AWS News Weekly

Flo Motlik - theserverlessway.com

Weekly Summaries of all AWS News and Releases

  1. 2d ago

    AWS News Jul 27 - Aug 02

    This week: AWS launches Amazon Interconnect for purpose-built multicloud connectivity with Oracle and Google Cloud. MSK Express brokers now deliver Kafka data directly to S3 and Iceberg tables, cutting costs up to 60 percent. Transit Gateway adds policy-based routing for traffic steering by source, destination, and protocol. Plus IAM Identity Center gets multi-region replication and Bedrock drops GPT 5.6 prices up to 80 percent. Database RDS SQL Server: Restore TDE-encrypted DBs directly to Multi-AZ instances Neptune: Tag-based IAM access control for cluster isolation S3 Tables: Iceberg V3 Variant type for schema-free JSON ingestion OpenSearch 3.7: 1-bit vector quantization, faster retrieval via doc values Directory Service: In-place Standard→Enterprise upgrade (5K→500K objects) Redshift RG: Graviton instances on trailing track, 2.4x faster at 30% lower cost Aurora DSQL: Multi-Region active-active clusters in more locations Compute & Containers EKS: Private OIDC via PrivateLink, no internet egress needed EKS Provisioned: HPA processing 40x faster for autoscaling objects EC2 Auto Scaling: Instance refresh as CloudFormation update policy Lambda: Java 8/11/17 on AL2023 (AL2 patched through June 2027) AI/ML Security Hub MCP: Claude Desktop integration for exposure findings Bedrock GovCloud: Grok 4.3, Gemma 4 (31B/26B/2B) models Bedrock: GPT 5.6 price cuts—Luna 80%, Terra 20% SageMaker Studio: Full Git version control across all editors Data & Analytics Glue DQ: Distribution Analyzer histograms, ML anomaly detection Glue REST API: VPC connections, filter pushdown, partitioning DataSync Enhanced: EFS, FSx Lustre, HDFS, Azure Blob, Hyper-V support MSK Express: Native S3 delivery + Iceberg tables, 60% cost reduction Redshift Data API: Long polling, ListSessions, batch auto-commit Networking Transit Gateway: Policy-Based Routing by source/dest IP, port, protocol Direct Connect: View BGP routes with AS path and community values Amazon Interconnect: Oracle Cloud GA, Google supported, Azure 2026 Security & Identity WAF: Pre-parse transforms, 10 new options including SHA-256 IAM Identity Center: Multi-region replication for built-in directory IAM Policy Simulator: Console integration, SCP testing, what-if scenarios Storage & Transfer EFS: Cross-account replication in GovCloud AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  2. Jul 27

    AWS News Jul 20 - Jul 26

    This week: RDS adds SQL Server 2025 with native AI integration for calling Bedrock directly from T-SQL, Lambda durable functions hit GA for .NET with year-long pause support, and CloudWatch now tracks AI coding agent metrics across your org. Plus EKS Auto Mode gains EFA support, Secrets Manager events flow directly to EventBridge, and Claude Opus 5 arrives on Bedrock. Compute EC2 I8ge: Graviton4, 60% better compute, 55% better storage I/O, 60% lower latency EKS Auto Mode/Karpenter: EFA support, placement groups for node pools Lambda Durable Functions: GA for .NET, pause up to 1 year, KMS CMK encryption ECS Action Logs: Timestamped deployment visibility, Amazon Q root cause analysis ECS Service Connect: Zone-aware routing, reduces cross-AZ costs (default for new) AI/ML Claude Opus 5: Available on Bedrock, hours-long autonomous agents Claude Sonnet 5: Now in GovCloud on Bedrock SageMaker G7: RTX PRO 4500 Blackwell, 4.6x inference vs G6 SageMaker G7e: 8 RTX PRO 6000 GPUs, 768GB memory, 70B params single-node SageMaker G6: Now in GovCloud with L4 GPUs Bedrock AgentCore: Unified telemetry to single CloudWatch log group Data Exports: Standardized Bedrock metadata (model, pricing, inference type) Kiro: Opus 4.8 + Sonnet 5 in GovCloud with usage dashboards aws-bench: Open-source AI agent benchmark for cloud tasks Database RDS SQL Server 2025: Native AI/REST from T-SQL, Standard up to 32 cores, vector type RDS MySQL 9.7: Preview environment available Storage & Data KNFSD File Cache: Preview, NFS caching on AWS, VPC-speed reads Managed Prometheus: 1.5B active time series, 200K rules per workspace Apache Flink 2.3: Adaptive partitions, better CDC handling Networking NLB: Listener rules for source IP type routing, preserves client IP Direct Connect Peru: First 100Gbps location in Lima with MACsec Security & Management CloudTrail: Filter network events by identity for VPC endpoint logging Secrets Manager: Direct EventBridge events on value changes Organizations: 2000 RCPs per org (2x increase) Entity Resolution: Real-time advanced matching in milliseconds Developer Tools CloudWatch Coding Agent Insights: Track AI tool ROI, token alerts SageMaker Unified Studio: OpenSearch integration AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  3. Jul 13

