Darryl Ruggles
banner
darryl-ruggles.cloud
Darryl Ruggles
@darryl-ruggles.cloud
Principal Cloud Solutions Architect @ Ciena - AWS Community Builder

Serverless, Event-Driven Architecture, AWS, Kubernetes, Rust, Terraform, Security, DevOps, FinOps, MLOps, Maker

https://darryl-ruggles.cloud
https://www.linkedin.com/in/darryl-ruggles
Pinned
darryl-ruggles.cloud/dsql-kabob-s...

🆕 Here is my latest blog introducing a Serverless Multi-Region E-Commerce Platform based on an Amazon Aurora DSQL database. For a database platform I have almost always used DynamoDB due to it being truly serverless and pay as you go. (1️⃣/4️⃣)

🧵
Aurora DSQL: Serverless E-Commerce Platform
Discover how to build a serverless multi-region e-commerce platform using Aurora DSQL and AWS services in this comprehensive guide
darryl-ruggles.cloud
dev.to/aws/no-oauth...

Dealing with OAuth can be confusing when connecting AWS agents to services. There's a new MCP client for IAM that lets you use existing AWS credentials directly. There is no Cognito setup to deal with and no token management - just standard IAM auth. (1️⃣/3️⃣)

🧵
No OAuth Required: An MCP Client For AWS IAM
When Anthropic published the Model Context Protocol (MCP), I immediately started experimenting with...
dev.to
November 18, 2025 at 9:52 PM
blog.deckhouse.io/canary-in-k8...

There are times when you want to use canary deployments with new app versions. One good approach for this in Kubernetes uses Argo Rollouts and Istio, handling both external traffic via Ingress and internal service-to-service communication effectively. (1️⃣/3️⃣)

🧵
Canary Deployment in Kubernetes Using Argo Rollouts and Istio
Learn how to run canary deployments in Kubernetes using Argo Rollouts and Istio, with passive health checks and traffic insights from…
blog.deckhouse.io
November 18, 2025 at 6:41 PM
Reposted by Darryl Ruggles
darryl-ruggles.cloud/dsql-kabob-s...

🆕 Here is my latest blog introducing a Serverless Multi-Region E-Commerce Platform based on an Amazon Aurora DSQL database. For a database platform I have almost always used DynamoDB due to it being truly serverless and pay as you go. (1️⃣/4️⃣)

🧵
Aurora DSQL: Serverless E-Commerce Platform
Discover how to build a serverless multi-region e-commerce platform using Aurora DSQL and AWS services in this comprehensive guide
darryl-ruggles.cloud
November 18, 2025 at 4:15 AM
darryl-ruggles.cloud/dsql-kabob-s...

🆕 Here is my latest blog introducing a Serverless Multi-Region E-Commerce Platform based on an Amazon Aurora DSQL database. For a database platform I have almost always used DynamoDB due to it being truly serverless and pay as you go. (1️⃣/4️⃣)

🧵
Aurora DSQL: Serverless E-Commerce Platform
Discover how to build a serverless multi-region e-commerce platform using Aurora DSQL and AWS services in this comprehensive guide
darryl-ruggles.cloud
November 18, 2025 at 4:15 AM
kiro.dev/blog/introdu...

Kiro CLI just went live!! It looks really interesting. So many tools to try and so little time.

It brings AI agents to your terminal, so you don't have to spend time debugging and having to switch back and forth to an IDE. Create custom agents for backend.. (1️⃣/3️⃣)

🧵
Bring Kiro agents to your terminal with Kiro CLI
kiro.dev
November 17, 2025 at 5:16 PM
blog.qualys.com/product-tech...

EventBridge is a super useful AWS service but needs careful security. Since it has access to all events in your accounts, it's a goldmine for bad actors. As it connects more services, reconnaissance attack pathways multiply beneath the surface. (1️⃣/3️⃣)

🧵
Amazon EventBridge Security Guide: Best Practices for 2025 Architectures | Qualys
Secure your EventBridge with best practices for cross-account access, event rules, and VPC endpoints. Explore reconnaissance attack breakdown and AWS quotas 2025. Achieve reduced complexity and scalab...
blog.qualys.com
November 17, 2025 at 4:35 PM
www.glukhov.org/post/2025/11...

Years ago, managing Kubernetes apps meant wrestling with dozens of YAML files but tools like Helm have changed that by bringing package management to Kubernetes. Helm makes deployments reproducible, versioned, and easier to maintain across environments. (1️⃣/3️⃣)

🧵
Helm Charts: Kubernetes Package Management
Learn to create, manage, and deploy Helm Charts for Kubernetes. Comprehensive guide covering chart structure, templating, values management, OCI registries, and production best practices for DevOps te...
www.glukhov.org
November 17, 2025 at 4:09 AM
dev.to/santanu_das/...

