CheatCoders

SSM Parameter Store: Hierarchical Runtime Config for Coding Agents

Coding agents need hierarchical runtime config — model ids, tool timeouts, repo allowlists — per env and tenant, without redeploying Lambdas. SSM Parameter Store paths like /agents/{env}/{tenant}/tools/* with IAM prefix policies and SecureString pointers to Secrets Manager beat flat env vars. Contrast with AppConfig: flags/kill switches vs config trees.

CloudWatch Logs Insights: Multi-Tenant Agent Tool Failure Forensics

Multi-tenant coding agents fail in silent clusters — one tenant's tool timeout looks like another tenant's Bedrock throttle in raw CloudWatch. Logs Insights queries with parse/filter/stats on tool name, tenant_id, latency, and error class turn Lambda log soup into forensics. Saved queries + optional Contributor Insights catch top offenders without a warehouse.