
Top 8 Load Balancer Algorithms You Should Know About
8 ways a balancer picks the next server. Each one has its own picture, under the section that explains it.
Practical posts on AWS, DevOps, Laravel, and running software in production.
50 articles 59 topics 14 comments
50 articles

8 ways a balancer picks the next server. Each one has its own picture, under the section that explains it.

AgentCore Gateway can now trust your private CA on VPC Lattice MCP, OpenAPI, and HTTP targets. Here is the API shape, what Terraform still cannot express, and the expiry alarm I would add.

Debug remote MCP authentication step by step: OAuth discovery, callback failures, token audiences, scopes, and AWS API Gateway responses.

Terraform state can contain passwords, access keys, and a map of your infrastructure. Here is how I keep it out of Git, lock it in S3, and limit who can read it.

A contractor lost access to a folder in March and could still read the source cards from it in September, because our chat history endpoint served citations that had been authorized once, at write time, and never again. Here's the fix on API Gateway, Lambda, DynamoDB, and pgvector: store citation refs instead of blobs, re-run the live entitlement check on every history read, tombstone what the caller can no longer see, and fail closed on both unknown and denied sessions.

The 2026-07-28 MCP spec deleted the initialize handshake and Mcp-Session-Id, which should have been free for a Lambda server that was already stateless. It wasn't: a CORS allow-list, a missing server/discover, a 404 that should have been a 405, and a notification stream an HTTP API can't hold open all broke behind API Gateway.

A re-run of a failed ingestion job left me with duplicate vectors and worse retrieval. Here's the Step Functions state machine I built instead: a Distributed Map over chunks, retries tuned to Bedrock throttling, content-hash idempotency, and a quarantine path for documents that just won't parse.

A 15-year-old ERP on Zend Framework 1 and an app an AI wrote last week hit the same wall: code that worked yesterday can't carry tomorrow's scale. Here's the migration that turned that pattern into two services.

A Bedrock-backed Fastify route on Lambda needs a contract after the model answers, not just before it. Zod on the output, RAG context treated as untrusted data, one repair pass then a 422, idempotent SQS, and the CloudWatch metrics that catch it drifting.

How to scope Bedrock IAM policies per Lambda function, build permission boundaries that block privilege escalation, catch misconfigurations with CloudTrail, and automate guardrails in CI so AI agents can't widen your blast radius.

How to enable Lambda SnapStart for Java and Python runtimes using Terraform, measure cold start improvements, and compare costs against provisioned concurrency.

AI agents write code fast. They also write bugs, security holes, and nonsense. Here is the 12-item checklist I run before merging anything an agent touched.

How to run long AI inference workloads on AWS Lambda MicroVMs with real cost controls, timeout handling, and concurrency management.

Lambda chaining for multi-step AI workflows gets messy fast. Failed steps, retries, timeouts, and idle billing. Here is how I replaced manual Lambda chaining with AWS Step Functions for LLM orchestration.

How to use Fargate Spot capacity providers to reduce container costs by up to 70%, with real Terraform configurations and interruption handling strategies.

How to build a production-ready Bedrock Agent with S3 knowledge bases, Lambda action groups, and guardrails, all configured with Terraform.

How to set up AWS WAF in front of CloudFront for a solo-built application, with rate limiting, bot control, and IP block rules, all managed with Terraform.

A practical migration story about moving a Lambda AI app from a custom OpenAI-style integration to Amazon Bedrock without rewriting the whole codebase
How I connect Langfuse, Lambda, and CloudWatch so I can trace prompt behavior, cost, retries, and failures in a production AWS app

How I use AI as a first-pass reviewer for Terraform and Lambda pull requests, while keeping human judgment on the risky parts

The guardrails, permissions, and review flow I use so coding agents can help without touching the wrong AWS resources

Build a serverless AI inference API on Bedrock and Lambda: a basic endpoint, streaming through Function URLs, multi-model routing, and real cost math.

A client messaged me in a panic last month. Their AWS bill had crossed $3,000 and they had no idea why. They assumed that's just what AWS costs at their scale. A serverless SaaS, decent traffic, nothi

One Claude Code Session Isn't Enough Anymore I love a single Claude Code session. It's where most of my real work happens, plan in one pane, code in the other, terminal humming along. But here's the t

Deploy Laravel on ECS Fargate with Terraform. Compare queue workers and web hosting with App Runner, which is now limited to existing customers.

In the last post I walked through the multi-tenant auth layer running in front of my Fastify API on AWS Lambda. JWT tokens, hashed API keys, tenant context decorated onto every request. That solved th

How I deployed a remote MCP server on AWS Lambda behind API Gateway: stateless Streamable HTTP, API key auth, CloudFormation, and Claude Desktop setup.

