AWS News Weekly

Flo Motlik - theserverlessway.com

Weekly Summaries of all AWS News and Releases

  1. 17. Aug.

    AWS News Aug 10 - Aug 16

    This week: EC2 launches application status checks for monitoring app-level health directly alongside instance checks, IAM introduces Account Access Manager for assigning roles to Identity Center users, and S3 now shows the specific policy ARN in access denied errors for faster troubleshooting. Plus new SageMaker JumpStart models, Bedrock cost allocation by IAM principal, and QuickSight adds deny-by-default for AI capabilities. Compute & Infrastructure EC2: App status checks monitor web servers/Docker; Auto Scaling replaces unhealthy instances EKS: Tune control plane params for pod placement and autoscaling Spot: Placement score now includes Local Zones Storage & Database RDS MariaDB: 12.3 LTS with Oracle TO_DATE compatibility, JSON validation RDS Oracle: APEX 26.1 low-code support Redshift: 2.4x faster at 30% lower cost AI/ML - SageMaker JumpStart GLM 5.2 FP8: 1M token context for agentic tasks NVIDIA Nemotron: Nano 12B (6x throughput), 3.5 Lightning 30B (4x throughput) Qwen: AgentWorld 35B, 3.5 122B multimodal (262K context) Specialized: GLM OCR, LightOn OCR, Redis langcache-embed, JetBrains Mellum2, FLUX 2, Gemma 4 12B AI/ML - Bedrock OpenAI Daybreak: Cyber defense models (Blue/Red) with chip-level security Cost allocation: IAM principal tagging for bedrock-mantle endpoint Security & Identity IAM: Account access manager (Identity Center + IAM roles), Role manager auto-creates service roles S3: Access denied errors show specific blocking policy ARN ACM: Switch email→DNS validation without reissuing Secrets Manager: Auto-rotation for Jenkins/SonarQube tokens Analytics & BI QuickSight: Purview DLP integration, deny-by-default for AI, per-user limits Clean Rooms: Privacy-enhanced SQL logs, custom aggregation thresholds Glue: One-click jump to SageMaker Unified Studio Management & Cost Console: Interactive global map for regions/local zones Billing: 5 preconfigured dashboards (cost trends, compute, database, reservations) Marketplace: Customizable notifications by category/channel Networking & Migration VPN Client v6: CLI support, admin controls, OpenVPN 3 Elastic DR: Auto-preserves UEFI boot mode for Linux SES: Custom URL paths for mobile deep linking AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  2. 10. Aug.

    AWS News Aug 03 - Aug 09

    This week: DynamoDB adds native vector search with single-digit millisecond latency, Amazon Bedrock brings OpenAI GPT models with million-token context windows, and Aurora Serverless now scales to 12 ACUs in under a second. Plus ECR supports 200GB image layers, Lambda gets 3Gbps bandwidth, and Bedrock AgentCore launches in GovCloud. Databases DynamoDB: Native vector search, single-digit ms latency, 99%+ recall, trillions of vectors Aurora Serverless: Scales to 12 ACUs in ElastiCache: Graviton4 nodes—47% higher throughput, 43% lower P99 latency Neptune: Air-gapped backup vaults with immutable storage, cross-account/region copy AI/ML Bedrock: OpenAI GPT 5.6 models (Sol/Terra/Luna), 1M token context, built-in web search SageMaker AI: Full fine-tuning for 25+ models (Llama, Gemma, Qwen); G7 instances with Blackwell GPUs Bedrock AgentCore: Temporal policies, rate limiting, EC2 self-hosted option, GovCloud support ECR: 200GB image layers—embed LLMs in single layer Compute & Containers Lambda: 3Gbps bandwidth (non-VPC), 10K SQS pollers (5x increase) ECS: Fractional NVIDIA L4 GPUs (1/8th slices) for small inference GameLift: Shareable stream URLs, 21 new instance types Security Security Hub Extended: Supply chain security category (Chainguard, Socket) Network Firewall: Built-in explicit forward proxy mode WAF: Miggo + Salt Security managed rules for AI/API protection VPC IPAM: BGP route monitoring, automated RPKI/ROA management Analytics & Data Glue Catalog: Iceberg export to S3 Tables, semantic search with KMS QuickSight: Multi-dataset topics with runtime joins MSK: Free authorizer logs for Provisioned clusters OpenSearch: Network-restricted UI access via IAM conditions Developer Tools Transform: SQL Server→Aurora PostgreSQL conversion; GA for tech debt remediation Lambda Console: Kiro + Cursor IDE integration EMR: Interactive Spark sessions via Spark Connect Operations S3 Backup: Direct access via Access Points—no restore needed RDS: Storage initialization progress visibility; SQL Server audit logs to CloudWatch IAM Identity Center: One-click multi-Region setup; skip account access option WorkSpaces: Enhanced CloudWatch metrics (free) AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  3. 3. Aug.

