Browse past weeks of engineering reads.
Organizations need to automatically detect and classify personally identifiable information (PII) at scale across large volumes of data stored in cloud environments without manual inspection.
Extending AWS CloudFormation with custom resources while maintaining resilience and consistency across multiple AWS regions.
Deploying Eclipse Dataspace Components connectors to production on AWS while maintaining isolation, security, and compliance with International Data Space Association standards.
How to implement secure, standardized data sharing across organizational boundaries while maintaining compliance with IDSA standards and the Dataspace Protocol.
Authenticating game clients securely to Nakama game servers while managing player identity across separate authentication and game session systems.
iBusiness needed to prevent data exfiltration in machine learning environments while maintaining data scientist productivity and team scalability.
Implementing granular, tenant-isolated access control within RAG applications to prevent unauthorized data access across tenants while maintaining security at multiple levels.
Reducing SMS OTP fraud while maintaining a seamless user experience in mobile-first authentication flows.
How to design systems that can recover from ransomware and destructive cyberattacks when backups, credentials, and infrastructure components have been compromised.
Building a multi-tenant architecture that isolates tenants without requiring separate AWS accounts while maintaining stateful service deployments.
Organizations must determine whether to operate under a single AWS organization or split into multiple organizations based on their operational, security, and scaling requirements.
Streaming CloudWatch metrics to internal VPC-based OpenTelemetry collectors without exposing them to the internet.
Traditional rule-based KYC (Know Your Customer) systems lack the autonomous decision-making capability and real-time validation speed needed for modern financial services compliance operations.
Enable multiple independent organizations to securely exchange Product Carbon Footprint (PCF) data within a shared data space while maintaining data sovereignty and tenant isolation.
Generali Malaysia needed to optimize Kubernetes operations on AWS while reducing operational overhead, managing costs, and improving security posture.
Organizations need a streamlined way to protect and recover entire AWS workloads across multiple layers (data, compute, infrastructure, networking, and configuration) in the event of a disaster.
Agricultural supply chains (cotton/food) lack end-to-end traceability, making it difficult to verify sustainability claims, track climate impact, and ensure circularity across complex multi-party value chains.
Convera needed to implement fine-grained authorization for their API platform, where coarse-grained access controls were insufficient to manage complex permission requirements across API resources and actions.
Organizations struggle to design well-architected cloud systems that balance cost optimization, security, reliability, and performance efficiency across increasingly complex AWS environments including AI-powered workloads.
Securing Amazon Elastic VMware Service (EVS) environments requires centralized traffic inspection across multiple VPCs, on-premises data centers, and internet egress points, which is complex to architect and implement.
Organizations operating under European digital sovereignty requirements need resilient failover capabilities, but regulatory constraints on data residency and governance make cross-partition (sovereign-to-commercial cloud) failover architecturally complex.