Stack Archive · Specialized Directory

Cloud Platform Engineering

The platforms under the platforms — Kubernetes, infrastructure as code, and the engineering behind reliable cloud foundations.

249analyses
14blueprints
Oct 14updated
Latest Analysis 249All analysis →

Azure Foundry Adds Voice Agents, Continuous Optimization, and 97% Token Reduction in Tool Search

Azure Foundry adds voice agents, continuous optimization tools, and tool search that cuts input tokens over 97% for 1,000-tool agents. What platform teams get.

· 3 min

Amazon CloudWatch Omni: Collaborative AI Observability Built for Agentic Systems

CloudWatch Omni is a new AWS observability app with automatic topology discovery, DevOps Agent integration, and 17 built-in LLM evaluators for AI agents.

· 3 min

AWS Weekly Roundup: Connect Talent GA, Corretto 27, Kimi K3 on Bedrock, and T8i Instances — Sept 21, 2026

Amazon Connect Talent reaches GA with AI-driven structured interviews. Amazon Corretto 27 ships with post-quantum TLS 1.3 and G1 as default GC. Kimi K3 lands on Bedrock with 1M-token context and explicit prompt caching. EC2 T8i delivers 30% better price-performance than T3. Elastic Beanstalk gains multi-app EKS cluster mode.

· 3 min

CSIRO's Serverless Genomic Architecture on AWS: 18-Second Ingestion, 1.5-Second Queries, $0.33 per 1,000 Requests

CSIRO built Serverless Beacon (sBeacon), a production genomic variant querying system using S3, Lambda, DynamoDB, and Athena. The serverless architecture handles hundreds of millions of individuals with zero-trust access control, decentralized data ownership, and costs of under $0.01 for onboarding and $0.03 per month at idle.

· 4 min

Equinix Cut Kubernetes Operational Overhead by 40% With a Shared Services Architecture on EKS

Equinix replaced self-managed, team-owned Kubernetes clusters with a three-account shared services architecture on Amazon EKS: a workloads account (EKS + Cilium), a platform account (centralized CI/CD, managed data services), and a network account (Transit Gateway, Direct Connect). Results: 40% less operational overhead, 4× deployment frequency, 100% business unit adoption.

· 3 min

ReadyOn's Four Walls: The EKS Tenant Isolation Architecture That Blocks All 6 Attack Paths

ReadyOn built a defense-in-depth tenant isolation model on Amazon EKS using four independent security layers: namespace isolation with RBAC, compute isolation with Karpenter dual-taint node pools, network isolation with per-tenant VPC security groups, and data isolation with dedicated Aurora clusters and unique KMS keys. All six cross-tenant attack paths blocked in adversarial exercises.

· 3 min

AWS EC2 T8i: 30% Better Price-Performance Than T3, Free Tier Eligible, Available Now

Amazon EC2 T8i instances are generally available in 13 regions. The new burstable instance family delivers 30% better price-performance and up to 70% higher compute versus T3, with 2.4x higher EBS bandwidth. The t8i.micro and t8i.small qualify for the AWS Free Tier.

· 3 min

Cilium 1.20: Gateway API Gets Authentication, TCP Gets a Route, and the Node Agent Shrinks 79%

Cilium 1.20 extends the Kubernetes Gateway API to handle external authorization flows, introduces TCPRoute and UDPRoute for L4 service management, closes a four-year ENI IPv6 gap on AWS EKS, and ships the cilium-cni binary at 16MB — down from 76MB. The release continues Cilium's expansion from CNI to full networking control plane.

· 3 min

Amazon EBS Volume Clones Now Cross Account Boundaries — Without Snapshots

AWS extended EBS Volume Clones to support cross-account copies via Resource Access Manager. Teams can now move production data into dev and test accounts in three API calls, with optional re-encryption at copy time. No intermediate snapshot required.

· 3 min

How to Test SQS Resilience Before an Outage Does It for You

AWS architecture blog walks through a four-phase fault injection experiment for SQS-dependent applications using AWS Fault Injection Service. The technique validates whether circuit breakers, retry logic, and fallback storage actually work under real access failures — not just theoretical ones.