    AWS News Jul 27 - Aug 02

    This week: AWS launches Amazon Interconnect for purpose-built multicloud connectivity with Oracle and Google Cloud. MSK Express brokers now deliver Kafka data directly to S3 and Iceberg tables, cutting costs up to 60 percent. Transit Gateway adds policy-based routing for traffic steering by source, destination, and protocol. Plus IAM Identity Center gets multi-region replication and Bedrock drops GPT 5.6 prices up to 80 percent. Database RDS SQL Server: Restore TDE-encrypted DBs directly to Multi-AZ instances Neptune: Tag-based IAM access control for cluster isolation S3 Tables: Iceberg V3 Variant type for schema-free JSON ingestion OpenSearch 3.7: 1-bit vector quantization, faster retrieval via doc values Directory Service: In-place Standard→Enterprise upgrade (5K→500K objects) Redshift RG: Graviton instances on trailing track, 2.4x faster at 30% lower cost Aurora DSQL: Multi-Region active-active clusters in more locations Compute & Containers EKS: Private OIDC via PrivateLink, no internet egress needed EKS Provisioned: HPA processing 40x faster for autoscaling objects EC2 Auto Scaling: Instance refresh as CloudFormation update policy Lambda: Java 8/11/17 on AL2023 (AL2 patched through June 2027) AI/ML Security Hub MCP: Claude Desktop integration for exposure findings Bedrock GovCloud: Grok 4.3, Gemma 4 (31B/26B/2B) models Bedrock: GPT 5.6 price cuts—Luna 80%, Terra 20% SageMaker Studio: Full Git version control across all editors Data & Analytics Glue DQ: Distribution Analyzer histograms, ML anomaly detection Glue REST API: VPC connections, filter pushdown, partitioning DataSync Enhanced: EFS, FSx Lustre, HDFS, Azure Blob, Hyper-V support MSK Express: Native S3 delivery + Iceberg tables, 60% cost reduction Redshift Data API: Long polling, ListSessions, batch auto-commit Networking Transit Gateway: Policy-Based Routing by source/dest IP, port, protocol Direct Connect: View BGP routes with AS path and community values Amazon Interconnect: Oracle Cloud GA, Google supported, Azure 2026 Security & Identity WAF: Pre-parse transforms, 10 new options including SHA-256 IAM Identity Center: Multi-region replication for built-in directory IAM Policy Simulator: Console integration, SCP testing, what-if scenarios Storage & Transfer EFS: Cross-account replication in GovCloud AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  4. 27. Juli

