Managing infrastructure as code sounds straightforward until you're wrangling hundreds of modules across multiple teams and accounts. In this session, a Platform Engineer and Lead Architect share hard-won lessons from building and scaling IaC platforms at large organisations — covering module composition strategies, state isolation patterns, and CI/CD pipelines that keep deployments safe and reproducible. You'll walk away with practical design patterns you can apply immediately, whether you're laying the foundations of your first landing zone or untangling a sprawling estate that's grown faster than its architecture.
What this session is about
Playbook
Editorial commentary · what to actually do about this on Monday
The concept
Real-world IaC at scale. Module composition strategies, state isolation patterns, CI/CD pipelines for safe and reproducible deployments.
Why it matters
IaC fragility is a top cause of outages at scale. The patterns that work for one team don't work at multi-team scale.
The hard parts
State management in Terraform/CDK. Drift detection. Module composition without circular dependencies.
Playbook moves
(1) State per environment, not per service. (2) Drift detection in CI. (3) Composition over inheritance for modules.
The surprise
The hardest IaC problem isn't writing it — it's *deleting* it. Resources orphaned by failed deploys are an iceberg of cost and risk. Audit and clean regularly; most orgs accumulate orphans for years before noticing.
---
Independent editorial perspective — not an official AWS or speaker statement. Designed for executives evaluating what to brief their teams on next.
Live updates related to this session LIVE
Sourced via Parallel AI Monitor — continuous web watch on 21 topical streams. Updated .
- developer.nvidia.com Agent identity & delegation
NVIDIA Open Agent Safety Platform: A Reference for Continuous In-Silicon Agent Monitoring | NVIDIA Technical Blog
NVIDIA published details of its Open Agent Safety Platform, combining OpenShell runtime isolation and policy enforcement with Sentry, an out-of-band monitoring reference design. The platform is intended to establish a verifiable identity for each agent, continuously verify delega
- opusresearch.net Agent identity & delegation
Personal AI Agents Meet The Walled Garden |
The AI AGENT Act has reportedly progressed from a discussion draft to formally introduced Senate bill S. 5051. The bill defines consumer-authorized “Custodial User Agents” and would require large platforms to provide fair interfaces for agents acting on a user’s behalf. It emphas
- prnewswire.com Agent dev tools & observability
Sumo Logic enhances Data Pipelines, advancing its AI-first ...
Temporal introduced a prerelease integration that allows Amazon Bedrock AgentCore Runtime to serve as the compute provider for Temporal Serverless Workers. The combination supports durable, scalable production agents with dynamically scaled worker capacity, durable workflow state
- okta.com Agent identity & delegation
Identity may be the design primitive you're overlooking
Ping Identity published an analysis of consumer AI agents acting on behalf of people. It argues that shared browser sessions hide whether a human or agent performed an action and obscure the agent’s authority. The proposed pattern is a portable delegated authorization credential
- noma.security Agent governance & policy gating
Endpoint AI Agent Security for Every Employee
Noma announced expanded agent security and governance for employee endpoints. The update adds discovery and governance for AI agents, MCP servers, and skills; a registry with approved, needs-review, or blocked states; identity-aware access control; tool- and action-level permissi
External links matched to this session via topic relevance. The KB does not endorse third-party content; verify before citing.