September 5, 2026 Three Ways to Wire Two Services on AWS A shop and a pharmacy, wired three ways: NAT gateways and IP allowlists, queues between VPCs, IAM identity instead of addresses. Same code, different security.
awsarchitecturesecuritycdkvpcsqsiameventbridgelambda
Read article
September 5, 2026 floci: Which Parts of AWS Run Locally for Real I put floci, a LocalStack replacement, through the services a two-VPC design needs. Lambda, ECS, RDS and SQS run. WAF and API Gateway AWS_IAM enforce nothing.
awsflocilocalstackcdktesting
Read article
June 2, 2026 Tier 3 logging in code: OpenTelemetry to Grafana Tempo The three changes that take a serverless API from Powertools and traceparent strings to OTel SDK spans shipping to Tempo, with a runnable docker-compose stack.
awsserverlessobservabilitytracingopentelemetrytempografanalambdatypescript
Read article
June 1, 2026 Tier 2 logging in code: Powertools, EMF, traceparent The three changes that take a serverless API from CloudWatch-only logging to Tier 2, walked through with a runnable LocalStack repo and the actual log lines it produces.
awsserverlessobservabilitylogginglambdapowertoolsemfopentelemetrytypescript
Read article
May 31, 2026 API logging in production Three-tier guide to logging a serverless API on AWS. The CloudWatch-only baseline in detail, plus what I would reach for next when it strains.
awsserverlessobservabilityloggingcloudwatchlambdaproductiontypescript
Read article