    AWS News Jul 06 - Jul 12

    This week: Security Hub expands to monitor Microsoft Azure resources alongside AWS with unified posture management, Systems Manager now connects and manages Azure VMs without manual agent installation, and ACM launches a fully managed ACME server for automated TLS certificate issuance. Plus RDS for Oracle 26ai brings Bedrock integration, and Aurora Dsql adds real-time CDC to Kinesis. Security & Identity Secrets Manager: Auto-rotation for Paddle API keys, GitLab tokens ACM: Managed ACME server for automated TLS via Certbot/cert-manager Security Hub: Blast radius mapping, attack chain graphs Security Hub: Azure resource monitoring (VMs, containers, identities) Security Hub: Network scanning confirms actual internet reachability Organizations: Account departure controls enabled by default VPC: Centralized encryption-in-transit via declarative policies Compute & Containers EKS Auto Mode: GPU fees cut 35% (G-series), 60% (P-series) July 2026 ECS Managed: Same GPU fee reductions as EKS Auto Mode EMR Serverless: 2x worker limits (32 vCPUs, 244GB memory) EC2: Replace root volume directly from EBS, no snapshot needed AI/ML SageMaker Studio: One-click Hugging Face model import SageMaker HyperPod: Disaggregated prefill/decode for LLM inference SageMaker HyperPod: AMI-based Slurm config, deep health checks SageMaker Unified Studio: MWAA integration, 19 new workflow operators SageMaker Unified Studio: OpenLineage data lineage for IAM domains SageMaker Unified Studio: Custom asset cataloging (any format) SageMaker Feature Store: Batch ops for high-throughput ingestion Neuron 2.31: MX FP8, UltraServer Operator, 14 new kernels RDS Oracle 26ai: Bedrock integration, AI Vector Search, Select AI Data & Analytics Aurora DSQL: CDC streaming to Kinesis Data Streams Redshift: Graviton R8g, 2.4x faster, 30% cheaper MSK Replicator: External Kafka to MSK Standard brokers Management & DevTools Systems Manager: Azure VM management without agent install CloudWatch App Signals: Auto exception snapshots, latency anomalies Config: 191 new managed rules (Bedrock, SageMaker, EKS, etc.) AWS MCP Server: OAuth support, DMS Schema Conversion integration EMR on EKS: AI Spark troubleshooting agent Builder Center: Free 8-hour sandbox environments AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  4. Jul 6

