· via Spacelift
Five layers of guardrails for AI-written infrastructure code: before generation, at review, at apply, after apply, and the policy that ties them together.
#ai-agents #iac #security #platform-engineering
How to build an agent control plane on AWS: lifecycle, identity, tool governance, policy, guardrails, sandboxed execution, and detection with AgentCore.
#ai-agents #aws #platform-engineering
Study notes, exam pointers, and cheat sheet for the AWS Certified Generative AI Developer - Professional exam: Bedrock, SageMaker, RAG, and agents.
#aws #certifications
· via Spacelift
A nine-step roadmap for modernizing an aging Terraform estate: state surgery, guardrails, self-service, and why AI enters the workflow last.
#iac #platform-engineering #ai-agents
· via Spacelift
How Claude Code fits IaC work in practice: a mental model, the use cases that pay off first, and the guardrails that keep an agent out of state.
#claude-code #iac #ai-agents
· via Gruntwork
Control Tower, LZA, account factories or custom: how the AWS landing zone build routes compare, and the account-structure decisions that age well.
#aws #platform-engineering #iac
· via Spacelift
Security for cloud migrations phase by phase: shared responsibility, the risks that appear mid-move, and a checklist covering before and after.
#aws #devops-tooling #security
· via Gruntwork
Six defense layers for running coding agents against IaC: credential isolation, permission modes, allow and deny rules, CLAUDE.md, hooks, sandboxing.
#claude-code #ai-agents #iac
· via Spacelift
What DevOps looks like under public-sector constraints: compliance, security-first delivery, and tooling requirements that differ from startups.
#devops-tooling #platform-engineering
· via Spacelift
Security across more than one cloud: why it gets harder, the aspects that differ per provider, and practices that hold the whole thing together.
#security #devops-tooling
· via Spacelift
Using Ansible as an IaC tool rather than only for config management: where it fits, its limits, and a worked example provisioning AWS resources.
#ansible #iac #devops-tooling
· via AWS
An agent-driven migration walkthrough: Kiro CLI with MCP servers discovers an EC2 workload, generates the ECS Express Mode setup and cleans up after.
#aws #ai-agents
· via StackGuardian
Why teams move off Terraform after the licence change, when staying put still makes sense, and a migration path with a tested rollback to 1.9.x.
#terraform #iac
· via Spacelift
Running AI agents as production workloads: core deployment principles, Amazon Bedrock AgentCore, and a Terraform walkthrough for shipping an agent.
#ai-agents #iac #aws
· via Spacelift
A working taxonomy of IaC testing: static checks, unit, integration and policy tests, with examples per tool and a pipeline to hang them on.
#iac #devops-tooling
· via AWS
Security posture as an IaC problem: Control Tower controls, baseline account vending, centralized monitoring, audit trails and drift prevention.
#aws #iac #security
· via StackGuardian
Golden paths done properly: why standardization keeps failing, how to build paved roads teams actually use, the usual pitfalls and success metrics.
#platform-engineering #iac
· via Spacelift
A structured path from datacenter to AWS: migration strategies, the three-phase framework, a step-by-step walkthrough and the common traps to avoid.
#aws #devops-tooling
· via Spacelift
Drift in CloudFormation stacks: how detection works, its blind spots, the remediation options and the practices that stop drift from coming back.
#aws #iac
· via AWS
Closing the loop on EKS resource requests: real usage metrics drive recommendations that land as GitOps pull requests instead of manual tuning.
#kubernetes #aws #devops-tooling