mkdev

GPT models have become much better since the early days of ChatGPT, but one lesson from GenAI security has survived every generation: a prompt is not a security boundary. Prompt injection remains one of OWASP’s major LLM risks, and agentic systems have increased the potential consequences because a manipulated model may now have tools, credentials and access to other systems. That means securing an AI application cannot consist of writing an increasingly elaborate system prompt telling the model what it must never do. Input and output validation, least-privilege permissions, secret management, logging, dependency controls and conventional application security still have to surround the model. GPT-5.6 may be far more capable than the models developers were experimenting with a few years ago. The surrounding software still needs to assume that the model can make mistakes, misunderstand instructions or be manipulated. https://lnkd.in/dCXM46fi 

Is your AWS setup secure, cost-effective and built for reliable growth? mkdev’s In-Depth AWS Audit reviews your architecture, services and applications, then delivers practical recommendations and concrete backlog items. Check out the page and schedule a call: https://lnkd.in/dnTfVNwX

AWS Lambda and Google Cloud Functions have both evolved, but the main lesson from our pricing comparison remains relevant in 2026: serverless costs depend heavily on the shape of your workload. Google’s second-generation Cloud Functions are now called Cloud Run functions and follow the Cloud Run pricing model. AWS Lambda continues to bill according to requests, execution duration and allocated resources. Billing granularity, concurrency, architecture, region, networking and supporting services can all affect which platform is more economical. Instead of asking which service is cheaper in general, ask which one is cheaper for your actual application. Read the full article: https://lnkd.in/e5ZRS24z

The free Argo CD Lightning Course will teach you how Argo CD works, what problems it solves, and why it has become an important tool for managing Kubernetes deployments. Available as both articles and videos, the course also covers Argo CD’s essential features and how it structures projects and applications. Article series: https://lnkd.in/dbufvsXQ Video form: https://lnkd.in/daJgtTjv

Serving a SaaS app on customer-owned domains gets complicated when every hostname needs TLS. AWS ALBs start with a quota of 25 additional certificates, while Cloudflare for SaaS offers a more scalable custom-domain workflow. Watch the video:

The more capable AI becomes, the easier it is to trust it too much. The current GPT-5 generation is better at understanding intent, reasoning across large amounts of context and using external tools. Its answers can be detailed, polished and highly convincing. But a convincing answer is not automatically a correct one, and an autonomous workflow is not automatically an appropriate one. AI literacy in 2026 therefore involves much more than learning how to write prompts. Employees need to understand what information may be shared, when external sources must be checked, which actions require human approval and where the model’s output should never be treated as a final decision. This is both the carrot and the stick of the EU AI Act’s literacy requirements: better-trained teams can use AI more effectively, while companies without suitable guidance expose themselves to avoidable operational, legal and reputational risks. Our article looks at how companies can turn AI literacy from a compliance exercise into a practical business capability. https://lnkd.in/dYAqfYRS

Your delivery pipeline should help you move faster without sacrificing stability. mkdev designs CI/CD systems around your team, product and business, from organizational challenges to technical implementation. Check out the page and schedule a call: https://lnkd.in/eVmfZ4GV

Should you define every GKE resource yourself or use a Terraform module? Building a basic cluster from individual resources is a good way to understand what Terraform is actually creating. A maintained module becomes useful once you need repeatable configurations, multiple environments and more advanced GKE features without duplicating large amounts of code. This article demonstrates both approaches, including VPC-native networking, node pools, service accounts and the complete Terraform deployment lifecycle. A practical introduction for anyone starting to automate GKE: https://lnkd.in/eWdyurtZ

In the 95th mkdev dispatch Kirill talks about cloud providers inventing new execution layers for AI Agents to operate in. Also inside: trusting Claude Code a bit too much, tracking Amazon Bedrock Costs, spinel and more!

Struggling to decide what matters when learning a new technology? Start with the concepts, explore the details when a real project demands them, and don’t confuse theoretical knowledge with experience. Learn more through the Prometheus example in this article. https://lnkd.in/eVaM9Ftz