<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Technical How-to &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/tag/technical-how-to/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Thu, 22 Oct 2026 00:50:04 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>Using AWS WAF to apply mitigations for PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619)</title>
		<link>https://noise.getoto.net/2026/10/22/using-aws-waf-to-apply-mitigations-for-php2shell-rce-vulnerabilities-cve-2026-109618-and-cve-2026-109619/</link>
		
		<dc:creator><![CDATA[Alex Waddell]]></dc:creator>
		<pubDate>Thu, 22 Oct 2026 00:50:04 +0000</pubDate>
				<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=1dae9f6c7b1ab237cc3bf2b02882fc27</guid>

					<description><![CDATA[On October 21, 2026, the PHP project released emergency fixes for two critical remote code execution (RCE) vulnerabilities in the PHP core runtime, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively named PHP2Shell. Both are rated 9.2 (Critical) under CVSS v4.0, and both allow an unauthenticated attacker to run code on a vulnerable server. The fixed […]]]></description>
		
		
		
			</item>
		<item>
		<title>Centralized dashboard for monitoring SES identities</title>
		<link>https://noise.getoto.net/2026/10/22/centralized-dashboard-for-monitoring-ses-identities/</link>
		
		<dc:creator><![CDATA[Manoj Gaddam]]></dc:creator>
		<pubDate>Wed, 21 Oct 2026 21:29:10 +0000</pubDate>
				<category><![CDATA[Amazon Simple Email Service (SES)]]></category>
		<category><![CDATA[AWS]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=00627cd9af7609a21562887344440457</guid>

					<description><![CDATA[Organizations running Amazon SES across many AWS accounts struggle to see which identities exist and whether they are verified. This post presents two solutions that collect SES identity data across every account in your AWS Organization and surface it through Amazon Athena and Amazon Quick Sight for centralized visibility.]]></description>
		
		
		
			</item>
		<item>
		<title>Automate medical coding with Step Functions and Amazon Bedrock AgentCore</title>
		<link>https://noise.getoto.net/2026/10/22/automate-medical-coding-with-step-functions-and-amazon-bedrock-agentcore/</link>
		
		<dc:creator><![CDATA[Sachin Doshi]]></dc:creator>
		<pubDate>Wed, 21 Oct 2026 21:26:23 +0000</pubDate>
				<category><![CDATA[Amazon Bedrock AgentCore]]></category>
		<category><![CDATA[AWS Step Functions]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=fcf76e961ad83c1545800a9c7a93a7d5</guid>

					<description><![CDATA[Learn how to combine deterministic orchestration with bounded agentic reasoning using AWS Step Functions and the Amazon Bedrock AgentCore harness. This medical coding workflow escalates cheapest-first: a safety block-list, then exact matching, then an AI agent only for terms that need judgment, keeping every routing decision auditable.]]></description>
		
		
		
			</item>
		<item>
		<title>Limit agent permissions and spend in AWS Transform custom</title>
		<link>https://noise.getoto.net/2026/10/20/limit-agent-permissions-and-spend-in-aws-transform-custom/</link>
		
		<dc:creator><![CDATA[Hamza Alfarrash]]></dc:creator>
		<pubDate>Tue, 20 Oct 2026 19:04:02 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS Transform]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=274b0efabff3bd98d7fa1272f3e61480</guid>

					<description><![CDATA[AWS Transform custom runs an autonomous agent with shell access over your source code, using your AWS credentials. This post bounds it with three controls: a scoped trust allowlist, an execution identity separate from the one that authors, and a per-run agent-minute cap backed by an account budget.]]></description>
		
		
		
			</item>
		<item>
		<title>Building an AEO scoring pipeline with AWS Lambda durable functions</title>
		<link>https://noise.getoto.net/2026/10/20/building-an-aeo-scoring-pipeline-with-aws-lambda-durable-functions/</link>
		
		<dc:creator><![CDATA[Nick Beall]]></dc:creator>
		<pubDate>Tue, 20 Oct 2026 17:45:29 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS Lambda]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=b531017dca47e9355e093e20411fb914</guid>

