CloudWatch | John Nessime

Agentforce and AWS: Where the Trust Layer Stops and Your Logs Begin

Post category:Cloud Computing DevOps Technical Guides

Agentforce and AWS wire together in four standard patterns, and every one of them has a point where Salesforce's guarantees stop and yours start. This traces a single request across each boundary it crosses, covers the Trust Layer default most write-ups get wrong (LLM data masking is disabled for agents), and sets out what changes the moment a callout lands in your own account: retention, audit trail, and user identity that does not travel.

AWS Glue Data Quality for SaaS Data: Catching the Breakage Nobody Deployed

Post category:Cloud Computing DevOps Technical Guides

A SaaS admin changes a field and your pipeline stays green while the numbers drift. A practical guide to AWS Glue Data Quality for SaaS sources: where to run the checks, why nested payloads need flattening before DQDL can see them, which rule catches which failure, and the dynamic rules that pass silently because they have no history yet.

It Works Isn’t Ready: A Production Checklist for Salesforce AWS Integrations

Post category:Cloud Computing DevOps Technical Guides

"It works" and "it's ready" are different claims. Integrations rarely fail on launch day; they fail in week six, when the token expires and someone adds a field. A readiness checklist for Salesforce AWS integrations, with a pass test on every item.

Build a Secure AI Medical Assistant on AWS: The Boundaries That Actually Leak

Post category:Case Studies Cloud Computing DevOps Technical Guides

A practical architecture for a secure AI medical assistant on AWS, organised by the boundary the data crosses: the input box, your own invocation logs, cross-Region inference routing, the retrieval index, and clinical accuracy. Includes real commands, the failure modes that stay invisible until an audit, and the trade-offs worth knowing before you build.

Zero Errors, Zero Records: Monitoring Salesforce Integrations with CloudWatch and Grafana

Post category:Cloud Computing DevOps Technical Guides

The error count was zero every day for three weeks. So was the invocation count. A stopped integration and a healthy one produce identical graphs, and every CloudWatch default is tuned to stay quiet when data stops arriving. Four signals worth emitting, and the alarm config that actually fires.

You Don’t Run Any EC2: Cutting the AWS Cost of Salesforce Data Pipelines

Post category:Cloud Computing DevOps Technical Guides

"EC2 – Other" is the third largest line on the bill and you run no EC2 instances. That's NAT gateway charges from a pipeline that is entirely Lambda, S3 and Athena. Five levers for cutting the AWS cost of Salesforce data pipelines, in the order worth pulling them.

HIPAA Compliance on AWS: The Gaps That Pass Every Security Check

Post category:Case Studies Cloud Computing Technical Guides Web Security

A working engineer's guide to HIPAA compliance on AWS, organised by the gap between the control you configured and the obligation you actually carry. Covers BAA account scope, the eligible services list as a contract boundary, KMS key policy versus the encryption checkbox, what "six years" really applies to, backup and restore scope, and the subprocessor chain nobody inventories.