Blog · corpus.blog/blogs/hidekazu-konishi.com/posts
hidekazu-konishi.com
hidekazu-konishi.com
2026
Gang Scheduling and Dynamic Resource Allocation on Amazon EKS - Why One Half of the Vocabulary Is Still Alpha, and What Decides Which Device Allocation Path You Get | hidekazu-konishi.comoriginal ↗
26 Aug 2026
eBPF on Amazon EKS - What Loads Into Your Nodes, When a Network Policy Starts Enforcing, and Where the Coverage Stops | hidekazu-konishi.comoriginal ↗
26 Aug 2026
Passkeys and WebAuthn in Practice - Discoverable Credentials, Synced Versus Device-Bound Keys, and Why Account Recovery Decides the Design | hidekazu-konishi.comoriginal ↗
25 Aug 2026
Hardening GitHub Actions for AWS Deployments - Workflow Permissions, Untrusted Triggers, Action Pinning, and What the Trust Policy Cannot Catch | hidekazu-konishi.comoriginal ↗
25 Aug 2026
Policy Engines Compared - What IAM, Cedar, Rego, and Kyverno Do When Nothing Matches, When an Input Is Missing, and When the Engine Never Answers | hidekazu-konishi.comoriginal ↗
25 Aug 2026
Reproducible LLM Inference - Batch Invariance, the Cost of Determinism, and Where Bitwise Identity Is Actually Required | hidekazu-konishi.comoriginal ↗
24 Aug 2026
Speculative Decoding and Draft Models on AWS - Acceptance Rates, Which Methods Preserve the Output Distribution, and What the Managed Draft Model Takes Away | hidekazu-konishi.comoriginal ↗
24 Aug 2026
LLM Weight Quantization on AWS - Weight-Only and Activation Formats, What Each Costs in Accuracy, and When the Platform Quantizes for You | hidekazu-konishi.comoriginal ↗
24 Aug 2026
Zero-ETL Integrations on AWS - The Source and Target Matrix Across Amazon Redshift, AWS Glue, and Amazon OpenSearch Service | hidekazu-konishi.comoriginal ↗
23 Aug 2026
Heterogeneous Database Migration on AWS - Schema Conversion, Full Load with CDC, Data Validation, and a Cutover You Can Reverse | hidekazu-konishi.comoriginal ↗
23 Aug 2026
Amazon MSK Broker Types and Storage Tiers - What Standard Brokers, Express Brokers, and MSK Serverless Each Take Away | hidekazu-konishi.comoriginal ↗
23 Aug 2026
Identity-Aware Data Access on AWS - Propagating Workforce Identity from IAM Identity Center to Lake Formation and S3 Access Grants | hidekazu-konishi.comoriginal ↗
21 Aug 2026
AWS IAM Inbound Workload Federation - IAM Roles Anywhere, OIDC, and SPIFFE Converging on One Trust Policy Condition | hidekazu-konishi.comoriginal ↗
21 Aug 2026
Identity Lifecycle for AI Agents - Registration, Delegated Authorization, Access Review, and What Retirement Leaves Behind | hidekazu-konishi.comoriginal ↗
21 Aug 2026
Threat Detection for AI Workloads on AWS - What GuardDuty AI Protection Detects, What It Does Not, and How to Read a Finding | hidekazu-konishi.comoriginal ↗
20 Aug 2026
AI-Assisted Security Testing on AWS - What You Approve, What You Can Only Stop, and What the Findings List Hides by Default | hidekazu-konishi.comoriginal ↗
20 Aug 2026
Amazon EKS Control Plane Configuration - What You Can Set, What Blocks the Way Back, and How Far Each Setting Reaches | hidekazu-konishi.comoriginal ↗
20 Aug 2026
Disaggregated Prefill and Decode for LLM Serving on AWS - The KV Transfer, the Routing Threshold, and What Disaggregation Does Not Fix | hidekazu-konishi.comoriginal ↗
20 Aug 2026
Express Mode and Pre-Deployment Validation in AWS CloudFormation - What Completion Stopped Meaning, What Rollback Now Defaults To, and Which Checks Silently Skip | hidekazu-konishi.comoriginal ↗
20 Aug 2026
Migrating to the Stateless Model Context Protocol - What Breaks in Session-Based Servers and What Replaces It | hidekazu-konishi.comoriginal ↗
20 Aug 2026
OWASP Top 10 for Large Language Model Applications Mapped to AWS Controls - What Each Control Covers, Where It Stops, and What the Application Still Owns | hidekazu-konishi.comoriginal ↗
17 Aug 2026
AWS IAM AccessDenied Reference - Reading the Error and Locating the Deciding Statement | hidekazu-konishi.comoriginal ↗
