AWS IAM Outbound Identity Federation - Issuing Short-Lived Tokens from AWS to External Services | hidekazu-konishi.com

The Boundaries of the AWS Global Network - Autonomous Systems, Partitions, and What a Private Path Does Not Guarantee | hidekazu-konishi.com

How Elastic Load Balancing Scales - Scaling Rate, Capacity, and Load Balancer Capacity Unit Reservation | hidekazu-konishi.com

OpenTelemetry-Native Observability on AWS - OTLP Ingestion, PromQL, and the X-Ray SDK Transition | hidekazu-konishi.com

VPC Encryption Controls - Auditing and Enforcing Encryption in Transit | hidekazu-konishi.com

OWASP Top 10 for Agentic Applications Mapped to AWS Controls - What Each Control Mitigates and What Residual Risk Remains | hidekazu-konishi.com

Surviving Forced Maintenance on AWS - Retirements, Grace Periods, and Health-Driven Operations | hidekazu-konishi.com

AWS Lambda Managed Instances - Capacity Providers and the Multi-Concurrency Trap | hidekazu-konishi.com

AWS Service Lifecycle States - Maintenance, Sunset, Full Shutdown, and What Each One Takes Away | hidekazu-konishi.com

Zero-Downtime Database Change on RDS and Aurora - Blue/Green Deployments, Upgrades, and Rollback Design | hidekazu-konishi.com

Threat Modeling Generative AI Applications on AWS - STRIDE for RAG, Agents, and Tool Use | hidekazu-konishi.com

Content Provenance for AI-Generated Media - C2PA, Watermarking, and Machine-Readable Marking | hidekazu-konishi.com

AWS IAM Access Analyzer Deep Dive - External, Internal, and Unused Access Analyzers with Custom Policy Checks in CI | hidekazu-konishi.com

Amazon FSx Family Decision Guide - Choosing Between Lustre, NetApp ONTAP, OpenZFS, and Windows File Server | hidekazu-konishi.com

Amazon EBS Performance Engineering - Volume Types, io2 Block Express, Snapshot Initialization, and Multi-Attach | hidekazu-konishi.com

Amazon GuardDuty Extended Threat Detection Architecture - Attack Sequences, Runtime Monitoring, and Response Automation | hidekazu-konishi.com

AWS Nitro Enclaves and Confidential Computing on AWS - Attestation, PCR Measurements, and KMS Condition Keys | hidekazu-konishi.com

AWS Private CA Hierarchy Design - Root and Subordinate CAs, Revocation, Short-Lived Mode, and mTLS on ALB | hidekazu-konishi.com

Amazon CloudWatch Alarm Design and Alert Fatigue - Composite Alarms, Anomaly Detection, Metric Math, and Metric Cardinality | hidekazu-konishi.com

AWS Systems Manager Fleet Operations at Scale - Patch Manager, State Manager, Automation Runbooks, and Session Manager | hidekazu-konishi.com