    AWS News Jun 29 - Jul 05

    This week: EC2 C9g instances debut with fifth-gen Graviton delivering 25% better performance, Claude Sonnet 5 arrives on Bedrock with superior coding and agentic capabilities, and CloudFormation express mode cuts deployments by up to 4x. Plus OpenSearch gets a purpose-built log analytics engine with 4x better price-performance, and ECS adds zone-aware routing to cut cross-AZ costs. Compute EC2 C9g/C9gd: Graviton 5, 25% faster than G4, 35% faster ML inference EC2 Dedicated Hosts: AMD SEV-SNP confidential computing support EC2 Auto Scaling: Reservations-then-balanced strategy for capacity reservations Time Sync: Microsecond accuracy on 26 more instance types AI/ML Claude Sonnet 5: On Bedrock, better multi-file code changes, fewer corrections Bedrock AgentCore: 5K concurrent sessions, 200 interactions/sec default quotas Bedrock AgentCore Gateway: WAF integration for agent protection SageMaker: Serverless fine-tuning for Gemma 4 models (4B, 31B) SageMaker Inference: Auto image caching, 50% faster cold starts SageMaker HyperPod: Auto security patching, AMI version visibility Security Hub: 31 AI security controls for Bedrock/SageMaker GovCloud: GPT-5.4 (272K context), Nemotron 3 Super on Bedrock Containers EKS: Minor version rollback within 7 days ECS Express Mode: Custom task definitions supported ECS: Zone-aware Service Connect routing, deployment timeline UI ECS: Configurable circuit breaker thresholds Network Firewall: Native container rules (namespace, labels) Storage & Data S3 Logs: Direct to CloudWatch Logs and S3 Tables (Iceberg) OpenSearch: Log analytics engine, 4x price-performance, 70% less storage Neptune: Dual-stack IPv4/IPv6 support Operations CloudFormation: Pre-deployment validation in seconds CloudFormation Express: 4x faster deploys (CloudFront in seconds) CloudWatch Logs: Auto tag enrichment, query-based alarms CloudWatch Pipelines: OpenTelemetry metric transformations Security GuardDuty: File modification detection on EC2/EKS/ECS IAM Identity Center: Programmatic account access for apps RDS: Dynamic IAM auth scaling, no connection limits Networking Interconnect Last Mile: Preview with AT&T, automated branch connectivity AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  5. Jun 29

    AWS News Jun 22 - Jun 28

    This week: Lambda MicroVMs bring VM-level isolation to serverless for running untrusted code, GuardDuty adds AI-powered investigations to help distinguish real threats from false positives, and CloudWatch Logs now accepts syslog directly from network devices without agents. Plus Outposts gets full lifecycle management in the console and new OpenAI models hit Bedrock in GovCloud. Compute & Infrastructure Lambda MicroVMs: VM-level isolation for user/AI code, 8hr state, dedicated HTTPS endpoint EC2 AMI Watermarks: Custom watermarks persist through copies, track provenance SageMaker G7e: 8x RTX PRO 6000 Blackwell GPUs, 96GB each for LLM/agentic AI SageMaker G6e: 8x L40S GPUs, 2.5x better than G5, 13B param LLMs EMR Serverless: Update app configs without stopping running jobs AI & Machine Learning Bedrock GovCloud: OpenAI GPT, NVIDIA Nemotron models, FedRAMP High/IL4-5 Bedrock Guardrails: Auto-refine policies via iterative improvement workflows Bedrock AgentCore: Cross-account memory access via resource-based policies GuardDuty AI Investigations: 90-day analysis, MITRE ATT&CK mapping, confidence scoring Kiro GovCloud: FedRAMP High/IL4-5 for agentic AI development MSK AI Agent Skills: Expert guidance for troubleshooting, sizing, migrations Networking & Security CloudWatch Logs: Direct syslog ingestion via VPC endpoint, auto-parsing Network Firewall: Safer default drop action, VisionHeight managed rules Route 53 Global Resolver: Share DNS views cross-account via RAM Cognito: Customer-managed KMS keys for user pool encryption Data & Analytics S3 Backup: 8x faster cross-account/region copies via change tracking Neptune: CloudFormation support for global databases OpenSearch: AI-assisted migrations from Solr/Elasticsearch MSK Replicator: mTLS auth for external Kafka migrations Operations & Management CloudWatch Container Insights: OTel-based metrics every 30s for EKS CloudWatch Dashboards: Tagging support, ABAC via IAM IAM Identity Center: Separate quotas for accounts (7K) and apps (7K) Outposts: Full lifecycle management via console/CLI/API Other Updates HealthOmics: Nextflow profiles, ephemeral storage up to 3TB Connect: Agentic CX designer preview, Live Sync for guided experiences Batch: Instance priority control with new allocation strategies Swift IoT SDK: Native Apple/Linux support with TLS 1.3 AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  6. Jun 22

