Ryan Lucas

Things Ryan Says on Podcasts

Container and cloud security specialist covering Kubernetes, Fargate, ECS and infosec, with a background at internet-scale companies, startups and fintech. Co-hosts The Cloud Pod, the weekly cloud and AI news show on AWS, Azure and GCP, with Justin Brodley, Jonathan Baker and Matt Kohn. Also appears on The Rich Somers Report and In Depth.

Where to Find Them

Ryan Lucas hosts The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP . They have also been a guest on The Rich Somers Report and In Depth .

Recently: “378: Agent Compute Engine Gives Your AI a Padded Cell” on The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP (November 2026); “377: The end of stack overflow and we know it… and AI feels fine” on The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP (October 2026); “376: Google Gemini Agents Gemini, Gemini Confused” on The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP (October 2026); “375: AWS Finally Automates the Blame Game” on The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP (October 2026); “374: Data Center Caught Gassing Up Without a Permit Slip” on The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP (October 2026); “372: Welcome to Microsoft Patch-A-Palooza” on The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP (September 2026).

What They Said

“It's Amazon. Amazon's never the cloud that has the capacity constraints. I'm used to this from Azure and GCP, where it's just like, this isn't very cloudy. But when Amazon comes out and announces this, the AI hardware constraint is real.” — Ryan Lucas, The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP

After reading that Amazon's cloud capacity is largely sold out through 2027, and hearing his co-host's doubts about how much reserved GPU capacity is actually used, Ryan says it is notable that the cloud known for deep capacity now says it is constrained.

The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP · 2026-11-05 Permalink → Listen →
The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP Around 46:13 into the episode
Ryan Lucas

…being a poor use of capital supply, not demand, but it appears to be this constraint. Demand is described as coming from both AI labs and enterprises, which points to the capacity competition between frontier model builders and typical enterprise adopters worth discussing how this affects. Pricing.

Matt Kohn

…that on the back end. You know, Ryan here said, I need, you know, five GPUs, and Matt said he needed three, and I'm only using one. So Josh comes in and requests two. Are they actually available to the random on-demand user or not? I don't, I kind of wonder how they're reserving it on the back end.

Ryan Lucas

Yeah. I mean, it's an odd thing. And it's like, if stuff's already being sold into 2028, if you come in and want reserved capacity, do you do you have to wait until 2028 to get that reserve? Like, will they even sell it to you? So it is sort of crazy. And it's Amazon. Like, Amazon's not never the cloud that has the capacity constraints. Like, I'm used to this from Azure and GCP, where it's just like, this isn't very cloudy, but when Amazon comes out and announces this, the AI hardware constraint is real.

Matt Kohn

Whatever happened to the Chinese model that was able to train their model on more generalized compute and older GPUs than requiring the newest ones.

Ryan Lucas

It was a deep seek training exercise, I believe. Like it wasn't anything special, but it's like it's, yeah, it's achieving the similar level benchmarks with building that model on way different hardware. But according to OpenAI, though, that's a lot of distillation of the models of the GPT models…

Matt Kohn

Jonathan, come save us.

Speaker names come from our own diarization. The position is estimated from where the line sits in the episode.
“We used to just basically ignore the stuff that was not reachable or low or medium. And now you have to take a whole new look at your risk profile and be like, well, if these six lows can be easily exploited by AI, are they still low? In context? And how do you measure that context? And it's tricky.” — Ryan Lucas, The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP

The hosts were discussing OpenAI's red-teaming of its own training environment, where models chained together small weaknesses. Ryan, who works in security, says AI makes low-severity CVEs matter again because they can be chained into serious exploits.

The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP · 2026-11-05 Permalink → Listen →
The Cloud Pod | Weekly AI & Cloud News on AWS, Azure & GCP Around 09:04 into the episode
Ryan Lucas

oh, I mean, that's the, that's the biggest issue by themselves, no, right? But that's the power of AI is they're channing them together to create these exploits.

Matt Kohn

Right. It's the chain level attacks. You know, you take one little thing and everything goes bonkers from there.

Ryan Lucas

And so my day job, it's awful now because it's like, well, we used to just basically ignore, you know, like the stuff that was, you know, not reachable or low or medium and that. And now you have to take a whole new look at your risk profile and be like, well, if these six lows can be easily exploited by AI, are they still low, right? In context? And how do you, how do you measure that context? And it's tricky. So it's, there's a lot more of those, you know, lower severity CVEs that can be chained together. And I don't think I'm alone in sort of deprioritizing those and to make sure that we can get the highs in the criticals patch. So it's this like, uh-oh.

Matt Kohn

I used to argue with our, you know, different security teams being like, look, I fixed all the highs. Like, we're trying to fix the root process here and then we'll get to the lows. You know, once we fix the root process, we have a proper bakery. It's always a trade-off. But like now you can't wait…

Ryan Lucas

Yeah. Well, just, you know, it's, it's funny because you go into the cloud and you realize that your security model can no longer be this high wall garden, but then the first thing you want in the cloud is a high wall carton. Turns out your garden's a mess.

Matt Kohn

Don't look in my house. Okay. I will say, I think the most patched thing in my home network is my containers. I have them set every week to just auto-update to the latest version. And the only problem every now and then is my pie hole server because it requires DNS. If the timing is too long, when…

Speaker names come from our own diarization. The position is estimated from where the line sits in the episode.

Collections They Appear In