MCP OAuth on AgentCore Gateway + Cognito via APIGW Façade
May 19, 2026 · 18 min read · MCP Model Context Protocol AWS Bedrock AgentCore AgentCore Gateway Amazon Cognito API Gateway SST OAuth 2.1 RFC 9728 RFC 8414 RFC 7591 PKCE Claude Code ·
Introduction Amazon Bedrock AgentCore Gateway is the most pragmatic way to host a Model Context Protocol server on AWS today. Declare your tools as OpenAPI or as Lambda targets, get a managed multi-target MCP endpoint, and inherit AWS-native authentication via a customJwtAuthorizer. For machine-to-machine traffic that …
Read More about MCP OAuth on AgentCore Gateway + Cognito via APIGW FaçadeAgent Toolkit for AWS: What It Changes for Claude Code
May 12, 2026 · 12 min read · AWS Claude Code MCP Agent Toolkit Amazon Bedrock CloudFormation IAM Serverless ·
If you've been using Claude Code for AWS development, you've probably seen the pattern: you paste a CloudFormation snippet into your session, Claude suggests something plausible, you deploy it, and the stack events stream lights up with CREATE_FAILED on a property the model couldn't have known about — because its …
Read More about Agent Toolkit for AWS: What It Changes for Claude CodeTrack Claude Code Cost Per Project with Bedrock Tagging
Apr 29, 2026 · 9 min read · AWS Amazon Bedrock Claude Code Cost Management IAM Session Tags Cost Allocation FinOps ·
If you run claude against Amazon Bedrock across a dozen repos, your bill arrives as one opaque number. Until recently, the workaround was clunky — create an application inference profile per project, swap them by hand, hope you remembered which one was active. In April 2026, AWS shipped native per-principal cost …
Read More about Track Claude Code Cost Per Project with Bedrock TaggingTranscribing Long Podcasts and Meetings with FunASR
Apr 28, 2026 · 11 min read · FunASR Speaker Diarization Podcast Transcription Agent Skills CAM++ SeACo-Paraformer OpenClaw ASR LLM Post-Processing Speech-to-Text ·
Two recordings sat on my disk waiting to be turned into searchable text. A 4-hour 13-minute discussion from a TGO founders' group — eight speakers, Chinese, Zoom audio. A 1-hour 8-minute podcast episode (屠龙之术 Vol.94 × 知本论) where two hosts spent the whole hour dissecting OpenClaw — its positioning, the AI-agent …
Read More about Transcribing Long Podcasts and Meetings with FunASRFrom Solo AI Engineer to Autonomous Dev Team
Mar 10, 2026 · 14 min read · Claude Code AI Digital Engineer GitHub Actions DevOps Automation OpenClaw Multi-Agent Autonomous Development ·
In a previous post, the AI Digital Engineer pattern was introduced, featuring a single Claude Code agent guided by Skills and enforced by Hooks to execute a complete engineering workflow. This approach demonstrated effectiveness in delivering production-ready code with guaranteed quality gates. However, a fundamental …
Read More about From Solo AI Engineer to Autonomous Dev TeamServerless Multi-Tenant OpenHands on AWS with Fargate
Mar 2, 2026 · 10 min read · AWS CDK OpenHands ECS Fargate Serverless Multi-Tenant AI Agent DynamoDB EFS Cloud Map EventBridge Self-Hosted AI ·
In a previous post, I introduced an AWS CDK project for deploying OpenHands on EC2, featuring Cognito authentication and Aurora PostgreSQL. While this architecture successfully facilitated initial deployment, operating a shared AI coding platform for a team revealed three fundamental limitations: Shared Resources: All …
Read More about Serverless Multi-Tenant OpenHands on AWS with FargateTechnical Deconstruction of MCP Authorization: A Deep Dive into OAuth 2.1 and IETF RFC Specifications
Nov 12, 2025 · 22 min read · MCP Model Context Protocol OAuth 2.1 OAuth 2.0 PKCE JWT RFC 7636 RFC 9700 RFC 9728 Resource Indicators Federated Authentication AI Security ·
Executive Summary This article provides a deep-dive technical analysis of the Model Context Protocol (MCP) authorization flow. The central insight is that MCP's authorization model is not a generic application of OAuth 2.0 but a sophisticated implementation of the emerging OAuth 2.1 standard. The MCP protocol …
Read More about Technical Deconstruction of MCP Authorization: A Deep Dive into OAuth 2.1 and IETF RFC SpecificationsClaude Platform on AWS vs. Bedrock: A Decision Tree
May 13, 2026 · 14 min read · AWS Anthropic Claude Amazon Bedrock Claude Platform on AWS IAM CloudTrail AWS Marketplace PrivateLink ·
"Use Bedrock" was a one-line answer six months ago. As of May 11, 2026, it's not. Anthropic and AWS shipped Claude Platform on AWS to general availability — Anthropic's native developer platform, accessed through your AWS account, billed through AWS Marketplace, and operated by Anthropic outside the AWS security …
Read More about Claude Platform on AWS vs. Bedrock: A Decision TreeSelf-Hosted GitHub Runners on AWS Spot for AI Dev Teams
May 8, 2026 · 13 min read · GitHub Actions Self-Hosted Runners AWS Spot Graviton Terraform CI/CD Cost Optimization Autonomous Development ·
Autonomous AI dev teams move the bottleneck. When a dispatcher fans out work to dev and review agents every 5 minutes, the constraint is no longer human attention — it is the CI/CD pipeline that gates every PR. Each agent push triggers builds, tests, E2E verification, and bot reviews. With even a small team of agents …
Read More about Self-Hosted GitHub Runners on AWS Spot for AI Dev TeamsAI Digital Engineer: End-to-End Delivery with Claude Code
Jan 31, 2026 · 12 min read · Claude Code AI Digital Engineer GitHub Actions DevOps Automation Software Engineering CI/CD Test-Driven Development ·
What if an AI could operate like a senior software engineer - not just writing code, but following the complete engineering process from design through deployment? This post introduces the AI Digital Engineer pattern: a system that transforms Claude Code from an interactive assistant into an autonomous engineer capable …
Read More about AI Digital Engineer: End-to-End Delivery with Claude Code