    AWS News Jun 15 - Jun 21

    This week: AWS launches Continuum for autonomous security vulnerability management, Bedrock AgentCore reaches GA with built-in guardrails and optimization tools, and S3 Vectors slashes query costs by up to 80%. Plus WAF introduces AI bot monetization, CloudWatch adds cross-account metrics replication, and new Graviton 5-powered M9g database instances deliver 30% better performance. Compute EC2 G7: GA, NVIDIA RTX PRO 6000 Blackwell, 4.6x better AI inference vs G6 RDS: M9g instances (Graviton 5), 30% better perf, up to 192 vCPU RDS X2m: Memory-optimized SQL Server, 50%+ licensing savings, 4TB RAM Outposts: bmn-cx3a bare-metal, AMD EPYC + 800Gbps networking ECS: Auto scaling 4x faster with 20-second metric resolution Storage & Data S3 Vectors: 80% lower query costs for 10M+ vectors, 10K results/query (100x increase) S3 Annotations: Up to 1GB JSON/XML/YAML metadata per object RDS SQL Server: GP3 volumes to 64TiB, 80K IOPS, 2000MB/s (4-5x increase) AI/ML Bedrock AgentCore: GA - harness, memory, web search, guardrails integration Bedrock Managed Knowledge Base: GA, 6 connectors, hybrid search Bedrock Guardrails: InvokeGuardrailChecks API, Automated Reasoning in Sydney Glue Catalog: AI-enriched tables with glossary terms, semantic search API Security AWS Continuum: Security Agent with simulated exploit validation Security Agent: AI threat modeling (STRIDE), IDE integration WAF: Traffic monetization for AI bots via x402 protocol Route 53: Palo Alto DNS Security integration (preview) Console Sign-in: Resource-based policies for network restrictions Observability CloudWatch: Cross-account metric replication, OpenTelemetry support, Query Studio GA CloudWatch Log Analytics: Unified Insights/Live Tail/Contributor console CloudWatch Synthetics: Multi-region canaries from single config Developer Tools Blocks: Open-source TypeScript framework, local-to-prod with zero changes DevOps Agent: Custom SRE agents, headless mode, release management (preview) Transform: Continuous modernization, mainframe workflows, Bedrock migration assessment Database Aurora/RDS MySQL: Extended support through June 2029 Oracle DB@AWS: Autonomous AI Database Serverless on Exadata AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  7. Jun 15