I'm an advocate for using multiple AWS accounts for different tasks. These bring clean separation, but workflows often don't respect account boundaries. When app teams need to trigger platform pipelines from S3 uploads across accounts, manual handoffs create friction.(1️⃣/3️⃣)

🧵
dev.to
November 16, 2025 at 6:48 PM
carriagereturn.nl/aws/lambda/i...

NAT gateways work well but can really add up in cost. You do get charged by the hour whether you're using them or not. For workloads like Lambda that run sporadically, you're essentially paying for idle infra around the clock, a cost that adds up quickly. (1️⃣/3️⃣)

🧵
You don’t need NAT gateway to deploy Lambda into VPC
In this episode of VPC Dealers we’re taking on a Lambda function that’s been running in a VPC with NAT gateway for years. It works fine but those hourly charges keep adding up. Time to do what Ant did...
carriagereturn.nl
November 16, 2025 at 5:19 PM
medium.com/@praveenvall...

In many cases you need to ensure data can never be overwritten. With Amazon S3 you can use Object Lock to help. This ensures critical data can't be modified or deleted during retention periods. This WORM approach addresses both compliance and ransomware risks. (1️⃣/3️⃣)

🧵
Enforcing Immutability with Amazon S3 Object Lock
In today’s digital world, data is one of the most valuable assets an organization holds. From financial reports and healthcare records to…
medium.com
November 15, 2025 at 8:56 PM
medium.com/@nsalexamy/s...

With the news of NGINX Ingress Controller being soon deprecated lots of people are looking at managing access to their Kubernetes resources. There are lots of good ways to handle this. On AWS, the Load Balancer Controller works well with Traefik to provision ALBs.(1️⃣/3️⃣)

🧵
Securing Web Apps on Kubernetes with TLS Using AWS Load Balancer Controller and Traefik
Introduction
medium.com
November 15, 2025 at 5:04 PM
aws.amazon.com/about-aws/wh...

The AWS container starting point i recommend is Elastic Container Service (ECS) which offers a free control plane and supports Fargate serverless compute. Working will rolling deployments there are times when things go wrong and this has been improved now. (1️⃣/3️⃣)

🧵
Amazon ECS improves Service Availability during Rolling deployments - AWS
Discover more about what's new at AWS with Amazon ECS improves Service Availability during Rolling deployments
aws.amazon.com
November 15, 2025 at 4:23 AM
aws.amazon.com/about-aws/wh...

I've said before that Eventbridge is my favourite AWS service. It can do so many things and is perfect for building Event-Drive Architectures (EDAs) on AWS. Creating rules to match events is always tedious so it's great to see a new tool to help. (1️⃣/2️⃣)

🧵
Amazon EventBridge introduces enhanced visual rule builder - AWS
Discover more about what's new at AWS with Amazon EventBridge introduces enhanced visual rule builder
aws.amazon.com
November 14, 2025 at 7:29 PM
builder.aws.com/content/35LY...

GenAI tools have entered everyone's life in a big way. They can help with a lot including increase developer productivity in the hands of experienced devs. Using a spec-driven approach can help building maintainable code like with creating MCP servers. (1️⃣/3️⃣)

🧵
AWS Builder Center
Connect with builders who understand your journey. Share solutions, influence AWS product development, and access useful content that accelerates your growth. Your community starts here.
builder.aws.com
November 14, 2025 at 4:21 PM
medium.com/@sforsachin8...

Github Actions are great but have you ever copied a GitHub Actions workflow without really understanding what ${{ github.sha }} or ${{ secrets.GITHUB_TOKEN }} actually does? This and more is explained below including key variables and contexts. (1️⃣/3️⃣)

🧵
GitHub Actions Variables Explained: Stop Copy-Pasting Workflows and Understand What’s Actually…
Ever stared at ${{ github.sha }} or ${{ secrets.GITHUB_TOKEN }} and thought — “what kind of wizardry is this?”  You’re not alone.
medium.com
November 14, 2025 at 1:32 AM
k8slens.dev/blog/kuberne...

Port forwarding in Kubernetes creates a secure tunnel between your local machine and cluster resources through the API server. It's useful for debugging, database access, and testing services without modifying network configurations or setting up load balancers. (1️⃣/3️⃣)

🧵
Kubectl Port-Forward: Complete Guide for Kubernetes Developers
Learn how to use kubectl port-forward to securely access Kubernetes pods and services locally. Step-by-step examples, best practices, and Lens IDE integration.
k8slens.dev
November 13, 2025 at 6:19 PM
medium.com/aws-in-plain...