					<description><![CDATA[Learn how to build a five-step Agent Engine Optimization (AEO) scoring pipeline on AWS Lambda durable functions. Each checkpointed step suspends without incurring costs between stages and retries without re-spending on prior work, so you can score any page against five AEO signals and deploy the solution with an AWS SAM template.]]></description>
		
		
		
			</item>
		<item>
		<title>Trace security threats in multi-agent pipelines with Amazon OpenSearch Service</title>
		<link>https://noise.getoto.net/2026/10/19/trace-security-threats-in-multi-agent-pipelines-with-amazon-opensearch-service/</link>
		
		<dc:creator><![CDATA[Jon Handler]]></dc:creator>
		<pubDate>Mon, 19 Oct 2026 16:10:31 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon OpenSearch Service]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=ca449681c9dc4e73916ac0c83554e683</guid>

					<description><![CDATA[Learn how to trace two invisible threats in a multi-agent AI pipeline, prompt injection propagation and cross-tenant data exfiltration, using Amazon OpenSearch Service and Amazon Bedrock. Instrument every agent hop with embeddings, provenance, and PII detection, reconstruct the attack path, and add guardrails that stop these attacks before they reach production.]]></description>
		
		
		
			</item>
		<item>
		<title>Automate Active Directory joins for Elastic Beanstalk Windows applications</title>
		<link>https://noise.getoto.net/2026/10/19/automate-active-directory-joins-for-elastic-beanstalk-windows-applications/</link>
		
		<dc:creator><![CDATA[Mohammad Ibrahim]]></dc:creator>
		<pubDate>Mon, 19 Oct 2026 16:07:51 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS Elastic Beanstalk]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=818479407564465bec3f7090d1a2f2a7</guid>

					<description><![CDATA[AWS Elastic Beanstalk now joins your Windows Server instances to an Active Directory domain automatically at launch, before your application deploys, with no join scripts and no stored domain credentials. This walkthrough shows how to set it up, confirm the join, and see how Elastic Beanstalk reports a failed join without failing your deployment.]]></description>
		
		
		
			</item>
		<item>
		<title>dbt and Amazon Redshift Data Sharing: Multi-cluster pipelines without moving a byte</title>
		<link>https://noise.getoto.net/2026/10/15/dbt-and-amazon-redshift-data-sharing-multi-cluster-pipelines-without-moving-a-byte/</link>
		
		<dc:creator><![CDATA[Neela Kulkarni]]></dc:creator>
		<pubDate>Thu, 15 Oct 2026 18:01:07 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Redshift]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=8dee9b3d5b582347e73fd002fe9bcc7f</guid>

					<description><![CDATA[Learn how to set up Amazon Redshift Data Sharing between a producer and consumer cluster and use dbt Cloud to transform the shared data into analytics-ready models, with live, zero-copy access and no ETL between clusters.]]></description>
		
		
		
			</item>
		<item>
		<title>Penetration testing every deployment with AWS Continuum</title>
		<link>https://noise.getoto.net/2026/10/14/penetration-testing-every-deployment-with-aws-continuum/</link>
		
		<dc:creator><![CDATA[Jigar Bhatt]]></dc:creator>
		<pubDate>Wed, 14 Oct 2026 20:21:52 +0000</pubDate>
				<category><![CDATA[artificial intelligence]]></category>
		<category><![CDATA[generative AI]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=90d12d194b71317859979949232911e2</guid>

					<description><![CDATA[Most security tooling that fits into a CI/CD pipeline—static analysis (SAST), software composition analysis (SCA), and dynamic scanners (DAST)—flags potential issues from patterns and signatures. A flagged pattern shows you where to look; penetration testing is what confirms whether something is actually exploitable. That confirmation has traditionally come from a periodic, out-of-band engagement that runs […]]]></description>
		
		
		
