Introduction AWS DevOps Agent is Amazon’s agentic AI service for cloud operations — it can investigate incidents, analyze security posture, answer questions about your infrastructure, and take limited remediation actions, all from a chat interface inside the AWS console. What makes it interesting from an engineering standpoint isn’t just the chat UI — it’s how […]
INTRODUCTION: Kubernetes makes application management simple: we define the deployments, services and configurations of our services in YAML and Kubernetes is taking care of maintaining the desired state. However, applications usually require infrastructure to run on – databases, s3 buckets, iam roles, load balancers, vpc’s etc. We manage these resources with separate tools, usually terraform, […]
If you run Amazon OpenSearch Service in production, automated hourly snapshots sound like a good safety net. In reality, they have major operational catches: Backups sit in a hidden, AWS-managed bucket you cannot inspect or download. You cannot export them across accounts or regions for disaster recovery. You cannot retain them past 14 days for […]
Introduction Managing Elasticsearch clusters in environments is a common challenge for organizations that run search and analytics work that is vital to the business. Whether you are moving to infrastructure, setting up disaster recovery or changing operating systems, keeping Elasticsearch data consistent and minimizing downtime are the top priorities. The primary objectives were to: Achieve […]
Introduction If you’ve spent any time around cloud teams lately, you’ve probably heard someone mention Bedrock in a meeting and then watched half the room nod along without really knowing what it does. I was in that boat too, until I actually sat down and built something with it. Here’s the short version: AWS Bedrock […]
Elasticsearch Has 20,000 Shards: What Actually Happens When You Restart a Node? Introduction Restarting an Elasticsearch node sounds simple: That assumption changes when a cluster contains thousands of shards. In one production environment I worked with, the Elasticsearch cluster had approximately 20,000 shards. A node restart could trigger extensive shard recovery, allocation, disk I/O, network […]
Introduction: Static frontends and containerised backends increasingly need to communicate with each other without having the frontends’ S3 buckets or the backends’ services exposed to the public internet. A common configuration is a frontend hosted on S3 and a backend running on ECS behind an Application Load balancer (ALB). When both are locked down — […]
Logs, Metrics, and Traces: Making Sense of the Observability Buzzword The tech industry sometimes becomes fascinated by a fresh buzzword every so often, and at the moment it is observability that is having a dominant influence. If you spend a sufficient amount of time going through the way vendors market their products, you might come […]
Why a GKE Ingress can look fine in kubectl and still have no IP — and how that differs from EKS and ALB If you have used EKS, HTTP Ingress usually means an Application Load Balancer. Someone installs the AWS Load Balancer Controller, you set ingressClassName: alb, and AWS creates an ALB. Certificates often come […]