17 Aug 2026
Agent Sandboxing and Blast-Radius Isolation on AWS - Choosing the Unit of Each Containment Boundary and What Each One Does Not Stop | hidekazu-konishi.comoriginal ↗
17 Aug 2026
Amazon EKS Capabilities - Managed Argo CD, ACK, and kro, and What Changes When the Controllers Move Off Your Cluster | hidekazu-konishi.comoriginal ↗
17 Aug 2026
Software Supply Chain Security on AWS - Signing, Attestation, and Admission Control | hidekazu-konishi.comoriginal ↗
17 Aug 2026
AI Bill of Materials on AWS - Discovering Models, Agents, and External Endpoints | hidekazu-konishi.comoriginal ↗
17 Aug 2026
Content Provenance for AI-Generated Media - C2PA, Watermarking, and Machine-Readable Marking | hidekazu-konishi.comoriginal ↗
12 Aug 2026
Threat Modeling Generative AI Applications on AWS - STRIDE for RAG, Agents, and Tool Use | hidekazu-konishi.comoriginal ↗
12 Aug 2026
Zero-Downtime Database Change on RDS and Aurora - Blue/Green Deployments, Upgrades, and Rollback Design | hidekazu-konishi.comoriginal ↗
12 Aug 2026
AWS Service Lifecycle States - Maintenance, Sunset, Full Shutdown, and What Each One Takes Away | hidekazu-konishi.comoriginal ↗
12 Aug 2026
AWS Lambda Managed Instances - Capacity Providers and the Multi-Concurrency Trap | hidekazu-konishi.comoriginal ↗
12 Aug 2026
Surviving Forced Maintenance on AWS - Retirements, Grace Periods, and Health-Driven Operations | hidekazu-konishi.comoriginal ↗
12 Aug 2026
OWASP Top 10 for Agentic Applications Mapped to AWS Controls - What Each Control Mitigates and What Residual Risk Remains | hidekazu-konishi.comoriginal ↗
12 Aug 2026
VPC Encryption Controls - Auditing and Enforcing Encryption in Transit | hidekazu-konishi.comoriginal ↗
12 Aug 2026
OpenTelemetry-Native Observability on AWS - OTLP Ingestion, PromQL, and the X-Ray SDK Transition | hidekazu-konishi.comoriginal ↗
12 Aug 2026
How Elastic Load Balancing Scales - Scaling Rate, Capacity, and Load Balancer Capacity Unit Reservation | hidekazu-konishi.comoriginal ↗
12 Aug 2026
The Boundaries of the AWS Global Network - Autonomous Systems, Partitions, and What a Private Path Does Not Guarantee | hidekazu-konishi.comoriginal ↗
12 Aug 2026
AWS IAM Outbound Identity Federation - Issuing Short-Lived Tokens from AWS to External Services | hidekazu-konishi.comoriginal ↗
12 Aug 2026
Designing for Spot Interruptions on AWS - Allocation Strategies, Rebalance Signals, and Graceful Degradation | hidekazu-konishi.comoriginal ↗
6 Aug 2026
AWS Data Movement Decision Guide - DataSync, Transfer Family, Storage Gateway, and Data Transfer Terminal | hidekazu-konishi.comoriginal ↗
6 Aug 2026
Elastic Fabric Adapter and the AWS Network Fabric - SRD, ENA Express, and Placement Group Design | hidekazu-konishi.comoriginal ↗
6 Aug 2026
Chaos Engineering on AWS with AWS Fault Injection Service - Experiment Design, Stop Conditions, and Safety Rails | hidekazu-konishi.comoriginal ↗
6 Aug 2026
AWS Systems Manager Fleet Operations at Scale - Patch Manager, State Manager, Automation Runbooks, and Session Manager | hidekazu-konishi.comoriginal ↗
6 Aug 2026
Amazon CloudWatch Alarm Design and Alert Fatigue - Composite Alarms, Anomaly Detection, Metric Math, and Metric Cardinality | hidekazu-konishi.comoriginal ↗
6 Aug 2026
AWS Private CA Hierarchy Design - Root and Subordinate CAs, Revocation, Short-Lived Mode, and mTLS on ALB | hidekazu-konishi.comoriginal ↗
6 Aug 2026
AWS Nitro Enclaves and Confidential Computing on AWS - Attestation, PCR Measurements, and KMS Condition Keys | hidekazu-konishi.comoriginal ↗
6 Aug 2026
Amazon GuardDuty Extended Threat Detection Architecture - Attack Sequences, Runtime Monitoring, and Response Automation | hidekazu-konishi.comoriginal ↗
6 Aug 2026
Amazon EBS Performance Engineering - Volume Types, io2 Block Express, Snapshot Initialization, and Multi-Attach | hidekazu-konishi.comoriginal ↗
6 Aug 2026