    AWS News Jul 20 - Jul 26

    This week: RDS adds SQL Server 2025 with native AI integration for calling Bedrock directly from T-SQL, Lambda durable functions hit GA for .NET with year-long pause support, and CloudWatch now tracks AI coding agent metrics across your org. Plus EKS Auto Mode gains EFA support, Secrets Manager events flow directly to EventBridge, and Claude Opus 5 arrives on Bedrock. Compute EC2 I8ge: Graviton4, 60% better compute, 55% better storage I/O, 60% lower latency EKS Auto Mode/Karpenter: EFA support, placement groups for node pools Lambda Durable Functions: GA for .NET, pause up to 1 year, KMS CMK encryption ECS Action Logs: Timestamped deployment visibility, Amazon Q root cause analysis ECS Service Connect: Zone-aware routing, reduces cross-AZ costs (default for new) AI/ML Claude Opus 5: Available on Bedrock, hours-long autonomous agents Claude Sonnet 5: Now in GovCloud on Bedrock SageMaker G7: RTX PRO 4500 Blackwell, 4.6x inference vs G6 SageMaker G7e: 8 RTX PRO 6000 GPUs, 768GB memory, 70B params single-node SageMaker G6: Now in GovCloud with L4 GPUs Bedrock AgentCore: Unified telemetry to single CloudWatch log group Data Exports: Standardized Bedrock metadata (model, pricing, inference type) Kiro: Opus 4.8 + Sonnet 5 in GovCloud with usage dashboards aws-bench: Open-source AI agent benchmark for cloud tasks Database RDS SQL Server 2025: Native AI/REST from T-SQL, Standard up to 32 cores, vector type RDS MySQL 9.7: Preview environment available Storage & Data KNFSD File Cache: Preview, NFS caching on AWS, VPC-speed reads Managed Prometheus: 1.5B active time series, 200K rules per workspace Apache Flink 2.3: Adaptive partitions, better CDC handling Networking NLB: Listener rules for source IP type routing, preserves client IP Direct Connect Peru: First 100Gbps location in Lima with MACsec Security & Management CloudTrail: Filter network events by identity for VPC endpoint logging Secrets Manager: Direct EventBridge events on value changes Organizations: 2000 RCPs per org (2x increase) Entity Resolution: Real-time advanced matching in milliseconds Developer Tools CloudWatch Coding Agent Insights: Track AI tool ROI, token alerts SageMaker Unified Studio: OpenSearch integration AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  5. 13. Juli

    AWS News Jul 06 - Jul 12

    This week: Security Hub expands to monitor Microsoft Azure resources alongside AWS with unified posture management, Systems Manager now connects and manages Azure VMs without manual agent installation, and ACM launches a fully managed ACME server for automated TLS certificate issuance. Plus RDS for Oracle 26ai brings Bedrock integration, and Aurora Dsql adds real-time CDC to Kinesis. Security & Identity Secrets Manager: Auto-rotation for Paddle API keys, GitLab tokens ACM: Managed ACME server for automated TLS via Certbot/cert-manager Security Hub: Blast radius mapping, attack chain graphs Security Hub: Azure resource monitoring (VMs, containers, identities) Security Hub: Network scanning confirms actual internet reachability Organizations: Account departure controls enabled by default VPC: Centralized encryption-in-transit via declarative policies Compute & Containers EKS Auto Mode: GPU fees cut 35% (G-series), 60% (P-series) July 2026 ECS Managed: Same GPU fee reductions as EKS Auto Mode EMR Serverless: 2x worker limits (32 vCPUs, 244GB memory) EC2: Replace root volume directly from EBS, no snapshot needed AI/ML SageMaker Studio: One-click Hugging Face model import SageMaker HyperPod: Disaggregated prefill/decode for LLM inference SageMaker HyperPod: AMI-based Slurm config, deep health checks SageMaker Unified Studio: MWAA integration, 19 new workflow operators SageMaker Unified Studio: OpenLineage data lineage for IAM domains SageMaker Unified Studio: Custom asset cataloging (any format) SageMaker Feature Store: Batch ops for high-throughput ingestion Neuron 2.31: MX FP8, UltraServer Operator, 14 new kernels RDS Oracle 26ai: Bedrock integration, AI Vector Search, Select AI Data & Analytics Aurora DSQL: CDC streaming to Kinesis Data Streams Redshift: Graviton R8g, 2.4x faster, 30% cheaper MSK Replicator: External Kafka to MSK Standard brokers Management & DevTools Systems Manager: Azure VM management without agent install CloudWatch App Signals: Auto exception snapshots, latency anomalies Config: 191 new managed rules (Bedrock, SageMaker, EKS, etc.) AWS MCP Server: OAuth support, DMS Schema Conversion integration EMR on EKS: AI Spark troubleshooting agent Builder Center: Free 8-hour sandbox environments AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  6. 6. Juli

