sjramblings.io — Stephen Jones on AWS, AI Agents & Cloud Architecture on sjramblings.io

If you’ve ever opened a pull request to add one more Service Control Policy to your Landing Zone and watched it fail with “Max Allowed SCPs for ou ‘Infrastructure’ is 5, found total 6”, you’ve felt the pressure I’m about to talk about.

I had 47 tabs open.

AWS publishes a JSON file every day that nobody reads.

An Australian lawyer asked me last week whether he could run “frontier Claude” on AWS Bedrock in Sydney and keep his client data in Australia.

In March 2026, AWS Network Firewall became available in the European Sovereign Cloud.

I asked my agent to find a deployment guide.

This is Part 3 of a three-part series on building skills for Claude.

Welcome back to the series.

This is Part 1 of a 3-part series on building skills for Claude.

Your team just got the green light to build an AI agent for customer support escalation.

Most people building with AI agents hit the same wall eventually.

AWS quietly dropped a prescriptive guidance document on MCP strategies this month.

A few weeks ago AWS dropped Agent Plugins, a packaging model that bundles skills, MCP servers, hooks, and reference docs into installable units for AI coding agents.

Every time I set up log shipping from a non-AWS source to CloudWatch, the same friction shows up.

We’ve spent the last two years watching AI coding assistants evolve from glorified autocomplete to genuine collaborators.

Another week, another quantum breakthrough.

Last week, Chris Porter and I entered the Airia F1 Atlassian Williams Racing virtual hackathon as team JoPoCo (Jones + Porter + Co).

AWS quietly announced support for 30 new resource types in AWS Config on March 2, 2026.

What if everything we know about RAG is built on a flawed assumption?

On 18 February 2026, AWS quietly updated ACM to reduce the default validity of public certificates from 395 days to 198 days.

I’ve been staring at a Terraform module for the last ten minutes, and I can’t stop thinking about a question that would have been absurd two years ago: why am I writing this?

I spent the last week falling down a rabbit hole.

If you’ve ever needed to run a hypervisor inside an EC2 instance, you know the pain.

If you’ve been building AI workloads in Australia, you’ve felt the frustration.

The Number That Should Worry You AWS raised GPU Capacity Block prices by 15% on a Saturday in January.

The Decision You’ve Been Making on Autopilot Every AWS practitioner has a version of this conversation at least once a quarter.

You’ve Got the Tools.

My dad had a camera.

If you’ve ever written an IAM trust policy for GitHub Actions OIDC federation, you’ve probably done the thing we all did.

Builders are living in a weird new era.

Rob Kennedy, AWS Vice President of Network Services, opened his re:Invent 2025 keynote with a simple metaphor: atoms bond into molecules, molecules combine into structures, and those structures become complex organisms.

Many organisations are rushing into deploying AI agents with the same enthusiasm they had for serverless in 2016, great technology, terrible operational discipline.

I watched Werner Vogels deliver what he’s calling his final AWS re:Invent keynote, and it struck me that he wasn’t talking about new services or feature announcements.

If you’ve been managing AWS Transit Gateway costs in a multi-account environment, you’ve probably felt the pain of sender-pay billing.

If you’ve been building with LLMs lately, you’re probably as excited as I am about the possibilities!

Ever wondered what it’s like to use an AI tool to improve itself?

Working with a single AI assistant on complex projects is like having one engineer handle an entire software delivery pipeline.

Daniel Miessler just published something that made me stop and think: “What are we actually building with all these AI tools?”

Daniel Miessler just dropped a fascinating deep-dive into building what he calls a “Personal AI Infrastructure” (PAI) - essentially an AI-powered life management system that handles everything from content creation to security assessments.

Summary AWS just dropped a networking feature that’s going to change how we think about VPC routing forever.

Summary AWS just flipped the switch on their newest region: Asia Pacific (New Zealand) - ap-southeast-6.

Let’s be honest.

There’s something magical about the games we grew up with.

Recently I’ve been trying out n8n as a workflow automation tool and I’m really enjoying the flexibility it offers.

Hey there, tech enthusiasts!

Hey there, Tech Friends!

Unsealing Vault after a server restart is one of those tasks that, while essential, can quickly become cumbersome—especially when you’re managing multiple Vault nodes or clusters.

Hey there, tech aficionados!

Hey there, tech enthusiasts!

Today, I was reminded of the rich content stored in AWS Config and how easily it can reveal so much about an AWS Organisation across one or many accounts.