Anton Aleksandrov

• 2021-now, Principal Solutions Architect, Agentic AI & Serverless, AWS
• 2017-2021, Chief Architect, IBM Cloud Security / App Identity Services
• 2012-2017, Architect, IBM Cloud MobileFirst Platform
• Prior to 2012, Software/Solutions Engineer
• See Linkedin for details

Customer/partner stories (↑)

• Building a serverless AI assistant at Pelago: concept to care in two weeks (article)
• Deploying serverless AI agents on AWS with Terraform and securing them with HCP Vault (article)
• From authentication to identity propagation: Securing serverless AI agents and MCP servers on AWS with Okta (article)
• How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale (article)
• How Launchpad from Pega enables secure SaaS extensibility with AWS Lambda (article)
• Automate Early Security Patching in CI Pipelines on AWS Using NVIDIA AI Blueprints (article)
• How Smartsheet optimized their Serverless Architecture Using Lambda Provisioned Concurrency (article)
• How Smartsheet reduced latency and optimized costs in their serverless architecture (article)
• From 18 Weeks to 3 Hours: How CyberArk Delivers Business Value Faster Using Serverless Technology on AWS (article)
• How CyberArk is streamlining serverless governance by codifying architectural blueprints (article)
• How SeatGeek uses AWS to control authorization, authentication, and rate-limiting in a multi-tenant SaaS app (article)

Technical publications (↑)

• Building an Auth Layer for Chaos Monkeys (a.k.a. AI Agents) (article)
• Building AI Agents with Amazon Bedrock AgentCore and Terraform - From Prototype to Production (workshop)
• Integrating Amazon Bedrock AgentCore with Workday Agents (workshop)
• Your Teams Are Sharing an AI Bill — Here’s How to Know Who Consumes What (article)
• Integrating Event Source Mappings with AWS Lambda tenant isolation mode (article)
• Stop Coding Your Agents: The Case for Declarative AI (article)
• Integrating Amazon Bedrock AgentCore Identity with Non-Standard OAuth2 Providers (article]
• Building Multi-Agent AI Systems on AWS with A2A and AgentCore (article)
• Effectively building AI agents with AWS Serverless (article)
• Architecting conversational observability for cloud applications (article)
• Building multi-tenant SaaS applications with AWS Lambda’s new tenant isolation mode (article)
• Building responsive APIs with Amazon API Gateway response streaming (article)
• Improving throughput of serverless streaming workloads for Kafka (article)
• Enhancing API security with Amazon API Gateway TLS security policies (article)
• Dynamically routing requests with Amazon API Gateway routing rules (article)
• Enhancing multi-account activity monitoring and threat detection with event-driven architectures (article)
• Automating AI-assisted container deployments with the Amazon ECS MCP Server (article)
• Monitoring network traffic in AWS Lambda functions (article)
• Building Serverless MCP Servers and What Does Peppa Pig Have To Do With It (article)
• Optimizing network footprint in serverless applications (article)
• Handling billions of invocations – best practices from AWS Lambda (article)
• Delivering events to cross-account targets with Amazon EventBridge (article)
• Efficiently processing batched data using parallelization in AWS Lambda (article)
• Applying Generative AI to CVE remediation – early vulnerability patching in Continuous Integration Pipelines (article)
• Building Serverless Applications with Terraform Guide (article)
• Accelerating polling scale-up for AWS Lambda functions configured with Amazon SQS (article)
• Enhancing runtime security and governance with the AWS Lambda Runtime API proxy extension (article)
• Integrating the AWS Lambda Telemetry API with Prometheus and OpenSearch (article)
• Cost optimization for AWS Lambda Guide (article)
• Implementing long-running TCP Connections within VPC networking (article)
• Introducing the AWS Lambda Telemetry API (article)
• More room to build: serverless services now support payloads up to 1 MB (article)
• Propagating valid mTLS client certificate identity to downstream services using Amazon API Gateway (article)
• Extending your SaaS platform with AWS Lambda (article)
• Using Istio to secure multi-cloud Kubernetes applications with zero code changes (article)
• IBM Cloud App ID White Paper (article)
• Adding Sign In to Multicloud Applications Without Code Changes (article)
• Reusing Existing Red Hat SSO and Keycloak for Applications That Run on IBM Cloud with App ID (article)
• Protecting Your Cloud Applications with App ID and Existing IBM Cloud Identity User Repository (article)
• Serving Cached Content Using Cloud Internet Services, Cloud Object Storage and Certificate Manager (article)

