Kyler Middleton
@letsdodevops.com
Cloud Security Chick | LetsDoDevOps.com | Microsoft MVP (DevOps) | AWS Community Builder x3 (AI Engineering)| Day Two DevOps Podcast Host | Former Hashi Ambassador | Open Source Zealot
New post: AWS Strands + MCP, super simple real-world examples.
Strands makes agentic workflows easy — multi-step actions, tool use, and open-source.
I’m sharing small examples as I build them out.
buff.ly/cFQZ2VI
Strands makes agentic workflows easy — multi-step actions, tool use, and open-source.
I’m sharing small examples as I build them out.
buff.ly/cFQZ2VI
November 18, 2025 at 3:30 PM
New post: AWS Strands + MCP, super simple real-world examples.
Strands makes agentic workflows easy — multi-step actions, tool use, and open-source.
I’m sharing small examples as I build them out.
buff.ly/cFQZ2VI
Strands makes agentic workflows easy — multi-step actions, tool use, and open-source.
I’m sharing small examples as I build them out.
buff.ly/cFQZ2VI
You know how AI-generated photos have a yellow pallor? Attached photo for reference.
There's an idea that the models were trained on older photos that were scanned into computers, and the photos had yellowed with age.
Tech is weird.
There's an idea that the models were trained on older photos that were scanned into computers, and the photos had yellowed with age.
Tech is weird.
October 30, 2025 at 3:02 PM
You know how AI-generated photos have a yellow pallor? Attached photo for reference.
There's an idea that the models were trained on older photos that were scanned into computers, and the photos had yellowed with age.
Tech is weird.
There's an idea that the models were trained on older photos that were scanned into computers, and the photos had yellowed with age.
Tech is weird.
In Part 5 of my “Building a Teams Bot with AI Capabilities” series, we dive into the fun stuff: how the bot actually reads conversations, grabs context, and posts AI-generated responses back into Teams.
Full article’s free to read, link in image
#DevOps #TeamsBot #AWS #AIIntegration #LetsDoDevOps
Full article’s free to read, link in image
#DevOps #TeamsBot #AWS #AIIntegration #LetsDoDevOps
October 28, 2025 at 3:03 PM
In Part 5 of my “Building a Teams Bot with AI Capabilities” series, we dive into the fun stuff: how the bot actually reads conversations, grabs context, and posts AI-generated responses back into Teams.
Full article’s free to read, link in image
#DevOps #TeamsBot #AWS #AIIntegration #LetsDoDevOps
Full article’s free to read, link in image
#DevOps #TeamsBot #AWS #AIIntegration #LetsDoDevOps
If you've wondered how to REALLY use MCPs in your bots, me too. So as I've been experimenting and adding things to my Strands bot at work, I've been publishing all the code, including the MCPs which so far includes:
* Atlassian
* AWS
* Azure
* GitHub
* PagerDuty
Find it here: buff.ly/3sRrT5V
* Atlassian
* AWS
* Azure
* GitHub
* PagerDuty
Find it here: buff.ly/3sRrT5V
October 27, 2025 at 3:41 PM
If you've wondered how to REALLY use MCPs in your bots, me too. So as I've been experimenting and adding things to my Strands bot at work, I've been publishing all the code, including the MCPs which so far includes:
* Atlassian
* AWS
* Azure
* GitHub
* PagerDuty
Find it here: buff.ly/3sRrT5V
* Atlassian
* AWS
* Azure
* GitHub
* PagerDuty
Find it here: buff.ly/3sRrT5V
MinIO has stopped publishing their namesake object-store docker file, now requiring customers to build from source. This, with no notice, over 1B (billion) downloads from dockerhub, and just after a critical CVE was dropped.
Have your teams check if they're using this image from dockerhub.
Have your teams check if they're using this image from dockerhub.
October 23, 2025 at 4:00 PM
MinIO has stopped publishing their namesake object-store docker file, now requiring customers to build from source. This, with no notice, over 1B (billion) downloads from dockerhub, and just after a critical CVE was dropped.
Have your teams check if they're using this image from dockerhub.
Have your teams check if they're using this image from dockerhub.
Do you know who subscribes to LetsDoDevOps[.]com?
Turns out folks from:
- Amazon
- Intel
- Hashicorp
- Boeing
- GitHub
- SAP
- Fortinet
- Sandia National Laboratories
- ZScaler
- Anduril
Please go subscribe, there's a free tier (but paid helps me buy caffeine to keep generating the content haha)
Turns out folks from:
- Amazon
- Intel
- Hashicorp
- Boeing
- GitHub
- SAP
- Fortinet
- Sandia National Laboratories
- ZScaler
- Anduril
Please go subscribe, there's a free tier (but paid helps me buy caffeine to keep generating the content haha)
October 22, 2025 at 2:31 PM
Do you know who subscribes to LetsDoDevOps[.]com?
