Insights
AWS insights & expertise
Articles, war stories and practical analyses for teams running critical workloads on AWS.
Architecture
Backup and Disaster Recovery on AWS: The Minimum Viable Setup for an SMB
AWS Backup, Vault Lock, Elastic Disaster Recovery: what an SMB actually needs to survive a ransomware attack or a human error, without over-investing.
Ecosystem
Datadog vs CloudWatch for an AWS SMB: When to Pay for a Third Party, When to Stay Native
CloudWatch and Datadog don't bill the same way — per-unit vs per-host. Official pricing, a worked example on a 15-server SMB, and the real factor that blows up the bill.
FinOps
AWS Egress Fees: Mapping and Cutting Your Data Transfer Costs Before January 2027
Internet egress, cross-AZ, NAT Gateway: how to map your AWS data transfer costs and cut them before the EU Data Act bans all switching fees on 12 January 2027.
Architecture
EKS vs ECS vs Fargate for an SMB: the real cost/complexity comparison
ECS, EKS or Fargate for an AWS SMB: real costs (EKS control plane, eu-west-3 Fargate rates), operational complexity, and a concrete decision tree to choose.
Security & Compliance
GDPR and data residency on AWS: why eu-west-3 isn't always enough
eu-west-3 checks the GDPR box but not the CLOUD Act one. Between AWS European Sovereign Cloud (launched January 2026) and SecNumCloud, a decision framework for French SMBs.
FinOps
RDS: 7 cost optimization levers nobody activates
gp3 storage, Reserved Instances vs Database Savings Plans, Graviton, Performance Insights: 7 concrete levers to cut an SMB's RDS bill in 2026.
Ecosystem
Wiz vs AWS Security Hub + GuardDuty: what a third-party CSPM really adds
GuardDuty and Security Hub cover threat detection and AWS posture natively. Wiz, bought by Google for $32B in 2026, promises more — at what cost, for which SMB, on what criteria?
Architecture
Well-Architected Review: what an audit really finds, notes from the field
What an AWS Well-Architected Review actually finds in SMBs: average number of High Risk Issues, common traps, and how to claim up to $5,000 in AWS credits.
AI Engineering
Amazon Bedrock for SMBs: profitable use cases and the costs to plan for
Which Bedrock use cases are actually profitable for an SMB, and which hidden costs (Knowledge Bases, vector store, Guardrails) blow up the bill.
Security & Compliance
AI Act: the real 2026-2027 compliance timeline after the Digital Omnibus delay
The Digital Omnibus pushed the AI Act's high-risk obligations to December 2027. What's still due right now, what got delayed, and why waiting is risky for SMBs.
FinOps
Graviton: migrating your workloads to ARM without breaking anything
Evaluation method, real-world savings, and the pitfalls to avoid when migrating AWS workloads to Graviton (ARM) without operational risk.
FinOps
Cutting your AWS bill without breaking your architecture: practical methods
Proven FinOps methods to recover 30-50% of an SMB's AWS bill without introducing operational risk.
Security & Compliance
Preparing a SOC2 audit on AWS without slowing your team down
The proven sequence to prepare a SOC2 Type 1 or Type 2 audit on AWS in 90 days, with technical controls per layer.
Architecture
AWS multi-account: 5 critical mistakes to avoid in 2026
The most expensive anti-patterns in AWS multi-account architecture, and how to avoid them with a minimal Landing Zone.
FinOps
FinOps: where your AWS costs are really hiding
The most underestimated AWS cost lines for SMBs — data transfer, NAT Gateway, CloudWatch, orphan resources. With CLI commands to hunt them down.