribution, and Troubleshooting Your Claude Skills
This is Part 3 of a three-part series on building skills for Claude. Part 1 covered what skills are and why they matter. Part 2 walked through building and testing your first skill. Now we get into the stuff that separates a toy skill from a production one: proven patterns, distribution mechanics, and how to fix things when they break.
Read More
Your AI Agent's Memory is a Liability: Why Flat RAG Fails at Scale
I asked my agent to find a deployment guide. It loaded 47 documents, burned 23,000 tokens, and returned the wrong one.
Read More
Building Your First Skill: From YAML to Working Workflow
Welcome back to the series. In Part 1, we covered what Claude Code skills are, why they matter, and how they transform Claude from a general-purpose assistant into a specialist that knows your workflows. Now it’s time to build one.
Read More
What Are Claude Skills and Why Should You Care?
This is Part 1 of a 3-part series on building skills for Claude. If you’ve ever wished Claude could just remember how you like things done, this series is for you.
Read More
Agent Plugins Are the Future. But You Might Be Giving Away Your Best Engineering.
A few weeks ago AWS dropped Agent Plugins, a packaging model that bundles skills, MCP servers, hooks, and reference docs into installable units for AI coding agents. Two commands and your Claude Code or Cursor agent knows how to deploy to AWS, estimate costs, and generate IaC.
Read More
AWS Just Published an MCP Strategy Guide. Here Is What Actually Matters.
AWS quietly dropped a prescriptive guidance document on MCP strategies this month. If you have spent any time with MCP servers, you know the protocol itself is straightforward. The hard part is everything around it: how many tools to expose, where to host the servers, how to stop an agent from deleting your production database with inherited admin credentials.
Read MoreCategories
Tags
- Actions
- Agent-Plugins
- Agentcore
- Agentic-Ai
- Agents
- Ai
- Ai-Agents
- Ai-Workflows
- Airia
- Amazon Bedrock
- Amazon-Q-Dev-Cli
- Ami
- Anthropic
- Architecture
- Audit
- Authentication
- Automation
- Autonomous
- Aws
- Aws-Organizations
- Azure
- Azure-Devops
- Bedrock
- Bgp
- Build-Games-Challenge
- Building
- Cdk
- Certificates
- Ci-Cd
- Ciso
- Claude
- Claude-Code
- Cli
- Cloud
- Cloud-Computing
- Cloud-Governance
- Cloud-Infrastructure
- Cloud-Security
- Cloudflare
- Cloudformation
- Cloudtrail
- Cloudwatch
- Codebuild
- Coding
- Community
- Compliance
- Config
- Containers
- Context-Database
- Context-Management
- Cost
- Cost-Optimization
- Crypto-Agility
- Cryptography
- Data-Sovereignty
- Data-Visualisation
- Developer Tools
- Developer-Culture
- Development
- Devops
- Directconnect
- Docker
- Document-Processing
- Ebs
- Ec2
- Ecs
- Elixir
- Engineering-Culture
- Enterprise
- Enterprise-Architecture
- European-Sovereign-Cloud
- Eventbridge
- Extensions
- Finops
- Firewall
- Fsx
- Ghcr
- Git
- Github
- GitHub Actions
- Github-Pages
- Governance
- Hackathon
- Hashicorp
- Hashicorp-Vault
- Http
- Hybrid-Cloud
- Iac
- IAM
- Identity
- Inference-Profiles
- Infrastructure
- Infrastructure as Code
- Iot
- Jwt
- Lambda
- Landing-Zone
- Latency
- Legacy
- Lightsail
- Llm
- Logging
- Make
- Makefile
- Mcp
- Meta
- Multi-Cloud
- N8n
- Network-Firewall
- Networking
- New-Zealand
- Nova
- Observability
- OIDC
- Open Source
- Openai
- Opensource
- Openviking
- Opinion
- Orchestration
- Packer
- Patterns
- Pipeline
- Policy-Controls
- Pqc
- Productivity
- Prompt-Injection
- Prowler
- Python
- Q-Developer
- Quantum
- Rag
- Regions
- Risk-Management
- Route53
- S3
- Scp
- Secrets
- Secrets-Management
- Security
- Securityawareness
- Semgrep
- Serverless
- Service-Control-Policies
- Skills
- Sovereign-Cloud
- Sovereignty
- Ssm
- Steampipe
- STS
- Systems
- Systems-Thinking
- Technology
- Terraform
- Testing
- Time-Series
- TLS
- Transit-Gateway
- Troubleshooting
- Tutorial
- Vault
- Vector-Search
- Virtualisation
- Vpc
- Vpc-Lattice
- Yaml