			</item>
		<item>
		<title>Multi-region disaster recovery for Amazon API Gateway WebSocket APIs</title>
		<link>https://noise.getoto.net/2026/10/14/multi-region-disaster-recovery-for-amazon-api-gateway-websocket-apis/</link>
		
		<dc:creator><![CDATA[Shubham Dhoka]]></dc:creator>
		<pubDate>Wed, 14 Oct 2026 14:31:55 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon API Gateway]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=e979768965fdbf4b7872bf719f6f88ac</guid>

					<description><![CDATA[Learn how to build multi-region disaster recovery for Amazon API Gateway WebSocket APIs. This design pattern combines Amazon Route 53 DNS failover, Amazon DynamoDB Global Tables, a canary health probe, and client-side reconnection logic to reconnect clients and restore session state automatically during a regional failover.]]></description>
		
		
		
			</item>
		<item>
		<title>GuardDuty Extended Threat Detection has added five new indicators to surface attack sequences</title>
		<link>https://noise.getoto.net/2026/10/13/guardduty-extended-threat-detection-has-added-five-new-indicators-to-surface-attack-sequences/</link>
		
		<dc:creator><![CDATA[Aman Khare]]></dc:creator>
		<pubDate>Mon, 12 Oct 2026 21:58:44 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon GuardDuty]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=b17ff0c6afa49ce354e8035528a1395d</guid>

					<description><![CDATA[Amazon GuardDuty Extended Threat Detection correlates weak GuardDuty signals into a single, critical-severity attack sequence finding when their composition crosses a threshold of credibility. On May 20, 2026, the service started attaching five new indicator types to those sequences: MALICIOUS_PACKAGE, MISCONFIGURATION, REACHABILITY, SENSITIVE_DATA, and VULNERABILITY. For more information, see Document history for Amazon GuardDuty and […]]]></description>
		
		
		
			</item>
		<item>
		<title>Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM</title>
		<link>https://noise.getoto.net/2026/10/12/quantum-resistant-signing-on-aws-part-2-enforce-your-ml-dsa-algorithm-policy-with-scps-and-iam/</link>
		
		<dc:creator><![CDATA[Harshvardhan Chunawala]]></dc:creator>
		<pubDate>Mon, 12 Oct 2026 20:13:06 +0000</pubDate>
				<category><![CDATA[Amazon Elastic Container Registry]]></category>
		<category><![CDATA[Amazon Elastic Kubernetes Service]]></category>
		<category><![CDATA[Amazon Inspector]]></category>
		<category><![CDATA[Amazon Simple Storage Service (S3)]]></category>
		<category><![CDATA[AWS CLI]]></category>
		<category><![CDATA[AWS CloudTrail]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS Private Certificate Authority]]></category>
		<category><![CDATA[AWS Secrets Manager]]></category>
		<category><![CDATA[AWS Security Token Service]]></category>
		<category><![CDATA[AWS Systems Manager]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Compliance]]></category>
		<category><![CDATA[Configuration, compliance, and auditing]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Quantum Technologies]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[supply chain]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=2ec4592b66fc3670c2c6af380eb5149f</guid>

					<description><![CDATA[You want to set a cryptographic algorithm policy and stop non-compliant choices from being made in your Amazon Web Services (AWS) environment. This post shows you how. As you adopt post-quantum cryptography, one of the first decisions you face is which algorithms and parameter sets fit your business needs, balancing security against signature size, key […]]]></description>
		
		
		
			</item>
		<item>
		<title>Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA</title>
		<link>https://noise.getoto.net/2026/10/12/quantum-resistant-signing-on-aws-part-1-build-a-software-supply-chain-with-ml-dsa/</link>
		
