Links:

• AWS Certificate Manager now supports native certificate search
• Amazon S3 Lifecycle pauses actions on objects that are unable to replicate
• Amazon Bedrock now offers Claude Mythos Preview (Gated Research Preview)
• Amazon OpenSearch Serverless now supports Zstandard (zstd) codec for index compression
• AWS Secrets Manager console now supports custom input for AWS KMS keys
• Amazon Bedrock now supports cost allocation by IAM user and role
• Amazon S3 starts rolling out new security best practice to new and existing buckets by default
• Introducing AI-Powered Cost Analysis in AWS Cost Explorer
• Launching S3 Files, making S3 buckets accessible as file systems
• The future of managing agents at scale: AWS Agent Registry now in preview
• Understanding Amazon Bedrock model lifecycle
• Introducing OpenTelemetry & PromQL support in Amazon CloudWatch

Links: 

• Announcing Amazon RDS for Oracle on AWS Outposts
• AWS Direct Connect now supports AWS CloudFormation
• AWS Service Availability Updates
• Amazon S3 Vectors expands to 17 additional AWS Regions
• Amazon CloudFront now supports SHA-256 for signed URLs and signed cookies
• Amazon CloudWatch now supports OpenTelemetry metrics in public preview
• Announcing compute-optimized instance bundles for Amazon Lightsail
• Announcing managed daemon support for Amazon ECS Managed Instances
• Leverage Agentic AI for Autonomous Incident Response with AWS DevOps Agent
• Navigating the NGINX Ingress retirement: A practical guide to migration on AWS
• Optimizing data transfer costs when using AWS Network Load Balancer
• AWS Security Agent on-demand penetration testing now generally available
  
  

Links:

• Amazon Aurora PostgreSQL now available with the AWS Free Tier
• Amazon EKS announces 99.99% Service Level Agreement and new 8XL scaling tier for Provisioned Control Plane clusters
• AWS Lambda increases the file descriptor limit to 4,096 for functions running on Lambda Managed Instances
• The AWS Advanced JDBC Wrapper now supports automatic query caching with Valkey
• Announcing Amazon Aurora PostgreSQL serverless database creation in seconds
• Enhancing auto scaling resilience by tracking worker utilization metrics
• Amazon CloudFront flat-rate pricing plans: new features and expanded capabilities
• IAM policy types: How and when to use them
• Preparing for agentic AI: A financial services approach

Links:

• Amazon Corretto 26 is now generally available
• Amazon SimpleDB now supports exporting domain data to Amazon S3
• AWS CDK Mixins is now generally available
• AWS Lambda Managed Instances now supports Rust
• Amazon CloudWatch Logs now supports log ingestion using HTTP-based protocol
• AWS Lambda now supports Availability Zone metadata
• Expanding the BOX Program to Business Consulting and Advisory Partners
• Twenty years of Amazon S3 and building what’s next
• Synchronizing a Backup on-premises Db2 Server with Amazon RDS for Db2
• AWS and NVIDIA deepen strategic collaboration to accelerate AI from pilot to production
• Migrate from Amazon Nova 1 to Amazon Nova 2 on Amazon Bedrock
• Essential security controls to prevent unauthorized account removal in AWS Organizations
• Demystifying Amazon VPC peering charges
• AWS and Others Invest $12.5M to Defend the Open Source Ecosystem from AI Threats
• Amazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls
• 20 years of Amazon S3: A storage professional’s journey to AWS Hero
• CVE-2026-4270 - AWS API MCP File Access Restriction Bypass
• CVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit
• Arbitrary code execution via crafted project files in Kiro IDE
• CVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error

Links:

• Amazon CloudWatch Logs announces increased query concurrency and API limits
• Introducing Amazon Connect Health, Agentic AI Built for Healthcare
• Amazon Route 53 Global Resolver is now generally available
• AWS simplifies IAM role creation and setup in service workflows
• Database Savings Plans now supports Amazon OpenSearch Service and Amazon Neptune Analytics
• AWS Elastic Beanstalk now offers AI-powered environment analysis
• AWS Elastic Beanstalk launches Deployments tab with in-progress deployment logs
• Multi-party approval now supports approval team baselining
• AWS announces pricing for VPC Encryption Controls
• The Hidden Price Tag: Uncovering Hidden Costs in Cloud Architectures with the AWS Well-Architected Framework

Links:

• Amazon Aurora DSQL launches Playground for interactive database exploration
•  Amazon Redshift Serverless introduces 3-year Serverless Reservations
• Amazon S3 now provides AWS source region information in server access logs
•  AWS Compute Optimizer now applies AWS-generated tags to EBS snapshots created during automation
• AWS Lambda Durable Execution SDK for Java now available in Developer Preview
• AWS Trusted Advisor now delivers more accurate unused NAT Gateway checks powered by AWS Compute Optimizer
• 6,000 AWS accounts, three people, one platform: Lessons learned
• Petabyte-Scale Cost Optimization: How a Video Hosting Platform Saved 70% on S3
• Transform live video for mobile audiences with AWS Elemental Inference
•  Migrate Amazon EC2 to ECS Express Mode using Kiro CLI and MCP servers
•  AI-augmented threat actor accesses FortiGate devices at scale
• AWS posts “correct the record” piece on AI bot outage