Public speaking (↑)

• Deploying secure production-ready agents with Claude Managed Agents on AWS (video, slides, resources)
• Stop coding your agents: The case for declarative AI with AgentCore Harness (slides)
• AWS Lambda MicroVMs - Serverless compute for secure code execution (slides)
• AWS re:Invent 2025 - Secure Multi-tenant SaaS with AWS Lambda: A Tenant Isolation Deep Dive (video, slides, resources)
• AWS re:Invent 2025 - Scaling Serverless with platform engineering: A blueprint for success (video, slides, resources)
• AWS re:Invent 2025 - Building production-ready Agentic AI architectures (slides, resources)
• AWS re:Invent 2025 - Optimizing Kafka workloads with AWS Lambda (slides, resources)
• Building serverless AI Agents on AWS with Strands Agents SDK Webinar (video, slides)
• Serverless Office Hours - Building Serverless AI agents (video)
• Serverlеss Office Hours - Building secure multi-tenant apps with Lambda Tenant Isolation mode (video)
• Serverlеss Office Hours - API Gateway Response Streaming for AI applications (video)
• What’s new in Serverless and Containers - re:Invent 2025 recap (slides)
• Building serverless MCP Servers on AWS (video, slides)
• Enhancing multi-account activity monitoring and threat detection with event-driven architectures (video, slides, resources)
• Serverless Office Hours - Dynamically routing requests with Amazon API Gateway routing rules (video)
• AWS re:Inforce 2025 - Governance Best Practices for Modern Applications (slides, resources)
• Platform Engineering Best Practices from AWS and CyberArk (video)
• Serverless Office Hours - Handling billions of AWS Lambda invocations (video)
• NVIDIA GTC 2025 - Automated Vulnerability Patching in CI pipines for Financial Services organizations (slides)
• Serverless Office Hours - Scaling Apache Kafka Processing (video)
• What’s new in Serverless 2025 (slides)
• AWS re:Invent 2024 - Accelerate serverless deployments using Terraform with proven patterns (slides, video, resources)
• AWS re:Invent 2024 - Improve throughput and monitoring of serverless streaming workloads (slides, video, resources)
• HashiConf 2024 - Accelerate serverless deployments using HashiCorp Terraform (video, slides)
• Serverless cost and performance optimization (slides)
• AWS PartnerEquip 2024 - Using Lambda extensions for enhanced observability (slides)
• What’s new in Serverless 2024 (slides)
• Scaling Serverless Development with Platform Engineering (video, slides, webinar)
• Building serverless applications on AWS with HashiCorp Terraform (webinar)
• Serverless Office Hours - Serverless Platform Engineering (video)
• Containers from the Couch - Automate container security with Amazon Bedrock, ECR, EKS, Inspector, and Lambda (video)
• Serverless Office Hours - Building Serverless Apps with Terraform (video)
• LASCON 2024 - Applying generative AI to CVE remediation (video, slides)
• AWS re:Invent 2023 - Combining EventBridge and Step Functions - advanced usecases and best practices (slides)
• AWS re:invent 2023 - Building multi-tenant applications with Lambda and Fargate (slides)
• What’s new in Serverless 2023 (slides)
• Building multi-tenant SaaS applications with AWS Serverless (slides)
• LASCON 2023 - Reverse-engineering the Enigma Machine and rebuilding with serverless (video, slides)
• Building SaaS on AWS - Multi-tenant sharding strategies in SaaS applications (video, slides)
• AWS re:Invent 2022 - What’s possible with AWS Step Functions (slides)
• Serverless Office Hours - Building real-life asynchronous architectures (video)
• Serverless Office Hours - Multi-tenant serverless SaaS applications with AWS Serverless (video)
• LASCON 2022 - A visual journey to demystifying OAuth2 and OIDC (video, slides)
• KubeCon 2019 - Declaratively Securing Kubernetes Applications with Zero Code Updates (slides)
• LASCON 2019 - Building secure cloud apps (and sleeping well at night) (video, slides)
• LASCON 2018 - GDPR for Cloud Applications (video, slides)
• (And quite a few more in the last ~15 years…)

Code (↑)

