MCP OAuth on AgentCore Gateway + Cognito via APIGW Façade
May 19, 2026 · 18 min read · MCP Model Context Protocol AWS Bedrock AgentCore AgentCore Gateway Amazon Cognito API Gateway SST OAuth 2.1 RFC 9728 RFC 8414 RFC 7591 PKCE Claude Code ·
Introduction Amazon Bedrock AgentCore Gateway is the most pragmatic way to host a Model Context Protocol server on AWS today. Declare your tools as OpenAPI or as Lambda targets, get a managed multi-target MCP endpoint, and inherit AWS-native authentication via a customJwtAuthorizer. For machine-to-machine traffic that …
Read More about MCP OAuth on AgentCore Gateway + Cognito via APIGW FaçadeAgent Toolkit for AWS: What It Changes for Claude Code
May 12, 2026 · 12 min read · AWS Claude Code MCP Agent Toolkit Amazon Bedrock CloudFormation IAM Serverless ·
If you've been using Claude Code for AWS development, you've probably seen the pattern: you paste a CloudFormation snippet into your session, Claude suggests something plausible, you deploy it, and the stack events stream lights up with CREATE_FAILED on a property the model couldn't have known about — because its …
Read More about Agent Toolkit for AWS: What It Changes for Claude CodeTrack Claude Code Cost Per Project with Bedrock Tagging
Apr 29, 2026 · 9 min read · AWS Amazon Bedrock Claude Code Cost Management IAM Session Tags Cost Allocation FinOps ·
If you run claude against Amazon Bedrock across a dozen repos, your bill arrives as one opaque number. Until recently, the workaround was clunky — create an application inference profile per project, swap them by hand, hope you remembered which one was active. In April 2026, AWS shipped native per-principal cost …
Read More about Track Claude Code Cost Per Project with Bedrock TaggingTranscribing Long Podcasts and Meetings with FunASR
Apr 28, 2026 · 11 min read · FunASR Speaker Diarization Podcast Transcription Agent Skills CAM++ SeACo-Paraformer OpenClaw ASR LLM Post-Processing Speech-to-Text ·
Two recordings sat on my disk waiting to be turned into searchable text. A 4-hour 13-minute discussion from a TGO founders' group — eight speakers, Chinese, Zoom audio. A 1-hour 8-minute podcast episode (屠龙之术 Vol.94 × 知本论) where two hosts spent the whole hour dissecting OpenClaw — its positioning, the AI-agent …
Read More about Transcribing Long Podcasts and Meetings with FunASRFrom Solo AI Engineer to Autonomous Dev Team
Mar 10, 2026 · 14 min read · Claude Code AI Digital Engineer GitHub Actions DevOps Automation OpenClaw Multi-Agent Autonomous Development ·
In a previous post, the AI Digital Engineer pattern was introduced, featuring a single Claude Code agent guided by Skills and enforced by Hooks to execute a complete engineering workflow. This approach demonstrated effectiveness in delivering production-ready code with guaranteed quality gates. However, a fundamental …
Read More about From Solo AI Engineer to Autonomous Dev TeamServerless Multi-Tenant OpenHands on AWS with Fargate
Mar 2, 2026 · 10 min read · AWS CDK OpenHands ECS Fargate Serverless Multi-Tenant AI Agent DynamoDB EFS Cloud Map EventBridge Self-Hosted AI ·
In a previous post, I introduced an AWS CDK project for deploying OpenHands on EC2, featuring Cognito authentication and Aurora PostgreSQL. While this architecture successfully facilitated initial deployment, operating a shared AI coding platform for a team revealed three fundamental limitations: Shared Resources: All …
Read More about Serverless Multi-Tenant OpenHands on AWS with FargateTechnical Deconstruction of MCP Authorization: A Deep Dive into OAuth 2.1 and IETF RFC Specifications
Nov 12, 2025 · 22 min read · MCP Model Context Protocol OAuth 2.1 OAuth 2.0 PKCE JWT RFC 7636 RFC 9700 RFC 9728 Resource Indicators Federated Authentication AI Security ·
Executive Summary This article provides a deep-dive technical analysis of the Model Context Protocol (MCP) authorization flow. The central insight is that MCP's authorization model is not a generic application of OAuth 2.0 but a sophisticated implementation of the emerging OAuth 2.1 standard. The MCP protocol …
Read More about Technical Deconstruction of MCP Authorization: A Deep Dive into OAuth 2.1 and IETF RFC Specifications
Choosing a vector store on AWS for generative AI (GenAI) workloads used to be a one-line decision: pick Amazon OpenSearch Service or its serverless variant (AOSS) and move on. That changed when Amazon S3 Vectors went GA in 2025. By storing vector data directly in S3 and pricing it on a fully consumption-based model, S3 …
Read More about S3 Vectors vs OpenSearch: Decision Tree from 30+ ProjectsClaude Platform on AWS vs. Bedrock: A Decision Tree
May 13, 2026 · 14 min read · AWS Anthropic Claude Amazon Bedrock Claude Platform on AWS IAM CloudTrail AWS Marketplace PrivateLink ·
"Use Bedrock" was a one-line answer six months ago. As of May 11, 2026, it's not. Anthropic and AWS shipped Claude Platform on AWS to general availability — Anthropic's native developer platform, accessed through your AWS account, billed through AWS Marketplace, and operated by Anthropic outside the AWS security …
Read More about Claude Platform on AWS vs. Bedrock: A Decision TreeSelf-Hosted GitHub Runners on AWS Spot for AI Dev Teams
May 8, 2026 · 13 min read · GitHub Actions Self-Hosted Runners AWS Spot Graviton Terraform CI/CD Cost Optimization Autonomous Development ·
Autonomous AI dev teams move the bottleneck. When a dispatcher fans out work to dev and review agents every 5 minutes, the constraint is no longer human attention — it is the CI/CD pipeline that gates every PR. Each agent push triggers builds, tests, E2E verification, and bot reviews. With even a small team of agents …
Read More about Self-Hosted GitHub Runners on AWS Spot for AI Dev Teams