;
;

DZone Cloud Architecture Zone

Recent posts in Cloud Architecture on DZone.com

Google Cloud KMS vs. AWS KMS: Java Encryption Guide

Every system that stores sensitive data needs keys that never leave a hardened boundary, an audit trail of every use, and rotation that doesn't mea...
Posted on 22 October 2026 | 3:30 pm

How to Keep AI Agents From Going Rogue Using Docker Sandbox

An AI agent is an "autonomous software program that uses artificial intelligence to make a plan, execute tools, and complete an action." Autonomy (...
Posted on 21 October 2026 | 1:00 pm

Hot-Reloading Kubernetes Secrets and ConfigMaps in Go With mamori (No Pod Restarts)

If you run Go services on Kubernetes, you know the ritual. You update a Secret or a ConfigMap, and then you do one of these: kubectl rollout rest...
Posted on 19 October 2026 | 1:00 pm

Node and Capacity Spillover: What Happens When Kubernetes Runs Out of Room

A pod stuck in Pending is one of the most misleading states in Kubernetes. Nothing looks wrong. There's no error banner, no red text screaming at y...
Posted on 15 October 2026 | 7:00 pm

Azure Key Vault Secrets That Reconcile Themselves in Go, With mamori

Azure Key Vault is the well-behaved citizen of the Azure secrets world. Every secret is versioned; you get soft-delete and purge protection; access...
Posted on 14 October 2026 | 4:00 pm

Rotate AWS Secrets Manager Secrets Without Restarting Your Go Service, With mamori

AWS Secrets Manager has a lovely feature: automatic rotation. You attach a rotation Lambda, set a schedule, and every 30 days your RDS password is ...
Posted on 14 October 2026 | 2:00 pm

Introducing mamori: Typed, Watchable Config and Secrets for Go

Every Go service I have ever shipped ends up growing the same organ. It starts small: a couple of os.Getenv calls. Then a secret needs to come from...
Posted on 14 October 2026 | 12:00 pm

When One Docker Swarm Replica Became Unreachable Over an Overlay Network: A Production Case With Traefik

Context The incident occurred in the production backend infrastructure of a mobile application. External HTTP traffic was handled by Traefik, deplo...
Posted on 13 October 2026 | 4:00 pm

Multi-Agent Orchestration on AWS With AgentCore Runtime and A2A

Most agent projects start the same way: one model, one prompt loop, three or four tools. That's the right place to start, and for a lot of workload...
Posted on 9 October 2026 | 4:00 pm

Supercharging AI Agents with Azure Context: A Hands-On Guide to Azure MCP

As Large Language Models (LLMs) continue their rapid trajectory of development, software engineers and cloud architects regularly run into two syst...
Posted on 8 October 2026 | 6:00 pm

Building and Serving a Custom Model With Azure ML, Then Wiring It Into a Foundry Agent

The Foundry model catalog covers a lot of ground, but it doesn't cover everything. If you need a model trained on your own proprietary, tabular dat...
Posted on 6 October 2026 | 6:00 pm

Docker Sandboxes Beyond the Laptop: Running AI Agents in the Cloud

In my previous article, I walked through running coding agents inside Docker Sandboxes on a local machine. We installed the sbx CLI, started with a...
Posted on 2 October 2026 | 12:00 pm

Your Cloud Diagram Is Already Out of Date: An Operating Model for Continuous Security Architecture

The Diagram-to-Deployment Gap Cloud security architecture often begins with a strong design, account boundaries are defined, identity federation an...
Posted on 1 October 2026 | 12:00 pm

The Silent Container Death: A TCP Dial That Never Times Out

A pod goes into CrashLoopBackOff. You pull the logs expecting a stack trace, a panic, an error string - anything that points you somewhere. Instead...
Posted on 30 September 2026 | 6:00 pm

AWS 7R Migration Strategies: A Decision Framework for Engineering Teams

Most AWS migration projects don't fail because of technical complexity. They fail because teams treat migration as a single activity rather than a ...
Posted on 30 September 2026 | 4:00 pm

A Deep Dive into the Microsoft Foundry Document Intelligence SDK: From PDF to Structured Data

Most "RAG over PDFs" pipelines have a step nobody talks about much: something has to turn a scanned invoice, a multi-column contract, or a photogra...
Posted on 29 September 2026 | 5:00 pm

Building a Practical Cloud-Native Golden Path: A Guide to Kubernetes-Based Service Delivery, Self-Service, and Developer-Friendly Defaults

Editor’s Note: The following is an article written for and published in DZone’s 2026 Trend Report, Cloud-Native Foundations: Kubernetes, Platform E...
Posted on 25 September 2026 | 3:30 pm

Cloud Complexity Is an Operating Model Problem: Why Infrastructure Maturity Alone Can’t Solve Scale, Reliability, and Team Friction

Editor’s Note: The following is an article written for and published in DZone’s 2026 Trend Report, Cloud-Native Foundations: Kubernetes, Platform E...
Posted on 24 September 2026 | 3:30 pm

Kubernetes Operations Playbook: The Essentials for Keeping Scale, Complexity, and Drift Under Control

Editor’s Note: The following is an article written for and published in DZone’s 2026 Trend Report, Cloud-Native Foundations: Kubernetes, Platform E...
Posted on 23 September 2026 | 3:30 pm

Your Terraform Monolith Isn't Too Big. It's Tightly Coupled.

The first warning sign wasn't an outage. It was a boring pull request. We changed one App Service setting. It was the sort of change that should ha...
Posted on 22 September 2026 | 7:00 pm