• AgentCore Gateway Deep Dive (link)
• Building AI Agents with Amazon Bedrock AgentCore (link)
• Integrating Amazon Bedrock AgentCore Agents with Workday via MCP and A2A [link)
• Bedrock Models Benchmarker (link)
• Serverless AI Agent (Strands Agents SDK) and MCP Server, with E2E user authorization (link)
• Lambda Tenant Isolation mode (link)
• Serverless MCP Servers (link)
• Lambda Network Monitoring (link)
• Efficiently processing batched data using parallelization in AWS Lambda (link)
• API Gateway response streaming (link)
• Introducing faster polling scale-up for AWS Lambda functions configured with Amazon SQS (link)
• Enhancing runtime security and governance with the AWS Lambda Runtime API proxy extension (link)
• AWS Lambda Telemetry API extension, Golang (link)
• AWS Lambda Telemetry API extension, Node.js (link)
• AWS Lambda movie theater with response streaming (link)
• Propagating valid mTLS client certificate identity to downstream services using Amazon API Gateway (link)
• Using data compression with AWS Lambda functions (link)
• Jenkins plugin for AWS Lambda (link)
• Okta Customer Identity Cloud (Auth0) JWT Validation Extension (link)
• Lambda functions on deprecated runtimes finder (link)
• Lambda runtimes status (updated daily)] (link)

Advisor / technical authority / reviewer (↑)

• Building Memory-Intensive Apps with AWS Lambda Managed Instances (link)
• Optimizing Compute-Intensive Serverless Workloads with Multi-threaded Rust on AWS Lambda (link)
• Orchestrating large-scale document processing with AWS Step Functions and Amazon Bedrock batch inference (link)
• Accessing private Amazon API Gateway endpoints through custom Amazon CloudFront distribution using VPC Origins (link)
• Understanding and Remediating Cold Starts: An AWS Lambda Perspective (link)
• Building resilient multi-tenant systems with Amazon SQS fair queues(link)
• Infrastructure as code translation for serverless using AI code assistants (link)
• AWS Serverless MCP Server: AI-powered development for modern applications (link)
• AWS Lambda introduces tiered pricing for Amazon CloudWatch logs and additional logging destinations (link)
• Streamlining trace sampling behavior for AWS Lambda functions with AWS X-Ray (link)
• Automating chaos experiments with AWS Fault Injection Service and AWS Lambda (link)
• Protecting REST APIs Behind Amazon API Gateway Using Okta (link)
• Building a three-tier architecture on a budget (link)
• Protegrity Data Protection for Amazon S3 and Snowflake (link)

Patents (↑)

• Trusted Repository Review (Patent No. 12124583) (link)
• User Profile Access From Engaging Applications With Privacy Assurance Associated With An API (Patent No. 11122048) (link)
• Updating Web Resources (Patent No. 10713034, 10694353, 10212563, 10282191, 9921821, 9733919, 9690563) (link)
• Intelligent Mobile Application Update (Patent No. 9952851, 9934020) (link)
• Processing Hybrid Data Using A Single Web Client (Patent No. 9930130, 9648124, 9525587) (link)
• Integrating Remote Content with Local Content (Publication No. 20130307871) (link)

• IBM Cloud App ID - Technologies Under the Hood (video)
• IBM Cloud App ID - Protecting Node.js Backend Application (video)
• IBM Cloud App ID - Protecting Node.js Web Applications (video)
• IBM Cloud App ID - Protecting Liberty Java Web Applications (video)
• IBM Cloud App ID - Protecting Liberty Java Backend Applications (video)
• IBM Cloud App ID - Management API (video)
• IBM Cloud App ID - Protecting Android Applications (video)
• IBM Cloud App ID - Protecting iOS Applications (video)

• IBM Cloud App ID - Protecting Spring Boot Backend Application (video)
• IBM Cloud App ID - Protecting Spring Boot Web Applications (video)
• IBM Cloud App ID - Using Multiple App ID Instances (video)
• IBM Cloud App ID - Implementing the End-2-End Workflow (video)
• IBM Cloud App ID - Introduction to Istio Service Mesh (video)
• IBM Cloud App ID - Integrating with Keycloak (video)
• IBM Cloud App ID - Integrating with IBM Cloud Identity (video)
• IBM Cloud App ID - Protecting IBM Kubernetes Service OpenShift Applications (video)
• IBM Cloud App ID - Protecting IBM Cloud Pak for Applications (video)