Insights & Resources

CAF 3.0 organizes six perspectives and 47 capabilities, up from 31 in CAF 2.0, plus four phases (Envision, Align, Launch, Scale). This post connects those workshops to Control Tower, MAP, and Well-Architected so the framework does not stay a slide deck.

Global Accelerator charges about $0.025 per provisioned accelerator per hour, even while disabled, and adds Data Transfer-Premium on top of normal data transfer. Two static Anycast IPv4 addresses (or four addresses in dual-stack: two IPv4 and two IPv6) front ALBs, NLBs, EC2, or EIPs across Regions; that pricing model changes whether you beat CloudFront or Route 53 latency records alone.

July 2026 placement guide for AWS Security Agent full-repository code review (announced May 12, 2026): trust-boundary and data-flow analysis beside Inspector, CI SAST, and a reproducible pilot checklist. Preview terms still apply, so confirm console pricing.

May 2026 guidance with a reproducible scaffold: 9 artefact files, 0 Terraform-managed creates at plan baseline, anchored to official OpenTofu, HashiCorp, and Ansible project documentation.

The official aws/agent-toolkit-for-aws repo ships 43 atomic Agent Skills across 13 category folders, plus aws-core, aws-agents, and aws-data-analytics plugins. This guide covers why that bundle matters for IAM and audit posture, how the tree fits together, and how to pair it with the May 6, 2026 GA AWS MCP Server.

GitHub Actions OIDC role sessions are short-lived by design, yet teams still paste static access keys into workflow logs until scanners or audits catch the diff. Supply-chain writeups keep repeating the pattern into 2026.

July 2026 field note: Aurora failover windows still force app timeouts above tens of seconds; DynamoDB hot partitions and short transactions remain the scaling levers, with a partition-math worksheet you can reproduce.

Standard SQS queues sustain nearly unlimited throughput per queue (AWS-documented pattern) while FIFO caps at 300 TPS per API batch without high-throughput mode. Your May 2026 architecture review should start from those numbers.

July 2026: API Gateway REST integrations still default to a 29s timeout (quota increases possible for Regional/private), and WebSockets bill per message and connection minute. Build both into SLOs before picking protocols.

As of May 8, 2026, Lambda bills INIT time on cold paths (pricing change live since Aug 1, 2025), API Gateway REST integrations time out at 29 seconds, and picking ALB vs NLB still determines whether TLS termination and routing live on the edge.

CloudWatch Logs Insights bills $0.005 per GB scanned and high-cardinality custom metrics multiply costs. Cardinality budgets, sampling rules, and FinOps fixes.

API Gateway REST integrations still max out at 29 seconds. If your Lambda keeps retrying a 35-second partner HTTP call without a bounded circuit, you burn capacity and duplicate side effects instead of failing fast.