
Mastering AWS CLI: Commands for Cloud Engineering, DevOps, and AI Workloads
One identity check, aws sts get-caller-identity, before any command that can create a billable resource. AWS CLI 2.37.12 on 11 October 2026.
Blog category
Engineering guides on CI/CD pipelines, GitOps, Terraform, EKS with Karpenter, blue-green deployments, and infrastructure drift. Covers patterns our team uses in production across multi-account AWS environments.

One identity check, aws sts get-caller-identity, before any command that can create a billable resource. AWS CLI 2.37.12 on 11 October 2026.





This Mac runs Zsh 5.9. Upstream published the next patch on 12 July 2026. A minimal zshrc took 48.2 ms median over 20 warm starts, against 4.2 ms with no rc files.

On July 31, 2026 AWS shipped CloudWatch managed Prometheus collectors. For the AWS Example 22 shape (100 hosts x 50 metrics @ 60s), OTLP ingestion is $54/mo vs $1,500 classic custom metrics if you do not double-ingest.

Synthetics prove a journey works from AWS; RUM shows what real browsers experience — LCP, CLS, INP. Sampling, privacy, cost, and when Application Signals still owns backend SLOs.

Synthetics canaries catch user-journey failures before customers tweet — but a 1-minute canary fleet can quietly dominate the CloudWatch bill. Runtime, VPC, alarm wiring to Application Signals SLOs, and a reproducible checklist.

Monitoring is visibility; alerting is interruption. Teams with 40+ CloudWatch alarms and an actionable page rate under 50% are monitoring loudly and alerting poorly — fix ownership, SLO burn, and canaries before adding another metric.

Amazon Managed Grafana waste is rarely the $9 Editor seat itself — it is ten Editors who only view dashboards, orphan service accounts, and workspaces still on Grafana 9 while AWS shipped create + in-place upgrade to 12.4 in April/May 2026. Here is the workspace ops playbook: seats, IAM Identity Center, NAC/VPC, CMK, and a checklist you can run this week.

On a 120-stack AWS Organization, CloudFormation StackSets for platform baseline plus CDK for app teams cut org-wide guardrail rollout from 6 weeks to 2 — with Application Composer for spikes and Blocks for greenfield TypeScript only at preview.