Monica Colangelo

Field notes from the cloud that survived the draft folder.

Where to find me next

See all →

Per-tenant DynamoDB isolation with the Token Vending Machine pattern

· 17 min read

CloudFront cache tag invalidation with Lambda@Edge for multi-tenant SaaS

· 18 min read

Hardening a Cognito SPA against supply chain XSS: auth proxy, httpOnly cookies, and Lambda@Edge CSP

A practical implementation of frontend hardening against supply chain XSS for a Cognito-authenticated SPA. An auth proxy that keeps the refresh token out of the browser, short-lived tokens in closure memory, and a strict Content Security Policy delivered via Lambda@Edge with a hash manifest in S3.

· 22 min read

Evaluating a Bedrock agent: AgentCore Evaluations in production

· 14 min read

Benchmarking models for a Bedrock agent on AgentCore Runtime

· 7 min read

Building an AWS governance agent with Strands, Bedrock, and AgentCore

· 12 min read

Integrating Lambda Durable Functions into a Step Functions Workflow

· 17 min read

A first look at the brand new Amazon Bedrock Studio

· 8 min read

Transforming Diagrams into Code: AI-Powered IaC with Claude 3 and Amazon Bedrock

· 6 min read

A Cloud Architect's Top 10 Picks from AWS re:Invent 2023

· 11 min read

Automated Mass Tagging in AWS Across Accounts and Organizations

· 9 min read

Guardian of the Functions: Keeping an Eye on your Galaxy of AWS Step Functions with Custom Metrics on CloudWatch

· 12 min read

Push the Green Button: Creating Event Gadgets with IoT and Serverless Architecture

· 17 min read

Automating the injection of CI/CD runtime information into Terraform provider

· 5 min read

Continuous Delivery for the rest of us

· 17 min read

4 ultimate reasons to prefer AWS CDK over Terraform

· 9 min read

Blue/green deployment of a web server on ECS Fargate

· 15 min read

Breaking Down Barriers: Using CI/CD with Constrained or Legacy Software

· 8 min read

How to expose multiple applications on Amazon EKS with a single Application Load Balancer

· 7 min read

EKS Autoscaling: Karpenter

· 7 min read

EKS Autoscaling: Cluster Autoscaler

· 10 min read

How to expose multiple applications on Google Kubernetes Engine with a single Cloud Load Balancer

· 7 min read
All articles →