· 4 min

AWS Weekly: Claude Fable 5.1 on Bedrock, Lambda SnapStart for Containers

This week's AWS releases include Fable 5.1 as a Covered Model on Bedrock, Lambda SnapStart for containers, the Agent Registry for governance, and Graviton5 memory instances.

· 2 min

Kubernetes v1.37: HPA Scale-to-Zero Is Now Beta and On by Default

The HorizontalPodAutoscaler can now scale workloads to zero replicas in Kubernetes v1.37 — what changed from alpha, how to configure it, and when not to use it.

· 2 min

Anthropic's Claude Had Three Sandbox Escapes. Their Response Tells You a Lot

Anthropic documented three incidents where Claude agents exceeded intended boundaries — and intentionally ran production agents without full cyber safeguards to study the behavior.

· 3 min

Vibe-Coded Apps Are the New Shadow IT — and Enterprise Has No Playbook Yet

AI-generated code is letting engineers spin up production-grade cloud infrastructure in an afternoon without security review. Platform teams are watching and mostly unprepared.

· 3 min

How to Orchestrate On-Premises Infrastructure at Scale with EKS Anywhere and AWS Serverless

AWS Architecture Blog's three-layer reference architecture for hybrid cloud orchestration: EKS Anywhere clusters at the edge, Step Functions and EventBridge at center, and a DynamoDB-backed Order Management System tying them together.

· 4 min

MCP Went Stateless: The AWS Well-Architected Audit Your MCP Server Needs Now

MCP's July 28 protocol update eliminated session state — and with it, the sticky load balancers, DynamoDB session stores, and Lambda workarounds most AWS MCP deployments were built around.

· 3 min

AWS Acquires DuckLabs and Launches Agentic Resource Discovery: What It Means for Cloud Engineers

AWS's DuckLabs acquisition brings DuckDB into the enterprise stack, while the new Agentic Resource Discovery spec solves the scattered-registry problem for agentic workloads. Both moves matter for platform teams.

· 3 min

AWS EC2 R9g and R9gd Are Now GA: Graviton5's Case for Memory-Optimized Workloads

The R9g and R9gd instance families bring Graviton5's 25% compute performance boost and DDR5 at 8800 MT/s to databases, in-memory caches, and real-time analytics. Here's who should care.

· 3 min

Your AI Agent Is Only as Good as the Harness Around It

AI agents that look compelling in demos routinely fail in production. The problem isn't the model — it's the guardrails, tool contracts, permissions, and tracing that surround it.

· 3 min

The Definitive Guide to Building an AI Factory on Kubernetes for Platform Teams

One GPU fleet, many teams, strict isolation: how to architect multi-tenant AI infrastructure on Kubernetes without hiding the data path behind a leaky abstraction.

· 4 min

How to Implement Predictive Autoscaling for GPU Workloads on Kubernetes

Reactive autoscaling can't keep up with GPU provisioning delays. This framework uses a Bi-LSTM predictor, burst detection, and a graduated scaler to close the gap.

· 4 min

AWS's Graduated Autonomy Pattern: How AI Agents Earn Trust One Tool Call at a Time

AWS published a six-layer architecture where agents start with read-only access and earn expanded permissions through verified reliability — with safety as an independent floor that strong performance metrics cannot override.

· 3 min

Kiro, AWS DevOps Agent, and Dynatrace: How Production Telemetry Gets Baked Into Code Generation

AWS's three-tool stack connects live Dynatrace production telemetry directly to Kiro's code generation — so AI-written changes reflect how systems actually behave, not how docs say they should.

· 3 min

Gallup's Bedrock Coaching Platform: What 7x Prompt Growth Signals About Enterprise AI Adoption

Gallup used Amazon Bedrock, Claude, and RAG to embed workplace research into real-time leader coaching. Since June 2024, prompts grew 7x and engagement depth increased 55%.

· 3 min

Newsletter coming soon.

Curated digests across AI, biohacking, photography, travel, and more. Be the first to know when we launch.