Amazon FSx Family Decision Guide - Choosing Between Lustre, NetApp ONTAP, OpenZFS, and Windows File Server | hidekazu-konishi.comoriginal ↗
6 Aug 2026
AWS IAM Access Analyzer Deep Dive - External, Internal, and Unused Access Analyzers with Custom Policy Checks in CI | hidekazu-konishi.comoriginal ↗
6 Aug 2026
Japanese and CJK Text Preprocessing for RAG - Tokenization, Normalization, and Chunk Boundaries | hidekazu-konishi.comoriginal ↗
2 Aug 2026
IPv6-First VPC Design on AWS - IPv6-Only Subnets, DNS64 and NAT64, and Dual-Stack Migration | hidekazu-konishi.comoriginal ↗
2 Aug 2026
Agent Reliability Engineering Design Guide - Retries, Loop Detection, Timeout Budgets, and Human Escalation for AI Agents | hidekazu-konishi.comoriginal ↗
2 Aug 2026
Post-Quantum Cryptography Standardization Timeline and Migration on AWS - From Algorithm Selection to Service Support | hidekazu-konishi.comoriginal ↗
2 Aug 2026
Amazon EKS Pod Identity and IRSA Decision Guide - Workload Identity Design, Trade-offs, and Migration Paths | hidekazu-konishi.comoriginal ↗
2 Aug 2026
Email Authentication History and Timeline - SPF, DKIM, DMARC, and BIMI | hidekazu-konishi.comoriginal ↗
2 Aug 2026
OpenTelemetry GenAI Semantic Conventions Implementation Guide - Vendor-Neutral Instrumentation for LLM and Agent Applications | hidekazu-konishi.comoriginal ↗
2 Aug 2026
AWS KMS Envelope Encryption and Data Key Caching Patterns - Design Decisions for the AWS Encryption SDK and Multi-Region Keys | hidekazu-konishi.comoriginal ↗
2 Aug 2026
TLS Certificate Ecosystem History and Timeline - Certificate Authorities, Automation, and Shrinking Certificate Lifetimes | hidekazu-konishi.comoriginal ↗
2 Aug 2026
LLM Output Verification Patterns - Grounding Checks, Self-Verification, Cross-Model Review, and Citation Enforcement | hidekazu-konishi.comoriginal ↗
2 Aug 2026
Major Security Vulnerabilities History and Timeline - Disclosure, Impact, and the Response Practices They Changed | hidekazu-konishi.comoriginal ↗
2 Aug 2026
Cell-Based Architecture and Shuffle Sharding on AWS - Blast Radius Reduction Patterns for Large-Scale Workloads | hidekazu-konishi.comoriginal ↗
2 Aug 2026
AWS Retired Services History and Timeline - Discontinued, Sunset, and Closed-to-New-Customer Services | hidekazu-konishi.comoriginal ↗
26 Jul 2026
AWS History and Timeline regarding Amazon OpenSearch Service - Overview, Functions, Features, Summary of Updates, and Introduction | hidekazu-konishi.comoriginal ↗
26 Jul 2026
AWS History and Timeline regarding Amazon ElastiCache - Overview, Functions, Features, Summary of Updates, and Introduction | hidekazu-konishi.comoriginal ↗
26 Jul 2026
AWS History and Timeline regarding AWS WAF - Overview, Functions, Features, Summary of Updates, and Introduction | hidekazu-konishi.comoriginal ↗
26 Jul 2026
AWS Custom Silicon History and Timeline - Nitro System, Graviton, Inferentia, Trainium, and Introduction | hidekazu-konishi.comoriginal ↗
26 Jul 2026
LLM API Parameter Compatibility Reference - Anthropic, OpenAI, Google Gemini, and Amazon Bedrock | hidekazu-konishi.comoriginal ↗
26 Jul 2026
LLM Context Window Growth Timeline - Milestones, Current Sizes by Provider, and Official Sources | hidekazu-konishi.comoriginal ↗
26 Jul 2026
RAG and Prompting Techniques History and Timeline - Chain-of-Thought, ReAct, RAG, and GraphRAG | hidekazu-konishi.comoriginal ↗
26 Jul 2026
Protecting Your Family from Tech Support Scams and Phishing - A Practical Guide for the Family IT Helper | hidekazu-konishi.comoriginal ↗
26 Jul 2026
AWS Security Incident Response Playbooks - First-Response Runbooks for Common Scenarios | hidekazu-konishi.comoriginal ↗
26 Jul 2026
AWS End-of-Support and EOL Reference - Lambda, EKS, RDS and Aurora, ElastiCache, and OpenSearch Service | hidekazu-konishi.comoriginal ↗
26 Jul 2026
Open-Weights LLM Release History and Timeline - Llama, Mistral, Qwen, DeepSeek, and gpt-oss Model Families, Capability Evolution, and Licenses | hidekazu-konishi.comoriginal ↗
26 Jul 2026
