vidanov

How a markdown file with layout and icon rules turns 30 minutes of draw.io cleanup into under 5. Works in Claude Code and Kiro CLI.

CI/CD pipelines hold the keys to your AWS accounts. Most organizations give them far more access than needed. Here's the pattern that fixes it.

AI agents are drafting IAM policies, tightening permissions, and responding to AccessDenied. Prompts won't stop them from granting iam:*. Here's what will.

A practical pattern with GitLab, GitHub, OIDC, Terraform, and CDK. From zero to continuously-refined least-privilege in 90 days.

Amazon Bedrock AgentCore shipped agent payments. Here are the four governance gaps it doesn't cover, and the pattern that fills them.

Every agent framework pitch deck has the same slide. Specialized agents collaborate. One plans, one...

Amazon Web Services (AWS) just shipped Amazon Bedrock AgentCore harness harness in public preview. It...

Learn how to build production-ready perceptual color similarity search using Amazon OpenSearch Service with k-NN capabilities and CIELAB color space

Why It Matters: Schema Changes Without Breaking Your Bedrock Integration

Amazon OpenSearch Service now supports custom plugins, allowing advanced users to extend the search engine's functionality beyond its out-of-the-box features

This article explores strategies for handling document versioning in OpenSearch.

Best Approach: Database as the Source of Truth & OpenSearch as a Search Layer.

Document versioning refers to the practice of tracking and managing multiple versions of a document over time. In many applications, document changes need to be recorded rather than overwritten, ensuring historical integrity and compliance with regulations.

In the previous post we covered the basics of setting up throttling for your API Gateway and Lambda functions. In this follow-up, we’ll take it to the next level, adding budget controls, time-based throttling adjustments, and AWS WAF security integration to safeguard your API while optimizing both performance and cost-efficiency.

In today's cloud-native world, effectively managing API and serverless function performance is crucial for building reliable and cost-effective applications. This guide explores advanced throttling techniques for AWS API Gateway and Lambda using Terraform, incorporating best practices from the AWS Well-Architected Framework and real-world implementation patterns

Looking to integrate artificial intelligence and machine learning into your business strategy? AWS has an ever-growing suite of AI/ML services, which can sometimes feel overwhelming to navigate. But don’t worry—this playbook is designed to provide a clear, simple guide to help you find the right tools for your business. Explore how AWS AI/ML services can empower your business and simplify your processes—no expert knowledge needed!

By implementing these recommendations, you can maximize the potential of your Amazon OpenSearch Service domain, delivering an improved search experience while optimizing costs and maintaining security. Let's explore these expert tips to supercharge your OpenSearch cluster.

This guide is for organizations currently using Solr and considering a migration to Amazon OpenSearch Service. We will explore the benefits of migrating, the process, and the key challenges, offering insights from real-world migrations to help you make an informed decision.

When choosing a search & analytics engine on AWS, it is crucial to distinguish between the open‑source project (OpenSearch), the managed AWS offering (Amazon OpenSearch Service), and the Elastic Stack. This article explains why Amazon OpenSearch Service is usually the best fit for workloads already running on AWS.

Amazon OpenSearch Service is a powerful, scalable search and analytics service offered by AWS. As organizations increasingly rely on OpenSearch for critical data operations, implementing robust backup and restore strategies becomes paramount. This article provides a comprehensive guide to Amazon OpenSearch Service domain backup and restore, helping AWS practitioners make informed decisions about data protection and disaster recovery.

Response headers play a vital role in reinforcing security measures, protecting against various attacks, and enhancing the overall security of your web applications. In this blog post, we’ll explore how to implement a Amazon CloudFront response header policy to improve security, walk through the process of testing and refining your settings, and discuss how to automate these changes across your infrastructure.

Struggling with URL redirections on your website hosted on AWS—especially when using Amazon S3 as a static origin? Amazon CloudFront Functions offer a low-latency, scalable way to manage redirections—without extra buckets or distributions. This guide walks you through setup, code, testing, and SEO impact.

When discussing AWS pricing with customers, limitations in the official [AWS Pricing Calculator](https://calculator.aws) can sometimes hinder accurate cost estimations. This blog post addresses a specific challenge encountered with Amazon CloudWatch Synthetics pricing and provides a solution by building a custom calculator using the AWS Pricing API.

Imagine you're managing an e-commerce platform with millions of products. Your search functionality is tightly coupled with your application code, making it challenging to update search logic without redeploying the entire application. This scenario illustrates the critical need for decoupling search logic in modern application development. This blog post explores how OpenSearch templates and aliases — part of the open-source OpenSearch project and fully supported in Amazon OpenSearch Service — can address this challenge, offering practical strategies to enhance search performance and simplify maintenance.

This blog post demonstrates how to create these essential alarms using Terraform, an infrastructure-as-code tool. By leveraging Terraform, you can automate the process of setting up notifications for potential security risks, ensuring that your sensitive information and encryption keys remain protected.

Amazon OpenSearch Service is a powerful tool for search, log analytics, and RAG (Retrieval-Augmented Generation) systems. To ensure optimal performance and reliability, effective monitoring is crucial.

This guide empowers you to optimize OpenSearch for lightning-fast and accurate phone number searches....