AWS

Practical AWS engineering by D. Klincharski, from deploying containers with Terraform to checking account security and costs. These projects and field notes connect infrastructure, operations, and Bedrock retrieval decisions.

About D. Klincharski

Builds / Tools / Labs

Projects to explore.

01 Open source Terraform ECS / FargateAn AWS reference stack connecting containers, load balancing, storage, and optional data services. Explore project 02 Open source SentryHiveRun established AWS security scanners with one read-only command and produce a traceable report. Explore project 03 Open source CostHiveCombine open-source FinOps scans into a report ranked by estimated AWS savings and confidence. Explore project 04 Product ScanCombUse WardBee by ScanComb to check AWS and repository evidence against framework controls and prepare compliance reviews. Explore project

Articles / Experiments

Notes from the work.

01 Oct 21, 2026 Amazon Bedrock RAG Architecture: 5 Ways to Build with Managed Knowledge BasesManaged vs customer-managed Knowledge Bases, then five Amazon Bedrock RAG architectures: direct inference, AgentCore Harness, Strands and Agentic Retrieval, with trade-offs. Technical blog · 14 min 02 Oct 05, 2026 RAG on AWS: Which Pattern Fits Your Use Case?Eight RAG patterns in one visual guide: practical examples, what AWS supports, and where retrieval is heading. Technical blog · 4 min 03 Oct 05, 2026 What is Jev? Why everyone is excited about a model that can't write a sentenceJev from TypeSafe AI returns typed decisions instead of text. A critical overview of the hype, the vendor numbers, how it fits on AWS with Bedrock AgentCore, and where it is actually useful. Technical blog · 6 min 04 Sep 29, 2026 Start compliant: a Terraform Fargate baseline that passes the scanner on day oneHow the open-source Terraform ECS Fargate starter now ships the controls WardBee by ScanComb checks for, so new services begin with evidence instead of a remediation backlog. Technical blog · 6 min 05 Sep 09, 2026 I scanned an AWS account with 4 open-source FinOps tools. Here's what each one missed.Infracost, Komiser, Cloud Custodian and OpenCost, run against the same account. Each found something the others could not see, and all four shared the same blind spots. Journal · 6 min 06 Aug 26, 2026 How I audit an AWS account with Prowler, ScoutSuite and SteampipeA practical walkthrough of the three open-source tools I reach for when someone hands me an unfamiliar AWS account and asks "is this okay?" Journal · 5 min 07 Aug 09, 2026 Bedrock Knowledge Base Chunking Strategies: How to Choose (and What Changed in 2026)A practical decision guide to Bedrock Knowledge Base chunking, the managed-versus-customer-managed fork, starting parameters, evaluation, and Terraform. Technical blog · 8 min 08 Jul 22, 2026 ScanComb and WardBee: evidence for cloud compliance in the age of vibe codingWardBee by ScanComb checks cloud and repository evidence against framework controls, exposes gaps, and prepares compliance reviews with human sign-off. Journal · 3 min

Explore by topic