Using managed and serverless tools is an easy way to start. Setting up an event notification system using AWS Lambda and SNS is a good example. Ingesting events through API Gateway, routing messages via SNS, and persisting logs in DynamoDB are too. (1️⃣/3️⃣)

🧵
How I Built a Scalable Event Notification System with AWS Lambda and SNS
In today’s cloud-native world, timely communication is everything. Whether it’s confirming a ticket purchase, alerting users about new…
medium.com
November 13, 2025 at 3:42 AM
nilsnorfors.medium.com/api-rate-lim...

Your most engaged customers might be your most expensive ones. Without API rate limits, that enthusiastic integration polling every 30 seconds or that broken retry loop can quietly eat your margins until the AWS bill arrives. (1️⃣/3️⃣)

🧵
API rate limits: safeguarding SaaS
A few weeks ago, I came across a Reddit thread in r/aws.
nilsnorfors.medium.com
November 12, 2025 at 6:50 PM
dev.to/aws-builders...

I am a big advocate for using Infrastructure as Code (IaC) tools wherever possible they make so many things better. If you're working in AWS specifically i recommend using SAM or the CDK but in general my go-to for IaC is Terraform. Managing state is key. (1️⃣/3️⃣)

🧵
A Better Way to Write Production-Ready Terraform - Part 2 - Remote State Management
In This Article: Why the default terraform.tfstate is a production-killer. Setting up an...
dev.to
November 12, 2025 at 5:29 PM
dev.to/aws-builders...

Many teams use AI/ML inferencing through Bedrock or OpenAI. Another approach is hosting your own model endpoints. On AWS, options include EKS, ECS, or Lambda. Choosing between them isn't straightforward, especially when optimizing for cost and performance. (1️⃣/3️⃣)

🧵
Deploying ML Models to Production: AWS Lambda vs ECS vs EKS - A Data-Driven Comparison
A comprehensive, hands-on guide to choosing the right AWS platform for your ML inference...
dev.to
November 12, 2025 at 2:59 AM
aws.amazon.com/blogs/machin...

Multi-agent AI systems are becoming increasingly practical for complex tasks. There are different architectural patterns being used today for how specialized agents can collaborate with each suited to specific business challenges and workflows. (1️⃣/3️⃣)

🧵
Multi-Agent collaboration patterns with Strands Agents and Amazon Nova | Amazon Web Services
In this post, we explore four key collaboration patterns for multi-agent, multimodal AI systems – Agents as Tools, Swarms Agents, Agent Graphs, and Agent Workflows – and discuss when and how to apply ...
aws.amazon.com
November 11, 2025 at 9:34 PM
medium.com/@tojanasg/bu...

Seeing examples always helps! Here is a straightforward example of building an app on AWS using serverless services.

Janarthanan Ravikumar uses API Gateway, Lambda, and DynamoDB. A repo is included with it to try for yourself!
“Building a Full Stack Application: A Serverless Approach with AWS”
Scenario:
medium.com
November 11, 2025 at 6:03 PM
aws.amazon.com/blogs/big-da...

One downside of using EC2 Spot Instances is dealing with unpredictable interruptions. Depending on your workload this may not be a problem. The example below discusses a monitoring system for visibility into interruption patterns across Auto Scaling Groups. (1️⃣/3️⃣)

🧵
Analyzing Amazon EC2 Spot instance interruptions by using event-driven architecture | Amazon Web Services
In this post, you'll learn how to build this comprehensive monitoring solution step-by-step. You'll gain practical experience designing an event-driven pipeline, implementing data processing workflows...
aws.amazon.com
November 11, 2025 at 3:42 AM
medium.com/@sanmugamsan...

Traditional file uploads bottleneck servers by routing everything through the backend first. A better approach IMO is using S3 presigned URLs to let clients upload directly to storage, bypassing custom backends entirely. An example of setting this up is below. (1️⃣/3️⃣)

🧵
Secure File Uploads Made Simple: Mastering S3 Presigned URLs with React and FastAPI
Learn how to securely upload files using S3 presigned URLs with React and FastAPI
medium.com
November 10, 2025 at 9:57 PM
dev.to/spacelift/wh...

Managing a collection of containers in Kubernetes to perform a bigger task is a common case and Argo Workflows can handle this. It's designed for running multi-step processes where tasks need to happen in sequence or parallel, with each step running its own container.(1️⃣/3️⃣)

🧵
What is Argo Workflows?
Argo Workflows is a Kubernetes-native workflow execution engine. Workflows are defined as a series of...
dev.to
November 10, 2025 at 4:08 PM