# Technodrone > Personal blog of Maish Saidel-Keesing, a Senior Enterprise Developer Advocate at Amazon Web Services with over 20 years in technology. Writing since 2007, Technodrone covers cloud architecture, AWS, VMware, OpenStack, DevOps, automation, and more recently AI, agents, and the Model Context Protocol (MCP), alongside honest career reflections and practical community guides (including the annual "Keeping Kosher at re:Invent"). The voice is first-person, opinionated, and hands-on. - Site: https://blog.technodrone.cloud/ - RSS feed: https://blog.technodrone.cloud/posts/index.xml - Author on X/Twitter: https://twitter.com/maishsk - Author on GitHub: https://github.com/maishsk ## Pages - [About Me](https://blog.technodrone.cloud/pages/about-me/) - [Public Speaking](https://blog.technodrone.cloud/pages/public-engagements/) - [In the Press](https://blog.technodrone.cloud/pages/in-the-press/) - [Visio Stencils](https://blog.technodrone.cloud/pages/visio/) - [Contact](https://blog.technodrone.cloud/pages/contact/) ## Recent posts - [Renovate or Rebuild? Why I Redid the Blog From Scratch](https://blog.technodrone.cloud/2026/08/renovate-or-rebuild.html): After five years on someone else's Hugo theme, I knocked it down and built my own from scratch. Zero dependencies, LLMO-ready, accessibility-first, and finally on brand. - [How Much Does It Cost to Self-Host Open Models on AWS?](https://blog.technodrone.cloud/2026/08/self-hosting-open-models-cost.html): What it actually takes to self-host an open AI model for your team on AWS. Real hardware specs, real monthly costs for teams of 10 to 500, and the trade-offs nobody mentions. - [Tomorrow Is Coming to Collect](https://blog.technodrone.cloud/2026/07/tomorrow-is-coming-to-collect.html): Companies spent $7,500 per employee per month on AI with nothing to show for it. The reckoning is here. - [The OWASP Agentic AI Top 10: What Builders on AWS Need to Know](https://blog.technodrone.cloud/2026/07/aws-intro-owasp-agentic-top10.html): The OWASP Top 10 for Agentic Applications maps the biggest security threats facing autonomous AI systems. Here's what each one means for builders on AWS, and which services help you mitigate them. - [Agent Goal Hijack: When Your AI Agent Works for Someone Else (ASI01)](https://blog.technodrone.cloud/2026/07/agent-goal-hijack-owasp-agentic-top10.html): Agent Goal Hijack is the #1 threat in the OWASP Agentic AI Top 10. Here's how it works, real-world CVEs, and how to defend against it on AWS using Bedrock Guardrails, Step Functions, and CloudWatch. - [Tool Misuse & Exploitation: When Your Agent's Legitimate Tools Become Weapons (ASI02)](https://blog.technodrone.cloud/2026/07/tool-misuse-owasp-agentic-top10.html): Tool Misuse is the #2 threat in the OWASP Agentic AI Top 10. Agents can weaponize their own legitimate tools through over-privileged access, loop amplification, and tool chaining. Here's how to lock them down on AWS with IAM, Bedrock action groups, and API Gateway. - [Identity & Privilege Abuse: When Your Agent Acts Like It Owns the Place (ASI03)](https://blog.technodrone.cloud/2026/07/identity-privilege-owasp-agentic-top10.html): Agents inherit, accumulate, and escalate privileges in ways IAM wasn't designed to handle. Here's how to fix it with Cedar, session policies, and AgentCore. - [Agentic Supply Chain Vulnerabilities: Your Agent Is Only as Secure as Its Weakest Plugin (ASI04)](https://blog.technodrone.cloud/2026/07/supply-chain-owasp-agentic-top10.html): MCP servers, plugins, and agent tools introduce a live supply chain your lockfile can't protect. Here's how to secure it on AWS. - [Unexpected Code Execution: When Your Agent Becomes a Shell (ASI05)](https://blog.technodrone.cloud/2026/07/code-execution-owasp-agentic-top10.html): Agent-generated code is a feature, not a bug. Until it's exploited. How Bedrock AgentCore, Lambda, and Fargate keep RCE from owning your infrastructure. - [Memory & Context Poisoning: When Your Agent's Memory Becomes a Weapon (ASI06)](https://blog.technodrone.cloud/2026/07/memory-poisoning-owasp-agentic-top10.html): Memory & Context Poisoning persists across sessions and affects all users. Here's how it works and how to defend against it on AWS with S3 Object Lock, Bedrock Knowledge Bases, and GuardDuty. - [Insecure Inter-Agent Communication: When Agents Talk, Attackers Listen (ASI07)](https://blog.technodrone.cloud/2026/07/inter-agent-comms-owasp-agentic-top10.html): Multi-agent systems face injection, spoofing, and replay attacks between agents. Here's how to secure agent-to-agent communication on AWS with EventBridge, Step Functions, mTLS, and Cedar. - [Cascading Failures: When One Agent's Mistake Takes Down the Whole System (ASI08)](https://blog.technodrone.cloud/2026/07/cascading-failures-owasp-agentic-top10.html): One agent failure can cascade through your entire multi-agent system. Here's how Step Functions, CloudWatch, and circuit breakers prevent it on AWS. - [Human-Agent Trust Exploitation: When Your Humans Are the Weakest Link (ASI09)](https://blog.technodrone.cloud/2026/07/human-trust-owasp-agentic-top10.html): Human-in-the-loop isn't a security control. It's a checkbox. Here's how to design agent approval workflows that actually work, using A2I, Step Functions, and CloudWatch. - [Rogue Agents: When Nobody's Attacking But Everything's Going Wrong (ASI10)](https://blog.technodrone.cloud/2026/07/rogue-agents-owasp-agentic-top10.html): Rogue Agents operate beyond intended scope without any attacker. Here's how goal drift, self-replication, and reward hacking happen, and how to detect and contain them on AWS. - [Putting It All Together: Your Agentic AI Security Playbook for AWS](https://blog.technodrone.cloud/2026/07/putting-it-together-owasp-agentic-top10.html): The complete security playbook for agentic AI on AWS. Reference architecture, actionable checklist, and cross-cutting patterns from all 10 OWASP Agentic threats. - [My AI Sports Analyst: How I Wake Up to World Cup Insights Every Morning](https://blog.technodrone.cloud/2026/06/wc2026-ai-morning-briefing.html): How I built a scheduled AI agent that collects World Cup 2026 match stats, generates tournament predictions, and delivers a morning briefing while I sleep. - [Bridging IFTTT to Your Local AI Assistant with an MCP Proxy](https://blog.technodrone.cloud/2026/06/ifttt-mcp-proxy.html): How I built a Node.js proxy to bridge IFTTT's Streamable HTTP MCP server to my local AI assistant, including the two non-obvious gotchas that took hours to debug. - [Your AI Provider Is a Single Point of Failure](https://blog.technodrone.cloud/2026/06/ai-single-point-of-failure.html): The Anthropic Fable 5 shutdown proved your AI provider can be killed by a government letter. Here's how to build resilience into your AI stack. - [Your Coding Assistant Is Not You](https://blog.technodrone.cloud/2026/05/your-coding-assistant-is-not-you.html): AI coding tools are useful but they don't define you. The addiction patterns are real, the skill erosion is measurable, and awareness is the fix. - [The Next Casualty of the GenAI Revolution](https://blog.technodrone.cloud/2026/05/next-genai-casualty.html): I was at an event this morning where someone said something that really resonated with me. “The new programming language is English.” And you know what? They’re right. Jensen Huang … - [The Hidden Cost of AI Coding: Technical Debt You Can't See](https://blog.technodrone.cloud/2026/04/hidden-cost-of-ai.html): I had an interesting conversation with a colleague a few weeks ago. He was looking at his team’s metrics, sprint velocity up 40%, PRs merging faster than ever, test coverage … - [LLMs and bon bons](https://blog.technodrone.cloud/2025/12/llms-and-bon-bons.html): GenAI is like a box of chocolates - you never know what you’re going to get. And just like that box of chocolates, sometimes you get the perfect piece, and sometimes you bite into … - [Keeping Kosher re:Invent 2025](https://blog.technodrone.cloud/2025/11/keeping-kosher-at-reinvent-2025.html): It