    AWS News Jun 29 - Jul 05

    This week: EC2 C9g instances debut with fifth-gen Graviton delivering 25% better performance, Claude Sonnet 5 arrives on Bedrock with superior coding and agentic capabilities, and CloudFormation express mode cuts deployments by up to 4x. Plus OpenSearch gets a purpose-built log analytics engine with 4x better price-performance, and ECS adds zone-aware routing to cut cross-AZ costs. Compute EC2 C9g/C9gd: Graviton 5, 25% faster than G4, 35% faster ML inference EC2 Dedicated Hosts: AMD SEV-SNP confidential computing support EC2 Auto Scaling: Reservations-then-balanced strategy for capacity reservations Time Sync: Microsecond accuracy on 26 more instance types AI/ML Claude Sonnet 5: On Bedrock, better multi-file code changes, fewer corrections Bedrock AgentCore: 5K concurrent sessions, 200 interactions/sec default quotas Bedrock AgentCore Gateway: WAF integration for agent protection SageMaker: Serverless fine-tuning for Gemma 4 models (4B, 31B) SageMaker Inference: Auto image caching, 50% faster cold starts SageMaker HyperPod: Auto security patching, AMI version visibility Security Hub: 31 AI security controls for Bedrock/SageMaker GovCloud: GPT-5.4 (272K context), Nemotron 3 Super on Bedrock Containers EKS: Minor version rollback within 7 days ECS Express Mode: Custom task definitions supported ECS: Zone-aware Service Connect routing, deployment timeline UI ECS: Configurable circuit breaker thresholds Network Firewall: Native container rules (namespace, labels) Storage & Data S3 Logs: Direct to CloudWatch Logs and S3 Tables (Iceberg) OpenSearch: Log analytics engine, 4x price-performance, 70% less storage Neptune: Dual-stack IPv4/IPv6 support Operations CloudFormation: Pre-deployment validation in seconds CloudFormation Express: 4x faster deploys (CloudFront in seconds) CloudWatch Logs: Auto tag enrichment, query-based alarms CloudWatch Pipelines: OpenTelemetry metric transformations Security GuardDuty: File modification detection on EC2/EKS/ECS IAM Identity Center: Programmatic account access for apps RDS: Dynamic IAM auth scaling, no connection limits Networking Interconnect Last Mile: Preview with AT&T, automated branch connectivity AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  7. 29. Juni