Turns out folks from:
- Amazon
- Intel
- Hashicorp
- Boeing
- GitHub
- SAP
- Fortinet
- Sandia National Laboratories
- ZScaler
- Anduril
Please go subscribe, there's a free tier (but paid helps me buy caffeine to keep generating the content haha)
Turns out folks from:
- Amazon
- Intel
- Hashicorp
- Boeing
- GitHub
- SAP
- Fortinet
- Sandia National Laboratories
- ZScaler
- Anduril
Please go subscribe, there's a free tier (but paid helps me buy caffeine to keep generating the content haha)
When you interact with Bedrock services, your logs get put into a cloudwatch log group. That sounds great, right? Except ALL bot interactions get put into the SAME log group, making differentiating all those logs a pain.
FireHose can solve this with some custom lambda. Link in the image :D
FireHose can solve this with some custom lambda. Link in the image :D
October 21, 2025 at 2:04 PM
When you interact with Bedrock services, your logs get put into a cloudwatch log group. That sounds great, right? Except ALL bot interactions get put into the SAME log group, making differentiating all those logs a pain.
FireHose can solve this with some custom lambda. Link in the image :D
FireHose can solve this with some custom lambda. Link in the image :D
I had a lovely time, #TechFutures. Met some wonderful people, made a room laugh at my AI jokes, and helped a small room of folks deploy a genAI bot into their slack. It's been a pretty good time.
October 10, 2025 at 2:31 PM
I had a lovely time, #TechFutures. Met some wonderful people, made a room laugh at my AI jokes, and helped a small room of folks deploy a genAI bot into their slack. It's been a pretty good time.
If you're in NY this week for Tech Futures conference, let me know! I'm teaching a workshop where folks will leave with a functional private AI bot!
October 7, 2025 at 2:03 PM
If you're in NY this week for Tech Futures conference, let me know! I'm teaching a workshop where folks will leave with a functional private AI bot!
When you invoke an AI model in Bedrock, it writes the conversation to a single CloudTrail log group. Disambiguating the logs is left as homework for the admins (read: It work bad.).
I implemented a firehose to harvest cloudtrail logs, extract the information we care about in Splunk events.
I implemented a firehose to harvest cloudtrail logs, extract the information we care about in Splunk events.
October 2, 2025 at 2:05 PM
When you invoke an AI model in Bedrock, it writes the conversation to a single CloudTrail log group. Disambiguating the logs is left as homework for the admins (read: It work bad.).
I implemented a firehose to harvest cloudtrail logs, extract the information we care about in Splunk events.
I implemented a firehose to harvest cloudtrail logs, extract the information we care about in Splunk events.
This is pretty specific, but in case anyone else has a layer7 firewall in front of their github runners, and have a line like this in your Dockerfile:
FROM public.ecr[.]aws/lambda/python:3.12
Then you'll need to permit these two URLs:
- d2glxqk2uabbnd.cloudfront[.]net
- public.ecr[.]aws
FROM public.ecr[.]aws/lambda/python:3.12
Then you'll need to permit these two URLs:
- d2glxqk2uabbnd.cloudfront[.]net
- public.ecr[.]aws
September 25, 2025 at 2:03 PM
This is pretty specific, but in case anyone else has a layer7 firewall in front of their github runners, and have a line like this in your Dockerfile:
FROM public.ecr[.]aws/lambda/python:3.12
Then you'll need to permit these two URLs:
- d2glxqk2uabbnd.cloudfront[.]net
- public.ecr[.]aws
FROM public.ecr[.]aws/lambda/python:3.12
Then you'll need to permit these two URLs:
- d2glxqk2uabbnd.cloudfront[.]net
- public.ecr[.]aws
I presented an RSA Webcast last week, and got emailed a certificate of completion afterwards, like all the other attendees.
Great, now I can prove I was there
Great, now I can prove I was there
September 22, 2025 at 2:05 PM
I presented an RSA Webcast last week, and got emailed a certificate of completion afterwards, like all the other attendees.
Great, now I can prove I was there
Great, now I can prove I was there
Starting Sept 29, you won't have to manually enable specific models in new accounts for AWS Bedrock. This could be seen as very positive (no more approval step) or very negative (developers can now use any model, even the ones that your company maybe doesn't want them to (see: DeepSeek).
September 17, 2025 at 2:02 PM
Starting Sept 29, you won't have to manually enable specific models in new accounts for AWS Bedrock. This could be seen as very positive (no more approval step) or very negative (developers can now use any model, even the ones that your company maybe doesn't want them to (see: DeepSeek).
I couldn't find a good example of AppConfig terraform to build a multi-variant Config - one which changes based on the Context provided by the clients... so I experimented for a few hours, got it working, and submitted one.
It just became live. Hope it helps :) <3
It just became live. Hope it helps :) <3
September 12, 2025 at 3:12 PM
I couldn't find a good example of AppConfig terraform to build a multi-variant Config - one which changes based on the Context provided by the clients... so I experimented for a few hours, got it working, and submitted one.
It just became live. Hope it helps :) <3
It just became live. Hope it helps :) <3
The only real Strands production use I have so far I'm calling VeraResearch, and it's an agentic bot that's reachable via Slack, and it currently only has a GitHub MCP.