My GitHub Actions pipeline for AWS Lambda and Terraform: OIDC deploys with no stored AWS keys, S3 state locking, a prod approval gate, and alias rollback.

Why Bref Instead of Vapor Laravel Vapor is the official serverless deployment tool for Laravel. It works. I've used it on two client projects. But it costs $399 per year just for the subscription, and

I have a production SaaS running on AWS Lambda with Fastify. Single tenant, single customer, everything working great. Then the second customer signed up. That's when things got interesting. Suddenly

Not everything needs to be serverless. I know, I know. I literally write about Lambda and API Gateway all the time. But look, sometimes you just need a single EC2 instance running your Laravel app and

I was knee-deep in building my SaaS when users started asking questions I couldn't answer from the UI alone. My app had a solid backend, Lambda functions, Fastify, PostgreSQL on RDS. I wrote about tha

How I use Claude Code with Terraform on AWS: a CLAUDE.md for infra, a validate hook, and piping terraform plan to Claude to catch IAM and downtime risks.

Laravel 13 dropped on March 17, 2026, and I've spent the last two days digging through every commit, PR, and doc page. There's a lot to unpack here. This isn't one of those "minor version bump" releas

I stumbled on OpenClaw a few weeks ago and immediately wanted to try it. The pitch is straightforward: it's an open-source AI gateway that connects LLMs to messaging platforms like Telegram, Discord,

Queue document analysis, summarization, and classification with SQS. Process them with Lambda and Bedrock. No servers, no polling, no wasted spend.

Stream Bedrock tokens to the browser over API Gateway WebSockets with three Lambda functions and DynamoDB, plus the 410 GoneException fix and real costs.

I recently built a multi-tenant SaaS API from scratch. The product uses AI models under the hood and re-trains them regularly on new data. The requirements were pretty clear: low operational overhead,

Healthcare organizations are increasingly turning to machine learning to improve patient outcomes, reduce costs, and enhance operational efficiency. However, when working with protected health information (PHI), compliance with the Health Insurance P...

Everyone loves to deploy their applications to the Amazon EC2 instance. It's easy to deploy and maintain. This tutorial will launch a Laravel application to an EC2 instance. What is EC2? Amazon Elastic Compute Cloud (EC2) is one of the first offering...

Hi 👋I recently passed the last and final AWS certifications. I am now fully AWS certified with all 12 certifications under my belt. Software engineers from all different levels frequently asked me how I learned AWS and how they should get started. O...

As part of my job, I create AWS accounts frequently. I do lots of things depending on account needs before starting to use it. I found 3 common things I do with all of the new AWS accounts. I made a checklist. Nowadays I do these 3 things first and t...

Use the Cloud Watch agent to send logging and debugging to Cloud Watch. You can check logs without logging into instances. It's accessible even after the instance is terminated. Life is far from perfect, and so does Amazon Lightsail instances. It can...

You can create Redis/Elasticache even though Amazon Lightsail doesn't offer it. You can create an Elasticache for Redis cluster in AWS and connect using VPC Peering. Prerequisites An Amazon Lightsail instance. To create a new instance follow Deploy...

Lightsail offers Load Balancer. It's very easy to provision one and attach one or multiple instances to it. Let's create one and attach instances to it. Prerequisites You need one or more Amazon Lightsail instances to attach to the load balancer in ...

Amazon Lightsail offers dedicated Databases. You can make use of it instead of an on-instance database. It's easy, managed, secure, and most importantly it's not tied to the instance. So, your database will be safe even if instance crashes. In "Deplo...

Amazon Lightsail is a fixed monthly priced VPS service offered by AWS. Once you install the OS of your choice, you can run almost any application. In this application, I'm showing how to deploy one of my favorite backend frameworks called Laravel. Wh...

Taking regular backup/snapshots of a production application is important. It is one of the main requirements of a disaster recovery(DR) plan. But snapshots are not only for DR, you can use them to move/clone instances to different regions or availabi...

It's not very hard to add CDN Distribution to a WordPress app hosted on Amazon Lightsail. But if you are new, it can be cumbersome. This article is to demonstrate how to do it easily. Why Should I use CDN distribution? You might hear about Content D...

Introduction AWS Lightsail can be the easiest entry to the AWS Cloud. It has fixed monthly pricing unlike most other services, so you don't have to worry about a huge monthly bill. Lightsail is really great for small to medium apps. It has out-of-th...
Latest updates
Follow the RSS feed to read new posts in your favorite reader.