Java Version and LTS Timeline - Release History, the LTS Model, and Support Across Distributions | hidekazu-konishi.comoriginal ↗
26 Jul 2026
Node.js Release and EOL Timeline - LTS Schedule, Active LTS and Maintenance, and End-of-Life Dates | hidekazu-konishi.comoriginal ↗
26 Jul 2026
Python Version Support and EOL Timeline - Release Schedule, Support Policy, and End-of-Life Dates | hidekazu-konishi.comoriginal ↗
26 Jul 2026
Model Context Protocol Specification Version Timeline - Version-by-Version Changes and Adoption Milestones | hidekazu-konishi.comoriginal ↗
26 Jul 2026
Designing Websites for AI Agents - llms.txt, Structured Data, and Agent-Readable Web Practices | hidekazu-konishi.comoriginal ↗
26 Jul 2026
AWS Backup Data Protection and Governance - Backup Plans, Vault Lock, and Cross-Account Copy Design | hidekazu-konishi.comoriginal ↗
20 Jul 2026
AWS Config Rules and Conformance Packs - Compliance Detection, Automated Remediation, and Organizations Deployment | hidekazu-konishi.comoriginal ↗
20 Jul 2026
Event-Driven Architecture Anti-Patterns on AWS - Failure Modes, Root Causes, and How to Design Around Them | hidekazu-konishi.comoriginal ↗
20 Jul 2026
AWS Organization Guardrails - Service Control Policies, Resource Control Policies, and Data Perimeter Design | hidekazu-konishi.comoriginal ↗
20 Jul 2026
How Amazon S3 Achieves Strong Consistency and Durability - The Architecture Behind the Guarantees | hidekazu-konishi.comoriginal ↗
20 Jul 2026
How AWS Lambda Execution Environments Work - Firecracker MicroVMs, Lifecycle Phases, and SnapStart Internals | hidekazu-konishi.comoriginal ↗
20 Jul 2026
Google Gemini Model Release Timeline - Model Family, Capability Evolution, and Platform Availability | hidekazu-konishi.comoriginal ↗
20 Jul 2026
Microsoft Azure History and Timeline - Major Milestones from Windows Azure to the Present | hidekazu-konishi.comoriginal ↗
20 Jul 2026
AWS History and Timeline regarding AWS Step Functions - Overview, Functions, Features, Summary of Updates, and Introduction | hidekazu-konishi.comoriginal ↗
20 Jul 2026
Sakura Internet Ishikari Data Center and Sustainable Cloud Design - Cold-Climate Cooling, Renewable Energy, and Choosing Infrastructure by Sustainability | hidekazu-konishi.comoriginal ↗
20 Jul 2026
Sakura Internet History and Timeline - Hosting, Data Centers, Cloud, and AI Infrastructure Milestones | hidekazu-konishi.comoriginal ↗
20 Jul 2026
Sakura Cloud for AWS Users - Service Mapping, Terminology, and Design Differences | hidekazu-konishi.comoriginal ↗
20 Jul 2026
Sakura Cloud Overview for Global Engineers - Services, Zones, APIs, and How It Complements Your Cloud Architecture | hidekazu-konishi.comoriginal ↗
20 Jul 2026
Dynamic Model Routing and Configuration Management for Generative AI with AWS AppConfig - Feature Flags, Schema Validation, and Safe Deployments | hidekazu-konishi.comoriginal ↗
15 Jul 2026
Fine-Grained Access Control for AI Data with AWS Lake Formation - LF-Tags, Column-Level Permissions, and Cross-Account Sharing | hidekazu-konishi.comoriginal ↗
15 Jul 2026
LLM Inference Resilience Patterns on AWS - Retries with Backoff and Jitter, Circuit Breakers, and Stream Recovery | hidekazu-konishi.comoriginal ↗
15 Jul 2026
Amazon Bedrock Knowledge Bases Ingestion and Isolation Patterns - Direct Ingestion, Sync Strategies, S3 Metadata Design, and Tenant Boundaries | hidekazu-konishi.comoriginal ↗
15 Jul 2026
End-to-End Response Streaming Architecture for Generative AI on AWS - WebSocket APIs, Lambda Response Streaming, AppSync, and Voice Pipelines | hidekazu-konishi.comoriginal ↗
14 Jul 2026
AWS Step Functions Orchestration Patterns for Generative AI - Direct Service Integration, Parallelism, Callbacks, and Payload Limits | hidekazu-konishi.comoriginal ↗
14 Jul 2026
Amazon Bedrock Model Evaluation Practical Guide - Automatic Metrics, LLM-as-a-Judge, RAG Evaluation, and CI/CD Quality Gates | hidekazu-konishi.comoriginal ↗
14 Jul 2026