Practical guides on self-managed Kubernetes, CDK infrastructure-as-code, ArgoCD deployments, observability, and Bedrock AI tooling. Every article comes from a real problem I had to solve, not a tutorial I followed.
How I removed 7 IAM actions from a public pod by routing all data access through an in-cluster BFF, achieving Kubernetes credential isolation and graceful degradation.
How I built a two-layer anti-hallucination system for Bedrock agents — a Claude Haiku grounding verifier plus three deterministic backstops that strip fabricated claims before output.
How I structured a production EKS platform with CDK-provisioned substrate, ArgoCD app-of-apps, Pod Identity, and Karpenter — and the real failures that shaped every decision.