Tag: how-to-guide

Production guide for Kubecost on AWS EKS — cost allocation setup plus architecture changes that reduce spend, not just attribute it.

Implement ProsperOps on AWS — Savings Plans automation works best after baseline modeling and architecture stability. Production checklist included.

Prowler finds AWS misconfigurations. This guide covers who remediates findings, IaC fix patterns, Security Hub workflows, and when to bring in AWS security consulting.

Production checklist for Prowler and AWS Security Hub — multi-account setup, scheduled scans, finding workflows, and remediation patterns on AWS.

July 2026: MAP Mobilize should not start with more than five failed Platform/Security controls. 47-point readiness checklist (People, Platform, Security, FinOps) for Assess gates — CAF 3.0 + Migration Lens, post–Migration Hub.

July 2026: nine migration mistakes that still show up after Migration Hub closed to new customers on November 7, 2025 — Application Migration Service (MGN), DMS, AWS Transform, Org/SCPs, FinOps dual-run costs, and Migration Lens.

SOC 2 Type II certification proves your controls are effective over 6-12 months. This guide covers the compliance roadmap, AWS security controls, documentation requirements, and audit preparation for 2026 certification.

Amazon Bedrock Agents Classic automate workflows by giving foundation models the ability to call tools (APIs, Lambda, databases). This guide covers building agents with tool definitions, testing in the console, handling errors, and scaling to production.

Amazon Bedrock Knowledge Bases automate the RAG (Retrieval-Augmented Generation) pipeline — semantic search, chunking, embedding, and context injection into Claude or other foundation models. This guide covers setup, data ingestion, cost optimization, and production patterns.

Glue ETL + Athena SQL without servers — still the default lake path. July 2026: Glue 5.x jobs, Parquet partitions, ~$0.44/DPU-hour + $5/TB scan math, pipeline checklist.

WAF beyond “enable managed rules”: COUNT→BLOCK, rate limits, Bot Control cost traps, GraphQL depth. July 2026 API protection checklist.

Karpenter replaces Kubernetes Cluster Autoscaler with intelligent bin-packing and just-in-time node provisioning. This guide covers setup, consolidation, cost optimization, and production patterns for EKS clusters.