Monica Colangelo

Field notes from the cloudthat survived the draft folder.

topics:allAWS·CDK·Generative AI·Amazon Bedrock·DevOps·Serverless

Latest

Multi-tenant data isolation for AI agents on Amazon Bedrock AgentCore Gateway

Multi-tenant isolation for AI agents on Amazon Bedrock AgentCore Gateway: a token vending machine issues per-call credentials scoped to one DynamoDB partition.

AWS Bedrock AgentCoreMulti-tenancyAI agentsToken Vending MachineCloud security
22 July 2026 · 22 minRead →

Index

The renaissance is human

19 min · AI · Generative AI · AI Agents · Human in the loop

Deploying an Amazon Bedrock AgentCore Gateway with AWS CDK

15 min · AWS · Generative AI · Amazon Bedrock · AgentCore · CDK · MCP · Cedar

Hardening a Cognito SPA against supply chain XSS: auth proxy, httpOnly cookies, and Lambda@Edge CSP

18 min · AWS · Cognito · Security · OAuth2 · CSP · Lambda@Edge · Frontend · CDK

Per-tenant DynamoDB isolation with the Token Vending Machine pattern

14 min · AWS · IAM · DynamoDB · STS · SaaS · Multi-tenant · Security · CDK

CloudFront cache tag invalidation with Lambda@Edge for multi-tenant SaaS

14 min · AWS · CloudFront · Lambda@Edge · Multi-tenant · SaaS · Step Functions · CDK

All articles →

Writing about

AWS21CDK9Generative AI6Amazon Bedrock6DevOps6Serverless5

Where to find me next

08 SepAWS Community Day Poland · Warsaw
15 SepAWS Community Day DACH · Berlin
SepAWS User Group Leaders EMEA Summit · Budapest
All whereabouts →