		<dc:creator><![CDATA[Harshvardhan Chunawala]]></dc:creator>
		<pubDate>Mon, 12 Oct 2026 20:12:53 +0000</pubDate>
				<category><![CDATA[Amazon Elastic Container Registry]]></category>
		<category><![CDATA[Amazon Elastic Kubernetes Service]]></category>
		<category><![CDATA[Amazon Inspector]]></category>
		<category><![CDATA[Amazon Simple Storage Service (S3)]]></category>
		<category><![CDATA[AWS CLI]]></category>
		<category><![CDATA[AWS CloudTrail]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Key Management Service (KMS)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS Organizations]]></category>
		<category><![CDATA[AWS Private Certificate Authority]]></category>
		<category><![CDATA[AWS Secrets Manager]]></category>
		<category><![CDATA[AWS Security Token Service]]></category>
		<category><![CDATA[AWS Systems Manager]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Compliance]]></category>
		<category><![CDATA[Configuration, compliance, and auditing]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Quantum Technologies]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[supply chain]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=bb3c2bdddd32bc9bc01abf46f29c3573</guid>

					<description><![CDATA[Software supply chain attacks have grown in both frequency and sophistication. Recent high-profile compromises of build systems and open source dependencies demonstrate that attackers increasingly target the trust mechanisms that verify software integrity. Those trust mechanisms rely on digital signature algorithms, and today many use traditional algorithms such as Rivest-Shamir-Adleman (RSA) and the Elliptic Curve […]]]></description>
		
		
		
			</item>
		<item>
		<title>Build cross-account streaming pipelines with the Amazon Kinesis Producer Library and Kinesis Client Library</title>
		<link>https://noise.getoto.net/2026/10/12/build-cross-account-streaming-pipelines-with-the-amazon-kinesis-producer-library-and-kinesis-client-library/</link>
		
		<dc:creator><![CDATA[Charishma Makineni]]></dc:creator>
		<pubDate>Mon, 12 Oct 2026 15:48:07 +0000</pubDate>
				<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Kinesis Data Streams]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=21f7bb8319fe1b1383ab80c0ab71ff31</guid>

					<description><![CDATA[Learn how to build an enterprise-scale cross-account streaming pipeline with Amazon Kinesis Data Streams using the Kinesis Producer Library (KPL) and Kinesis Client Library (KCL) across three separate AWS accounts, with resource-based policies, cross-account IAM, and a shared customer managed AWS KMS key for maximum security isolation.]]></description>
		
		
		
			</item>
		<item>
		<title>Agentic antimicrobial resistance surveillance with AWS HealthOmics and Amazon Bedrock AgentCore</title>
		<link>https://noise.getoto.net/2026/10/12/agentic-antimicrobial-resistance-surveillance-with-aws-healthomics-and-amazon-bedrock-agentcore/</link>
		
		<dc:creator><![CDATA[Nicolo Cosimo Albanese]]></dc:creator>
		<pubDate>Mon, 12 Oct 2026 14:34:57 +0000</pubDate>
				<category><![CDATA[Amazon Bedrock AgentCore]]></category>
		<category><![CDATA[AWS HealthOmics]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=74dc249a0279455f5e43e49a9a841cf6</guid>

					<description><![CDATA[This post presents a reference architecture that turns public sequencing data into plain-language answers about antimicrobial resistance (AMR) genes. It pairs AWS HealthOmics for managed genomics processing with a grounded Amazon Bedrock AgentCore agent, so researchers can ask questions without writing bioinformatics code or SQL.]]></description>
		
		
		<enclosure url="https://d2908q01vomqb2.cloudfront.net/artifacts/DBSBlogs/ARCHBLOG-1710/AMR+DEMO.mp4" length="53588854" type="video/mp4" />

			</item>
		<item>
		<title>Scaling RL rollouts with Firecracker on Amazon EC2 metal</title>
		<link>https://noise.getoto.net/2026/10/09/scaling-rl-rollouts-with-firecracker-on-amazon-ec2-metal/</link>
		
		<dc:creator><![CDATA[Karsten Ploesser]]></dc:creator>
		<pubDate>Fri, 09 Oct 2026 14:38:27 +0000</pubDate>
				<category><![CDATA[Amazon EC2]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=af51d4112e4ded6ce5472f97a99fa3b5</guid>

					<description><![CDATA[Reinforcement learning at scale runs thousands of isolated rollout sandboxes in parallel, and packing more of them onto each host lowers your cost per training step. This post shows how to tune Firecracker microVM density on Amazon EC2 metal, and introduces labsweep, a harness for mapping your own latency and density curve.]]></description>
		
