AWS Emulator, Two Days In: A Lab Notebook

AWS Emulator went generally available on 11 November 2026. Ten questions, one CI run against release 1.0.341: install and signature check, start-up cost, CLI, boto3 and Terraform, a 22-experiment comparison with moto, Lambda, service reach, the published fidelity scores, IAM, state, and a pipeline recipe.

Read more →

Step Functions as Agent Tools: Putting the Rules Where a Prompt Cannot Move Them

Step Functions workflows can now be exposed to agents as tools through AgentCore Gateway. What the connector offers, how to write a workflow that is safe to hand to a model, where the IAM boundary sits, and eighteen scenarios tested on Step Functions Local.

Read more →

Amazon S3 Vectors vs. OpenSearch Serverless vs. pgvector for RAG: Cost Floors, Query Bills and Tenant Isolation

All three AWS vector stores can now cost close to nothing at rest, but they bill and isolate tenants in very different ways. This comparison models Amazon S3 Vectors, OpenSearch Serverless (classic and next generation) and Aurora PostgreSQL with pgvector across three workload shapes, checks the S3 Vectors model against the worked examples on the AWS pricing page, and shows where the tenant boundary belongs in each.

Read more →

Bedrock AgentCore Runtime vs. Lambda for Hosting Agents: Isolation, State and the Idle Bill

The same agent runs on AWS Lambda and on Amazon Bedrock AgentCore Runtime with two thin adapters. The differences are isolation, where conversation state lives and what is billed while the agent waits. AgentCore is cheaper for I/O-bound agents only if sessions are ended deliberately: left at defaults, idle memory makes it the more expensive option.

Read more →

Zero-Trust Microservice Networking: AWS VPC Lattice vs. Private API Gateway

In modern enterprise cloud architectures, applications rarely live in a single AWS Virtual Private Cloud (VPC) or even a single AWS account. Production environments are partitioned across dozens or hundreds of accounts for blast-radius isolation, compliance boundaries, and autonomous team ownership. However, securely interconnecting these distributed microservices has long been one of the most frustrating […]

Read more →

Declarative Stream Processing: EventBridge Pipes vs. Custom Lambda Glue

EventBridge Pipes is usually sold as cheaper and lighter on concurrency than a Lambda stream consumer. Checked against the AWS documentation, both claims mostly disappear once the consumer filters on its event source mapping. This article compares the two for a DynamoDB Streams to EventBridge integration, with tested code, a reproducible cost model and a decision framework.

Read more →