Tagged
June 2026 benchmark on the same read-only AWS scaffold: OpenTofu 1.12 plan median 5.2s vs Pulumi 3.248 preview median 10.6s, plus when to pick HCL over TypeScript on landing zones.
Manoj V.A composite fintech API (~8ms p99 to metro users) spent ~$22k/mo on hybrid infrastructure around an Outposts rack before moving read-heavy paths to a Chicago Local Zone and keeping Outposts only for card-PIN HSM proximity. p99 held at 9ms and hybrid infra dropped ~38%. This post covers placement and connectivity, not EC2-vs-Lambda unit economics.
Palaniappan POn a composite mid-market OTT platform (~180k concurrent live peak, ~12 TB/month VOD catalog), routing Saturday-night live through MediaConvert batch queues added ~$4,200/mo in idle transcode capacity before switching live to IVS and keeping MediaConvert for catalog only. CloudFront egress still dominates steady-state, so model it before you buy encoders.
Palaniappan PCopying curated Parquet into every consumer account is how data platforms drown in storage cost and permission sprawl. On Feb 11, 2026 AWS shipped Lake Formation cross-account version 5, which adds wildcard RAM shares for hundreds of thousands of tables. A composite 12-account platform cut duplicate curated copies from 3 to 0 and dropped cross-account access tickets from ~11/month to ~3 by standardizing LF-Tags + resource links.
Palaniappan PMost remote-access RFPs still default to full Windows desktops, but 60%+ of contractor work is browser-only. WorkSpaces Secure Browser isolates SaaS in AWS; WorkSpaces Applications (formerly AppStream 2.0) streams fat clients without a desktop. A composite regulated services firm cut 3 legacy VDI vendors to 2 OU-scoped patterns and reduced unmanaged-endpoint incidents from ~9/quarter to ~2 after splitting browser vs app streaming.
Nash OgdenCloudZero, Vantage, Finout, nOps, ProsperOps, and Kubecost on AWS: a platform selection guide, plus who implements tagging, allocation, and architecture savings.
Kevin W.Implement ProsperOps on AWS. Savings Plans automation works best after baseline modeling and architecture stability. Production checklist included.
Kevin W.Prowler finds AWS misconfigurations. This guide covers who remediates findings, IaC fix patterns, Security Hub workflows, and when to bring in AWS security consulting.
Nash OgdenProduction checklist for Prowler and AWS Security Hub: multi-account setup, scheduled scans, finding workflows, and remediation patterns on AWS.
Nash OgdenAWS shipped ECS Express Mode on November 21, 2025. It takes three inputs (image plus two IAM roles) and provisions Fargate, ALB, HTTPS, auto scaling, and a *.ecs.*.on.aws URL. Up to 25 services can share one ALB. No Express Mode surcharge.
Manoj V.AWS Blocks (public preview, June 2026): 18+ open-source TypeScript building blocks that run locally without an AWS account and deploy with zero code changes.
Palaniappan POn June 15, 2026 AWS made Console Private Access work without internet. VPC endpoints route 100% of browser traffic. First-party benchmark: 161 interface endpoints and ~$263/mo for a 12-service 3-AZ pilot in us-east-1.
Nash Ogden
