Tagged
June 30, 2026 added two major CloudFormation/CDK changes: pre-deployment validation on Create/Update and Express mode with up to 4x faster stack operations. This guide covers when to use each in production workflows.
Manoj V.July 2026 decision guide: monolith → modular monolith → microservices on AWS, covering team size, platform tax (VPC Lattice/mesh), and a checklist before you split for the org chart.
Palaniappan PThree API types, three pricing models, three authentication patterns, and a wrong choice that stays baked into your URL design for years. A decision guide for picking REST vs HTTP vs WebSocket APIs, with the throttling and caching configs that decide your monthly bill.
Palaniappan PRedis is fast, until your application retries on every cache miss and the Redis bill starts looking like the database bill. ElastiCache patterns, data structures, cluster modes, eviction policies, and the production patterns that actually reduce database load.
Palaniappan PSurprise AWS bills usually come from one of a handful of sources. Cost Explorer patterns, budget alerts, anomaly detection, and the tagging discipline that turns "who owns this $4,000 spike" into a 30-second answer instead of a week-long Slack thread.
Kevin W.July 2026: Cognito user pools for SaaS, covering managed login vs classic hosted UI, pool vs silo tenancy, federation limits, and a checklist before you outgrow Cognito into Auth0/Okta.
Palaniappan PAWS WAF blocks attacks. It also blocks legitimate users when the rules are wrong, which is a worse incident. Managed rule groups, custom rules, rate limiting, bot control, and the layered defense strategy that protects without flooding your support queue.
Nash OgdenEvent-driven sounds elegant in design docs. Then a malformed event ships to a critical bus and you spend a weekend debugging fan-out. EventBridge buses, rules, schema discovery, cross-account patterns, and the failure modes you only learn about in production.
Manoj V.QuickSight is not a Looker or Tableau replacement, but for analytics added onto the AWS data plane it is the path that does not require a new vendor contract. Data sources, SPICE performance, embedded analytics, row-level security, and dashboards that survive scale.
Palaniappan PS3 misconfigurations are still the leading cause of headline data breaches. Bucket policies, encryption, access logging, Block Public Access, and the practices that keep "developer left the bucket public" from being your incident.
Nash OgdenTerraform is the multi-cloud default. CDK ships AWS features the day they GA. Language support, state management, multi-cloud flexibility, and the trade-off that determines which IaC tool fits your team, plus when running both is the right answer.
Manoj V.CloudWatch is the most underused service on every AWS bill, and the most overspent on the ones that take it seriously. Logs, metrics, and alarm patterns that catch real outages without burying you in noise or in the bill.
Manoj V.