For instance, different teams have different gitflow. What should I do next to promote code? Well, VeraResearch can tell you!
For instance, different teams have different gitflow. What should I do next to promote code? Well, VeraResearch can tell you!
September 4, 2025 at 5:23 PM
The only real Strands production use I have so far I'm calling VeraResearch, and it's an agentic bot that's reachable via Slack, and it currently only has a GitHub MCP.
For instance, different teams have different gitflow. What should I do next to promote code? Well, VeraResearch can tell you!
For instance, different teams have different gitflow. What should I do next to promote code? Well, VeraResearch can tell you!
My daughter absolutely loves it, and so do I. We went to the sing-along at the theater, and there were folks in cosplay, it was so cool
August 30, 2025 at 1:08 PM
My daughter absolutely loves it, and so do I. We went to the sing-along at the theater, and there were folks in cosplay, it was so cool
What's RSA emailing me about now? Oh hey, that's me!
I'll be presenting on how to build a secure AI assistant in a regulated industry (healthcare) in the US on Friday Sep 19! Register now to get reminded!
www.rsaconference .com/library/webcast/194-secure-ai-assistant
I'll be presenting on how to build a secure AI assistant in a regulated industry (healthcare) in the US on Friday Sep 19! Register now to get reminded!
www.rsaconference .com/library/webcast/194-secure-ai-assistant
August 27, 2025 at 2:00 PM
What's RSA emailing me about now? Oh hey, that's me!
I'll be presenting on how to build a secure AI assistant in a regulated industry (healthcare) in the US on Friday Sep 19! Register now to get reminded!
www.rsaconference .com/library/webcast/194-secure-ai-assistant
I'll be presenting on how to build a secure AI assistant in a regulated industry (healthcare) in the US on Friday Sep 19! Register now to get reminded!
www.rsaconference .com/library/webcast/194-secure-ai-assistant
Oooh, the AWS Community Builders program gets a special CFP again this year for #ReInvent!
I submitted, everybody cross your fingers for me!!! 🤞 🍀
I submitted, everybody cross your fingers for me!!! 🤞 🍀
August 13, 2025 at 2:03 PM
Oooh, the AWS Community Builders program gets a special CFP again this year for #ReInvent!
I submitted, everybody cross your fingers for me!!! 🤞 🍀
I submitted, everybody cross your fingers for me!!! 🤞 🍀
The last article in my Vera@teams series is now out, URL is in the picture! It covers how to write python that can interface with Teams, and by necessity, SharePoint and OneDrive, to use the user's oauth2 token to fetch their files so you can consume them with Bedrock AI.
August 12, 2025 at 2:04 PM
The last article in my Vera@teams series is now out, URL is in the picture! It covers how to write python that can interface with Teams, and by necessity, SharePoint and OneDrive, to use the user's oauth2 token to fetch their files so you can consume them with Bedrock AI.
I'LL BE SPEAKING AT LWT IN NY IN OCTOBER!!
I'm teaching a workshop on how to build your own compliant gen AI assistant in healthcare. I can't wait :D Message me if you'll be able to make it!
I'm teaching a workshop on how to build your own compliant gen AI assistant in healthcare. I can't wait :D Message me if you'll be able to make it!
August 8, 2025 at 2:01 PM
I'LL BE SPEAKING AT LWT IN NY IN OCTOBER!!
I'm teaching a workshop on how to build your own compliant gen AI assistant in healthcare. I can't wait :D Message me if you'll be able to make it!
I'm teaching a workshop on how to build your own compliant gen AI assistant in healthcare. I can't wait :D Message me if you'll be able to make it!
I just wrote the last article in my Vera@Teams series (image related). I'm sad to see it go, but I'm very excited for my next foray into MCP enabled bots, particularly my current project - an SRE bot that can read PagerDuty, Splunk, Jira!
Super cool stuff coming, I'll publish what I can!!
Super cool stuff coming, I'll publish what I can!!
August 7, 2025 at 2:02 PM
I just wrote the last article in my Vera@Teams series (image related). I'm sad to see it go, but I'm very excited for my next foray into MCP enabled bots, particularly my current project - an SRE bot that can read PagerDuty, Splunk, Jira!
Super cool stuff coming, I'll publish what I can!!
Super cool stuff coming, I'll publish what I can!!
Registering an app to your Teams Enterprise is a surprisingly complex endeavor. But I got chu. Read along for all steps, including a lot of the tricky image, regionality, and authentication stuff.
Now free forever, and several more articles in this series paid (free coming) if you're interested.
Now free forever, and several more articles in this series paid (free coming) if you're interested.
August 5, 2025 at 2:37 PM
Registering an app to your Teams Enterprise is a surprisingly complex endeavor. But I got chu. Read along for all steps, including a lot of the tricky image, regionality, and authentication stuff.
Now free forever, and several more articles in this series paid (free coming) if you're interested.
Now free forever, and several more articles in this series paid (free coming) if you're interested.
🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀
Wish me luck!!
Wish me luck!!
July 31, 2025 at 2:02 PM
🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀 🍀
Wish me luck!!
Wish me luck!!