Field notes from the cloudthat survived the draft folder.
Index

Deploying an Amazon Bedrock AgentCore Gateway with AWS CDK
15 min · AWS · Generative AI · Amazon Bedrock · AgentCore · CDK · MCP · Cedar

Hardening a Cognito SPA against supply chain XSS: auth proxy, httpOnly cookies, and Lambda@Edge CSP
18 min · AWS · Cognito · Security · OAuth2 · CSP · Lambda@Edge · Frontend · CDK

Per-tenant DynamoDB isolation with the Token Vending Machine pattern
14 min · AWS · IAM · DynamoDB · STS · SaaS · Multi-tenant · Security · CDK

CloudFront cache tag invalidation with Lambda@Edge for multi-tenant SaaS
14 min · AWS · CloudFront · Lambda@Edge · Multi-tenant · SaaS · Step Functions · CDK

Evaluating a Bedrock agent: AgentCore Evaluations in production
11 min · AWS · Generative AI · Amazon Bedrock · AgentCore · Serverless
Where to find me next
26–27 SepCome To Code 2026 · Pignola (PZ)
30 Nov–4AWS re:Invent · Las Vegas
