When Public Certificates Stop Carrying clientAuth - Where AWS Sends or Accepts Client Certificates, and What Each Path Says About Extended Key Usage | hidekazu-konishi.com

Moving AWS Certificate Manager Off Email Validation - The Announced Dates, What UpdateCertificateOptions Changes and Keeps, Finding Email-Validated Certificates, and Where the Documentation Has Not Caught Up | hidekazu-konishi.com

How AWS Certificate Manager Issues Public Certificates - Managed, Exportable, and ACME: Where the Private Key Lives, Who Renews, Where It Can Be Attached, and What Gets Recorded | hidekazu-konishi.com

Which MCP Clients a Remote MCP Server Lets In - Client ID Metadata Documents, Pre-Registration, Deprecated Dynamic Client Registration, and the Allowlists Layered on Top | hidekazu-konishi.com

What Decides How Much a CloudWatch Logs Insights Query Scans - What You Choose, What CloudWatch Logs Indexes for You, What Can Change the Result, and Where Each Shows Up | hidekazu-konishi.com

How Amazon Aurora serverless Decides Its Capacity - What You Set, What Aurora Decides Within Your Range, What the Maximum ACU Fixes, and Where Each Shows Up | hidekazu-konishi.com

Where AWS Publishes Version End Dates - The AWS Health Version Catalog, DescribeServiceLifecycle, and the Calendars of RDS, Aurora, EKS, Lambda, OpenSearch Service, and ElastiCache | hidekazu-konishi.com

AWS History and Timeline regarding AWS Health - Overview, Functions, Features, Summary of Updates, and Introduction | hidekazu-konishi.com

Querying Apache Iceberg and Parquet from Amazon Aurora PostgreSQL - What DuckDB Runs, What Your Transaction Sees, How Current a Read Is, and What Reaches the Writer | hidekazu-konishi.com

Where AI Agent Authorization Standards Stand - RFCs, IETF Working Group Documents, Individual Drafts, and Specifications from Other Bodies | hidekazu-konishi.com

What a Translating LLM Gateway Drops - Thinking Blocks, Signatures, Cache Breakpoints, Tool Call IDs, and Citations on Each Route Between the Messages, Chat Completions, Responses, and Converse APIs | hidekazu-konishi.com

JWT and JOSE Standards History and Timeline - JWS, JWE, JWK, JWA, JWT, and How the Algorithm Registry Has Changed | hidekazu-konishi.com

Mid-Conversation Changes in the Claude API - System Messages, Tool Changes, Per-Message Effort, and What the Prompt Cache and Preserved Thinking Keep | hidekazu-konishi.com

Amazon Bedrock Inference Endpoints and API Keys - What bedrock-runtime and bedrock-mantle Each Accept, Which IAM Action Each Call Checks, and What CloudTrail Records | hidekazu-konishi.com

GitHub App Installation Tokens and Token Length and Format Assumptions - Where Validation Patterns, Storage, Proxies, and Log Redaction Hard-Code the Shape of a Token | hidekazu-konishi.com

Trusted Publishing Beyond npm and PyPI - RubyGems, NuGet.org, crates.io, pub.dev, JSR, and Open VSX: Exchanged or Used Directly, What Trust Is Bound To, and What Each Registry Rejects | hidekazu-konishi.com

Install-Time Scripts by Package Manager - npm, pnpm, Yarn, Bun, Deno, pip, and uv: What Runs When You Install a Dependency, Since Which Version, and Where the Approval Is Recorded | hidekazu-konishi.com

IAM Authentication to Databases, Caches, and Streams on AWS - Token Lifetime, What Revoking Access Does to Open Connections, and the Identity Inside the Service | hidekazu-konishi.com

Publishing npm and PyPI Packages Without Long-Lived Tokens - Trusted Publishing, Staged Publishing, and What Trusted Publishing Does Not Assert | hidekazu-konishi.com

What Fills an AWS STS Session Token - Session Policies, Session Tags, the Single Size Limit, and How to Measure and Test It | hidekazu-konishi.com