Insights & Resources

BIMI on Amazon SES: lab readiness score 38→92 after DMARC quarantine at pct=100, SVG MIME fix, and CloudFront OAC, plus Terraform/CDK and free validators.

Quick Suite GA October 2025; Q Business and Kendra freeze new customers after July 30, 2026. A 420-seat professional-services firm paused a $38K/year Kendra quote and cut evaluation from 9 weeks to 3 by starting on Quick instead.

After Cognito multi-Region replication (June 2026), a B2B API platform (~18k RPS peak) cut auth-related 5xx during a regional drill from 4.2% to 0.1%, but a missing WAF rate rule still let a scraper burn $1.8k in a weekend.

For an on-prem MySQL estate (~1.1 TB, 340 tables), DMS full load + CDC into Aurora MySQL cut planned downtime from 6h to 18 min, though LOB misconfiguration added 11 hours of rework before cutover.

For a mid-market retailer (~2.4M SKUs, checkout p95 1.9s → 420ms), DynamoDB cart + Step Functions checkout + conditional inventory cuts held 2.1k checkout RPS, after a cache-as-inventory mistake oversold 380 units in 12 minutes.

For a retailer DW exit (~42 TB logical, 18 nightly Glue jobs), Aurora→Redshift zero-ETL retired 11 jobs and cut dashboard freshness from 6h to ~15 min. Concurrency scaling on zero-ETL (March 2026) absorbed Monday open spikes.

For a .NET monolith (~220 endpoints, ~$28k/mo EC2), strangling 14 endpoints to Lambda cut p95 on those routes from 1.4s to 210ms. An early LMI move on spiky traffic wasted ~$3.2k in idle capacity provider hours.

A 280-user SaaS ops team cut Client VPN connection-hours ~62% after moving 34 HTTPS apps to Verified Access. Site-to-Site on TGW stayed for the colo; full-tunnel Client VPN had been burning ~$1.1k/mo in idle connection fees.

KumoMTA on AWS production setup: 4 vCPU / 16 GiB baseline per official docs, $200-$610/mo dev footprint, SMTP architecture without ALB, and a 100+ item readiness checklist for self-hosted email infrastructure.

Postal v3 on AWS: 2 vCPU / 4 GiB minimum per official docs, RDS MariaDB production path, $250-$700/mo dev footprint, Docker + Caddy architecture, and 100+ item readiness checklist.

February 2026 server-side tool execution via AgentCore Gateway + Responses API cut median tool-round-trip latency ~180 ms → ~95 ms on a 12-tool SaaS CRM assistant by removing the client orchestration hop.

After the April 2026 S3 default that blocks SSE-C on new buckets (and on existing buckets in accounts with zero SSE-C objects), a SaaS media platform (~2.4 PB, 418 buckets) found 11 legacy upload paths still sending customer-key headers, all failing with 403 until migrated to SSE-KMS.