Raj Murugan
I build production AI agents on AWS
Deep technical posts with real code, real gotchas, real architecture decisions. No demo-grade content.
AWS Solutions Architect & AI Engineer · Sydney · Parallo (SoftwareOne)
27 technical posts · AWS Solutions Architect Professional · AWS Certified AI Practitioner
New: LangGraph builds the agent. AgentCore runs it. Read →
Start Here
All posts →The AI Architect Roadmap
Eight rungs from foundations to enterprise AI, and an honest map of what this site covers deeply, where it is strong, and where the gaps still are.
Recent Posts
View all →LangGraph builds the agent. AgentCore runs it.
LangGraph and AgentCore are different layers, not rivals. Who owns each design primitive, and why your runtime decides how hard checkpointing works.
The ML you need to operate LLMs, not train them
You do not need to train a transformer to run one well. What tokens, context budget and sampling knobs actually mean, verified against the current Bedrock Converse API, including a temperature/top_p gotcha that silently breaks on newer Claude models.
Field Notes: A Gateway policy can't see the user if your agent calls with its own token
A re:Post question asked how to stop an AgentCore agent acting beyond the user who asked. I built a demo to find out. A Cedar policy does nothing if the agent calls with its own token. Two gotchas, and the real limit: a stale token claim.
About
Senior Solutions Architect at Parallo (SoftwareOne, AWS Advanced Partner). I take customers from "we want AWS" or "we want GenAI" to a working, governed deployment, then write about how it actually works and where it breaks.
The work I publish here is the work nobody else writes about: the IAM trust policy that takes an afternoon to debug, the VPC cold start that breaks streaming, the OIDC flow that silently fails for a month. AgentCore production gotchas. CDK patterns that survive a real deployment. Cost decisions that show up on the bill, not in the demo.
Featured Work
Production-ready Customer Service AI Agent on Amazon Bedrock AgentCore. Every deployment gotcha documented inline. The companion repo to the 6-part AgentCore series.
An MCP server that turns ADRs, incident reports, and runbooks into a queryable org-knowledge surface for AWS DevOps Agent. Four tools, Bedrock Knowledge Base, frontmatter-filtered chunks. From "agent that reads your docs" to "agent that knows your org."
Three Claude projects with Socratic tutoring, a weekly Cowork routine, three differentiated emails. Open-source spec, full design history including the v1-to-v2 architecture pivot. A personal build whose failure modes mirrored enterprise AI patterns.
Newsletter
Deep AWS + AI engineering in your inbox
A new write-up every Tuesday: the kind of post that documents an IAM gotcha, a real CDK pattern, or a production Bedrock deployment decision. No filler. No AI-generated content. Just one post a week worth your attention.
No spam. Every email has a one-click unsubscribe link.