Bedrock on Tim's Tech Thoughts

OpenAI Comes to Amazon Bedrock: A Win for Model Consumers

Thu, 30 Apr 2026 09:00:00 -0400

In a move that few would have predicted even a year ago, Amazon Web Services and OpenAI have announced a significant partnership that brings OpenAI’s frontier models — including Codex — directly into Amazon Bedrock. For those of us who build on AWS and care about where the AI ecosystem is headed, this is a genuinely exciting development.

You can read the official announcements from both sides here: OpenAI on AWS and AWS: Bedrock OpenAI Models .

Amazon Bedrock's Security Model: What Enterprises Actually Need to Know

Sat, 07 Mar 2026 10:32:00 -0400

One of the most common blockers I hear from enterprise teams evaluating generative AI isn’t about model quality — it’s about trust. Where does our data go? Can AWS see our prompts? Will our inputs be used to train someone else’s model? Can we meet our compliance requirements? These are the right questions to ask, and Amazon Bedrock has spent considerable engineering effort making sure the answers are satisfying.

This post walks through the core pillars of Bedrock’s security model: how inference stays private, what AWS commits to around your data, how to keep traffic off the public internet, what compliance certifications are in place, how IAM gives you fine-grained access control, and how AgentCore’s Cedar policies extend that control to the level of individual agent tool calls.

Amazon Bedrock AgentCore: The Infrastructure Layer Your AI Agents Have Been Missing

Mon, 02 Feb 2026 09:22:00 -0400

Building an AI agent that works in a demo is one thing. Getting it to reliably work in production — across thousands of concurrent users, with proper security, memory, and observability — is an entirely different challenge. If you’ve ever tried to take an AI agent from prototype to production, you know exactly what I’m talking about. Months of undifferentiated infrastructure work: session management, identity controls, persistent memory, tool integrations, monitoring. All of it built from scratch, all of it before you’ve written a single line of your actual business logic.