Giving a coding agent production database access: the boundary is the grant, not the code
A read-only MCP server for a production MySQL database on RDS. Why the database grant is the real boundary, what else to layer on, and the Azure SQL version.
Notes, reviews and field guides on AWS, Azure and agentic AI, written by a working architect for the people who build systems and the people who pay for them.
A read-only MCP server for a production MySQL database on RDS. Why the database grant is the real boundary, what else to layer on, and the Azure SQL version.
Fast redirects with analytics that never slow the user down. The serverless AWS design, an even cheaper edge version, and the Azure equivalent.
S3, CloudFront, Route 53 and ACM, defined in one small CDK stack. The setup, the gotchas, what it really costs, and the cheapest way to do the same on Azure.
Keep Google Drive as the source of truth without putting it in the request path. Read-only sync, content-versioned S3 keys and CloudFront signed cookies.
One well-scoped agent, routed models, cached prompts and hard spending caps. A serverless AWS design for 3,000 conversations a month at about $35.
Let's see if I can help.