    AWS News Jun 22 - Jun 28

    This week: Lambda MicroVMs bring VM-level isolation to serverless for running untrusted code, GuardDuty adds AI-powered investigations to help distinguish real threats from false positives, and CloudWatch Logs now accepts syslog directly from network devices without agents. Plus Outposts gets full lifecycle management in the console and new OpenAI models hit Bedrock in GovCloud. Compute & Infrastructure Lambda MicroVMs: VM-level isolation for user/AI code, 8hr state, dedicated HTTPS endpoint EC2 AMI Watermarks: Custom watermarks persist through copies, track provenance SageMaker G7e: 8x RTX PRO 6000 Blackwell GPUs, 96GB each for LLM/agentic AI SageMaker G6e: 8x L40S GPUs, 2.5x better than G5, 13B param LLMs EMR Serverless: Update app configs without stopping running jobs AI & Machine Learning Bedrock GovCloud: OpenAI GPT, NVIDIA Nemotron models, FedRAMP High/IL4-5 Bedrock Guardrails: Auto-refine policies via iterative improvement workflows Bedrock AgentCore: Cross-account memory access via resource-based policies GuardDuty AI Investigations: 90-day analysis, MITRE ATT&CK mapping, confidence scoring Kiro GovCloud: FedRAMP High/IL4-5 for agentic AI development MSK AI Agent Skills: Expert guidance for troubleshooting, sizing, migrations Networking & Security CloudWatch Logs: Direct syslog ingestion via VPC endpoint, auto-parsing Network Firewall: Safer default drop action, VisionHeight managed rules Route 53 Global Resolver: Share DNS views cross-account via RAM Cognito: Customer-managed KMS keys for user pool encryption Data & Analytics S3 Backup: 8x faster cross-account/region copies via change tracking Neptune: CloudFormation support for global databases OpenSearch: AI-assisted migrations from Solr/Elasticsearch MSK Replicator: mTLS auth for external Kafka migrations Operations & Management CloudWatch Container Insights: OTel-based metrics every 30s for EKS CloudWatch Dashboards: Tagging support, ABAC via IAM IAM Identity Center: Separate quotas for accounts (7K) and apps (7K) Outposts: Full lifecycle management via console/CLI/API Other Updates HealthOmics: Nextflow profiles, ephemeral storage up to 3TB Connect: Agentic CX designer preview, Live Sync for guided experiences Batch: Instance priority control with new allocation strategies Swift IoT SDK: Native Apple/Linux support with TLS 1.3 AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  8. 22. Juni

    AWS News Jun 15 - Jun 21

    This week: AWS launches Continuum for autonomous security vulnerability management, Bedrock AgentCore reaches GA with built-in guardrails and optimization tools, and S3 Vectors slashes query costs by up to 80%. Plus WAF introduces AI bot monetization, CloudWatch adds cross-account metrics replication, and new Graviton 5-powered M9g database instances deliver 30% better performance. Compute EC2 G7: GA, NVIDIA RTX PRO 6000 Blackwell, 4.6x better AI inference vs G6 RDS: M9g instances (Graviton 5), 30% better perf, up to 192 vCPU RDS X2m: Memory-optimized SQL Server, 50%+ licensing savings, 4TB RAM Outposts: bmn-cx3a bare-metal, AMD EPYC + 800Gbps networking ECS: Auto scaling 4x faster with 20-second metric resolution Storage & Data S3 Vectors: 80% lower query costs for 10M+ vectors, 10K results/query (100x increase) S3 Annotations: Up to 1GB JSON/XML/YAML metadata per object RDS SQL Server: GP3 volumes to 64TiB, 80K IOPS, 2000MB/s (4-5x increase) AI/ML Bedrock AgentCore: GA - harness, memory, web search, guardrails integration Bedrock Managed Knowledge Base: GA, 6 connectors, hybrid search Bedrock Guardrails: InvokeGuardrailChecks API, Automated Reasoning in Sydney Glue Catalog: AI-enriched tables with glossary terms, semantic search API Security AWS Continuum: Security Agent with simulated exploit validation Security Agent: AI threat modeling (STRIDE), IDE integration WAF: Traffic monetization for AI bots via x402 protocol Route 53: Palo Alto DNS Security integration (preview) Console Sign-in: Resource-based policies for network restrictions Observability CloudWatch: Cross-account metric replication, OpenTelemetry support, Query Studio GA CloudWatch Log Analytics: Unified Insights/Live Tail/Contributor console CloudWatch Synthetics: Multi-region canaries from single config Developer Tools Blocks: Open-source TypeScript framework, local-to-prod with zero changes DevOps Agent: Custom SRE agents, headless mode, release management (preview) Transform: Continuous modernization, mainframe workflows, Bedrock migration assessment Database Aurora/RDS MySQL: Extended support through June 2029 Oracle DB@AWS: Autonomous AI Database Serverless on Exadata AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

Info

Weekly Summaries of all AWS News and Releases