    AWS News Jun 08 - Jun 14

    This week: New Graviton5-powered M9g instances deliver 25% better compute with mathematically proven workload isolation, Claude Fable 5 brings autonomous AI agents to Bedrock, and Amazon Q now explains your cost anomalies and spending patterns in plain language. Plus Lambda Managed Instances hit most regions, CloudWatch Logs gets 23 new query commands, and VPC Flow Logs now captures resource tags directly. Analytics & Data Redshift: Snapshot billing now based on unique blocks, not total size Aurora DSequel: JSONB support with default compression DocumentDB 5.0.1: New aggregation operators, command-level CloudWatch metrics Aurora PostgreSQL 18.3: B-tree skip scans, parallel large transaction replication OpenSearch: MCP Apps for AI agents to query logs/traces/metrics Compute EC2 M9g/M9gd: Graviton5, 25% better performance, first Nitro Isolation Engine EC2 M8i/R8i: Bare metal sizes with 600Gbps network, 300Gbps EBS Lambda Managed Instances: EC2 pricing models for steady-state workloads ECS Managed Daemons: Inter-task visibility via pid/ipc mode settings AI/ML Bedrock: Claude Fable 5 (Mythos-class), Gemma 4 family (3 variants, 256K context) SageMaker: Serverless fine-tuning for Nemotron 3 Nano (30B params) EMR Serverless: Spark Connect interactive sessions QuickSight: Snowflake Cortex AI integration via MCP Cost & Observtic Cost Anomaly Detection: Amazon Q explains spending with CloudTrail correlation Cost Explorer: Q Developer integration for one-click spend analysis Compute Optimizer: Idle detection for 6 more services (DynamoDB, ElastiCache, etc.) Savings Plans Analyzer: Set coverage targets, compare scenarios CUR 2.0: Update table configs without recreating exports Observability CloudWatch Logs Insights: 23 new commands (hash, CSV/XML parsing, histograms) VPC Flow Logs: EC2 tags and next-hop metadata captured directly Application Signals: Health-ranked service maps, infra/logs/traces tabs Prometheus: Native histograms, out-of-order sample ingestion Migration & Management Application Migration Service: Renamed to Transform MGN Lake Formation: S3 file access using table permissions Workload Credentials Provider: Open source cert/secrets automation MWAA Serverless: EventBridge events for workflow state changes AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

  8. Jun 8

    AWS News Jun 01 - Jun 07

    This week: OpenAI's GPT 5.5 and Codex land on Amazon Bedrock with full pricing parity, Cognito adds multi-region replication for resilient authentication, and ECS on Fargate scales up to 32 vCPUs for demanding workloads. Plus Bedrock AgentCore gets interactive terminal access for debugging AI agents, and the AWS MCP Server now supports multi-account workflows in a single session. Email & Messaging SES: Per-tenant suppression lists for bounce/complaint isolation AI/ML - Bedrock Bedrock: OpenAI GPT-5.5, GPT-5.4, Codex now GA Bedrock: CloudWatch metrics for OpenAI/Anthropic endpoints Bedrock: GPT-5.4 in GovCloud US West Bedrock AgentCore: BYOS from Secrets Manager with custom KMS/rotation Bedrock AgentCore: Interactive terminal access to agent sessions Bedrock Console: Redesigned with unified catalog, project-aware docs AI/ML - SageMaker HyperPod: EFA-only interfaces (no IP consumption for large clusters) HyperPod: AI coding assistant troubleshooting (Claude Code, Cursor, Kiro) Unified Studio: Custom IAM permissions boundaries for SCP compliance Unified Studio: 12 languages, quick setup under 20 seconds Unified Studio: Schedule notebook runs with AI troubleshooting Data Agent: Conversation history, Catalog business context integration SageMaker AI: Multi-turn RL for agentic fine-tuning (serverless) Compute & Containers ECS: Trainium/Inferentia support for Managed Instances ECS Fargate: 32 vCPU tasks with up to 244GB memory EKS: Kubernetes 1.36 (User Namespaces GA, in-place vertical scaling) EKS: CloudWatch Vended Logs for managed controllers PCS: Deep Learning AMI on Ubuntu 24.04 with NVIDIA/EFA/Lustre Networking & Storage Direct Connect: Per-VIF bandwidth limits (50Mbps-1.6Tbps) ElastiCache Valkey: Sync/async durability for data persistence Database RDS SQL Server: Bring Your Own Media for license mobility RDS DB2: Version 12.1 with free Community Edition Keyspaces: CDC iterator position for adaptive polling Analytics & BI QuickSight: Private VPC-hosted MCP server connections Q Research: Customer-managed KMS encryption CUR 2.0: Direct Athena/Redshift integration, no ETL AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

About

Weekly Summaries of all AWS News and Releases