Read what ships.

21Cloudflare · postmortem

8 eMudhra certificates are compromised. Here's what you need to know

Private keys associated with eight eMudhra intermediate certificates were compromised, allowing potential traffic interception. Cloudflare prioritized patching critical services, released client and tunnel updates, and deployed mitigations across its products. Customers are advised to upgrade affected software, update custom trust stores, and avoid disabling verification despite error messages.

DEPTH ■■■■■4 min read4 days ago

Security

Sign in to save and rate

22Amazon Web Services · migration

Accelerating airline retailing innovation: how Datalex modernized with AWS Experience-Based Acceleration and agentic AI

Datalex partnered with AWS for a three-day Experience-Based Acceleration workshop to modernize its mission-critical airline retail platform from Java 8 and EJB2 to Spring Boot on Java 21. The team used parallel workstreams and agentic AI to prove migration feasibility, implement automated CI/CD pipelines, and integrate generative AI capabilities without disrupting existing airline operations. This effort successfully established repeatable migration patterns, reduced memory usage by 35%, and accelerated the timeline for long-term platform evolution.

DEPTH ■■■■■14 min read3 weeks ago

Sign in to save and rate

23Cloudflare · architecture

A fully programmable secure web gateway

Cloudflare integrated its secure web gateway and data loss prevention services with its edge computing platform to allow customers to run custom code inline during policy evaluation. The team introduced a new Forward action for traffic transformation and Custom Functions for dynamic rule evaluation without requiring external proxy infrastructure. This enables complex security logic, real-time alerting, and dynamic header injection with zero network hop overhead.

DEPTH ■■■■■13 min read10 days ago

Sign in to save and rate

24Amazon Web Services · architecture

Running multi-day AZ evacuation drills with ARC Zonal Shift

This post explains how to run multi-day Availability Zone evacuation drills using ARC Zonal Shift to prove application resilience under sustained stress. The team details step-by-step procedures across ECS, EKS, and PostgreSQL databases to uncover hidden failure modes like unoptimized scaling and stale connections. The result is a practical framework for moving from theoretical multi-AZ architectures to proven operational resilience.

DEPTH ■■■■■19 min read3 weeks ago

Sign in to save and rate

25Amazon Web Services · architecture

How MHK built a HIPAA-eligible agentic AI solution on Amazon Bedrock

Healthcare technology company MHK faced fragmented AI infrastructure and lengthy development cycles while trying to process unstructured medical documents under strict HIPAA standards. To solve this, they built a multi-tenant, event-driven agentic workflow framework called the SmartProminence AI Orchestrator on AWS using Amazon Bedrock, ECS, and SQS. The new system reduced manual review effort by 90% and shortened AI feature deployment times from months to weeks.

DEPTH ■■■■■12 min read3 weeks ago

Sign in to save and rate

26Amazon Web Services · architecture

Build adaptive AI interfaces with the AG-UI protocol, agent swarms, and Nova Act on AWS

AI applications produce variable outputs that cannot be effectively handled by static user interfaces, leading to development friction and poor user experiences. The team implemented an adaptive interface pattern using the AG-UI protocol, the Strands Agents SDK Swarm pattern, and Amazon Nova Act on AWS to dynamically render components and automate legacy integrations. This architecture streams agent findings over Server-Sent Events, enabling real-time multi-agent consensus and reducing interface development overhead.

DEPTH ■■■■■22 min read3 weeks ago

Sign in to save and rate

27Cloudflare · practice

Localizing compliance at scale: achieving South Korea’s ISMS certification

To achieve South Korea's ISMS certification, Cloudflare had to modify its account sign-up flow to itemize required consents and disable third-party social logins that bypassed the form. By combining IP geolocation with user country selection, the team ensured localized compliance without breaking global functionality. The resulting certification provides a localized assurance benchmark for Korean users.

DEPTH ■■■■■8 min read3 days ago

Security

Sign in to save and rate

28Cloudflare · architecture

Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

Recent major vulnerabilities in Citrix NetScaler exposed public-facing authentication gateways to unauthenticated remote code execution. To prevent similar emergency patches, the team recommends placing an independent Zero Trust access layer, web application firewall, and strict origin connection controls in front of the application server. Implementing these defense-in-depth measures reduces exposure and ensures a single software flaw does not result in total system compromise.

DEPTH ■■■■■9 min read6 days ago

Security

Sign in to save and rate

29Amazon Web Services · practice

How Dynata scaled AI across the development lifecycle with AI-DLC and Kiro IDE

Dynata adopted the AI-Driven Development Lifecycle methodology using Kiro IDE and Amazon Q Developer to compress multi-sprint feature delivery into a single sprint. The team progressed from code generation to integrating knowledge ecosystems and conducting structured three-day feature workshops. As a result, requirements ambiguities surfaced early during planning and the team achieved faster, more aligned feature delivery.

DEPTH ■■■■■15 min read10 days ago

Sign in to save and rate