I'm Oliver.Cloud Architect& Specialist.
I think out loud about cloud architecture. About Landing Zones that hold thousands of accounts, security that convinces auditors, and running AWS cleanly at enterprise scale: what breaks, and how to prevent it.
What I've worked on.
Tallence Cloud Portfolio
Free AWS Compliance Check as a lead magnet. Full-stack MVP in one month. ~$100 per month.
DTAG Group-Wide AWS Landing Zone
2,000+ accounts. 40 organizations. −37% Landing Zone cost.
MagentaGaming Cloud Platform
AAA cloud gaming from zero to Gamescom launch in 6 months.
What I write about.
From Company Name to CRM Record: One AgentCore Conversation, End to End
Part 7 of the series 'Building a Partner Sales Agent on Amazon Bedrock AgentCore': the closing article runs one live conversation end to end, from a company name typed into the chat UI to a HubSpot Contact carrying a Partner Central back-reference, and accounts for what broke along the way, including a streaming bug and a redesigned approval gate.
Grounding an Agent Without a Vector Database: AgentCore Managed Knowledge Base
This is the sixth part of the series Building a Partner Sales Agent on Amazon Bedrock AgentCore: the agent's answers are based on a Bedrock Managed Knowledge Base which draws its information from an S3 document bucket and three web-crawled sources, and which reaches the model via the same Gateway as all the other tools, although it requires a Terraform escape hatch for the one connector target that no provider resource currently covers.
A Deterministic Backstop for Your Agent: AgentCore Policy and Cedar
Part 5 of the series ‘Building a Partner Sales Agent on Amazon Bedrock AgentCore’: how the Cedar policy engine bound to the Gateway deterministically blocks two specific bad calls, why a default-deny engine forces a baseline permit before any forbid rule, and exactly where its blindness to conversation history leaves a human-approval guard that verifies the flag but not the approval behind it.
What this site is about.
Multi-account architectures that scale.
Why governance and developer experience don't have to conflict, and how Control Tower makes both work.
Security architectures that convince auditors.
CIS benchmarks, ISO 27001, C5: thought of as code rather than PDF, and what that means in practice.
Platforms that launch fast and scale cleanly.
Lambda, Fargate, Step Functions, API Gateway: where the limits are and where they're not.
Cloud costs you understand and control.
Reserved Instances, Savings Plans, tagging discipline: why most teams fail at tagging.
Write to me about AWS, architecture, or anything.
This site is not a service offering. I work full-time at Tallence as an AWS architect. For a technical exchange, a review, a talk, or a community conversation, get in touch.