is that time of the year again, we are just two weeks away from re:Invent. Every year I write a post) this was last year’s) and every year people tell me that it is a very … - [Keeping Kosher re:Invent 2024](https://blog.technodrone.cloud/2024/11/keeping-kosher-at-reinvent-2024.html): It is that time of the year again, we are just two weeks away from re:Invent. Every year I write a post) this was last year’s) and every year people tell me that it is a very … - [Keeping Kosher re:Invent 2023](https://blog.technodrone.cloud/2023/11/keeping-kosher-at-reinvent-2023.html): It is that time of the year again, we are one week away from re:Invent. Every year I write a post, this was last year’s and every year people tell me that it is a very useful … - [In loving memory of my mother - Phyllis Saidel ZL](https://blog.technodrone.cloud/2023/09/phyllis-saidel-memory.html): Last week, my mother passed away. She was 87 when she returned her soul to the creator. Losing a parent is hard, all the more so when it comes suddenly. In my mother’s case, it was … - [4 Years at AWS](https://blog.technodrone.cloud/2023/07/4-years-at-aws.html): Four years have passed. How time flies, it is unbelievable! Three years ago, I wrote about my first year, and now that I just passed my fourth year mark (and also my second year in … - [Setting a timeout for an Amazon ECS task](https://blog.technodrone.cloud/2023/05/setting-timeout-ecs-task.html): Sometimes you just want your application to run, but only for a certain amount of time, there are a number of reasons you might want to do this. It could be that that you do not … - [Keeping Kosher re:Invent 2022](https://blog.technodrone.cloud/2022/11/keeping-kosher-at-reinvent-2022.html): It is that time of the year again, we are two weeks away from re:Invent, and last year I did this it was a very useful resource for many Jewish attendees at the conference. Last … - [Keeping Kosher re:Invent 2021](https://blog.technodrone.cloud/2021/10/keeping-kosher-at-reinvent-2021.html): It is that time of the year again, and the last time I did this was three years ago. I did not attend re:Invent in 2019, and last year was 100% virtual, so anyone that wanted to … ## Topics - [VMware](https://blog.technodrone.cloud/tags/vmware/) (347 posts) - [Miscellaneous](https://blog.technodrone.cloud/tags/miscellaneous/) (256 posts) - [Administration](https://blog.technodrone.cloud/tags/administration/) (226 posts) - [VSphere](https://blog.technodrone.cloud/tags/vsphere/) (133 posts) - [ESX](https://blog.technodrone.cloud/tags/esx/) (101 posts) - [Management](https://blog.technodrone.cloud/tags/management/) (96 posts) - [VMworld](https://blog.technodrone.cloud/tags/vmworld/) (81 posts) - [Virtualization](https://blog.technodrone.cloud/tags/virtualization/) (79 posts) - [Tools](https://blog.technodrone.cloud/tags/tools/) (72 posts) - [VCenter](https://blog.technodrone.cloud/tags/vcenter/) (71 posts) - [Aws](https://blog.technodrone.cloud/tags/aws/) (67 posts) - [Troubleshooting](https://blog.technodrone.cloud/tags/troubleshooting/) (66 posts) - [Cloud](https://blog.technodrone.cloud/tags/cloud/) (61 posts) - [Powershell](https://blog.technodrone.cloud/tags/powershell/) (59 posts) - [Scripting](https://blog.technodrone.cloud/tags/scripting/) (58 posts) - [OpenStack](https://blog.technodrone.cloud/tags/openstack/) (52 posts) - [PowerCLI](https://blog.technodrone.cloud/tags/powercli/) (43 posts) - [Microsoft](https://blog.technodrone.cloud/tags/microsoft/) (38 posts) - [ESX4i](https://blog.technodrone.cloud/tags/esx4i/) (33 posts) - [Security](https://blog.technodrone.cloud/tags/security/) (33 posts) - [Automation](https://blog.technodrone.cloud/tags/automation/) (32 posts) - [Windows](https://blog.technodrone.cloud/tags/windows/) (32 posts) - [Summit](https://blog.technodrone.cloud/tags/summit/) (25 posts) - [Blogger](https://blog.technodrone.cloud/tags/blogger/) (23 posts) - [Architecture](https://blog.technodrone.cloud/tags/architecture/) (22 posts)