		
		
			</item>
		<item>
		<title>Improving SPIRE security and resiliency with AWS managed services</title>
		<link>https://noise.getoto.net/2026/10/06/improving-spire-security-and-resiliency-with-aws-managed-services/</link>
		
		<dc:creator><![CDATA[Brendan Paul]]></dc:creator>
		<pubDate>Tue, 06 Oct 2026 18:52:25 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=7401fde127c7abe47f502b58c03dcfe8</guid>

					<description><![CDATA[In cloud-centered environments, establishing trust between workloads is fundamental to securing machine-to-machine communication. Traditional approaches such as API keys, shared secrets, and static service account credentials weren’t designed for the scale and ephemeral nature of cloud workloads. This drives an organizational need to shift from long-term, static credentials to short-lived cryptographic workload identities. Organizations are […]]]></description>
		
		
		
			</item>
		<item>
		<title>Monitoring MWAA-orchestrated ETL pipelines with Amazon OpenSearch Service</title>
		<link>https://noise.getoto.net/2026/10/06/monitoring-mwaa-orchestrated-etl-pipelines-with-amazon-opensearch-service/</link>
		
		<dc:creator><![CDATA[Anupa Bhattacharyya]]></dc:creator>
		<pubDate>Tue, 06 Oct 2026 16:17:46 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon Managed Workflows for Apache Airflow (Amazon MWAA)]]></category>
		<category><![CDATA[Amazon OpenSearch Service]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=3a6cfe1c0576856fdd97ff7fe469f071</guid>

					<description><![CDATA[Troubleshooting a multi-service, MWAA-orchestrated ETL pipeline often means hunting across scattered Amazon CloudWatch log groups. This post shows how to centralize your ETL logs in Amazon OpenSearch Service and query them in plain language through an MCP server on Amazon Bedrock AgentCore, so you find root causes faster.]]></description>
		
		
		
			</item>
		<item>
		<title>Cost-effective ETL with DuckDB and Amazon S3 Tables on AWS Glue</title>
		<link>https://noise.getoto.net/2026/10/06/cost-effective-etl-with-duckdb-and-amazon-s3-tables-on-aws-glue/</link>
		
		<dc:creator><![CDATA[Bezuayehu Wate]]></dc:creator>
		<pubDate>Tue, 06 Oct 2026 16:13:02 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon S3 Tables]]></category>
		<category><![CDATA[AWS Glue]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=f2935babab0bc167ff7f05026c640b08</guid>

					<description><![CDATA[Learn how to pair DuckDB with AWS Glue 6.0 to run SQL-centric ETL on a single worker, reading Parquet from Amazon S3 and writing Apache Iceberg tables to Amazon S3 Tables. This post walks through a complete, runnable example and compares measured cost and runtime against an equivalent Apache Spark job on the same Glue runtime.]]></description>
		
		
		
			</item>
		<item>
		<title>Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation</title>
		<link>https://noise.getoto.net/2026/10/06/identity-aware-ai-data-agents-with-aws-lake-formation-and-trusted-identity-propagation/</link>
		
		<dc:creator><![CDATA[Thiyagarajan Mani]]></dc:creator>
		<pubDate>Tue, 06 Oct 2026 16:07:06 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS IAM Identity Center]]></category>
		<category><![CDATA[AWS Lake Formation]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=48d2ba39e31ac23dc354babd4ad3c96f</guid>

					<description><![CDATA[You’re building a data agent that lets business users ask questions about lakehouse data in natural language. You’ve already built governance policies that control who can access which datasets. The challenge is making the agent respect those rules without rebuilding them in your application code. When a user asks a question, the agent maps it […]]]></description>
		
		
		
			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/?utm_source=w3tc&utm_medium=footer_comment&utm_campaign=free_plugin

Object Caching 25/144 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2026-10-25 02:54:02 by W3 Total Cache
-->