Links:

• Amazon Bedrock expands support for AWS PrivateLink
• AWS CloudWatch Alarm Mute Rules eliminate alert fatigue
• Amazon EC2 supports nested virtualization on virtual Amazon EC2 instances
• Announcing Amazon DocumentDB long-term support (LTS) on 5.0
• AWS Certificate Manager updates default certificate validity to comply with new guidelines
• Claude Sonnet 4.6 now available in Amazon Bedrock
• Kiro is now available in AWS GovCloud (US) Regions
• Amazon EC2 Hpc8a Instances powered by 5th Gen AMD EPYC processors are now available
• Introducing VPC encryption controls: Enforce encryption in transit within and across VPCs in a Region
• Migrating from AWS App Runner to Amazon ECS Express Mode
• Introducing Agent Plugins for AWS
• Build unified intelligence with Amazon Bedrock AgentCore
• Reduce unexpected AWS costs: Tracing AWS billing charges with log correlation techniques

Links:

• Amazon Aurora DSQL is now available in additional AWS Regions
• Amazon Bedrock adds support for six fully-managed open weights models
• AWS Config now supports 30 new resource types
• Announcing new Amazon EC2 general purpose M8azn instances
• AWS Network Firewall announces new price reductions
• Amazon S3 Tables add partition and sort order definition in the CreateTable API
• Amazon Athena adds 1-minute reservations and new capacity control features
• Building fault-tolerant applications with AWS Lambda durable functions
•  Simplify cross-account stream processing with AWS Lambda and Amazon DynamoDB
• Automated Reasoning checks rewriting chatbot reference implementation
• Mastering Amazon Bedrock throttling and service availability: A comprehensive guide
• Reservoir computing on an analog Rydberg-atom quantum computer

Links:

• Change the server-side encryption type of Amazon S3 objects
• Announcing memory-optimized instance bundles for Amazon Lightsail
• Amazon RDS now provides an enhanced console experience to connect to a database
• AWS Multi-party approval now requires one-time password verification for voting
• AWS Management Console now displays Account Name on the Navigation bar
• Structured outputs now available in Amazon Bedrock
• Amazon EC2 C8id, M8id, and R8id instances with up to 22.8 TB local NVMe storage are generally available
•  AWS IAM Identity Center now supports multi-Region replication for AWS account access and application use
• Trigger AWS Lambda functions from Amazon RDS for SQL Server database events
• Amazon CloudFront now supports mTLS authentication to origins
• Bevar Ukraine: Empowering Ukrainian refugees with AI-powered support on AWS
• Security Findings in SageMaker Python SDK

Links:

• AWS Network Firewall now supports GenAI traffic visibility and enforcement with Web category-based filtering
• More room to build: serverless services now support payloads up to 1 MB
• Introducing pre-warming for Amazon Keyspaces tables
• Managing IP address exhaustion for Amazon RDS Proxy
• Strategies for upgrading Amazon Aurora PostgreSQL and Amazon RDS for PostgreSQL from version 13
• File integrity monitoring with AWS Systems Manager and Amazon Security Lake

Links:

• AWS on Customer Choice & Multicloud
• AWS Adds Policy Details to Access Denied Errors
• Amazon ECR Cross-Repository Layer Sharing
• Amazon RDS Blue/Green Deployments (<5s downtime)
• S3 Storage Lens Now in GovCloud (US)
• Enterprise-Scale Migration to Apache Iceberg
• Kafka-Based Oracle LOB Migration to AWS
• Aurora PostgreSQL Shared Plan Cache

Links:

• Unanchored ACCOUNT_ID webhook filters for CodeBuild
• Amazon EBS now supports up to four Elastic Volumes modifications in 24 hours
• AWS Databases are now available on v0 by Vercel
• AWS Lambda announces cross-account access for DynamoDB Streams
• Enhanced Transactions view now available in AWS Billing Console
• AWS Data Exports adds granular operation visibility for Amazon Bedrock model usage
• Amazon EC2 X8i instances powered by custom Intel Xeon 6 processors are generally available
• Opening the AWS European Sovereign Cloud
• AWS Organizations now supports upgrade rollout policy for Aurora and RDS
• Provision Oracle Database@AWS stack using AWS CloudFormation
• CLI v1 Maintenance Mode Announcement
• CVE-2026-0830: Command Injection in Kiro GitLab Merge Request Helper

Links:

• Automate java performance troubleshooting with AI-Powered thread dump analysis on Amazon ECS and EKS
• Amazon Threat Intelligence identifies Russian cyber threat group targeting Western critical infrastructure
• Optimize WordPress performance on Amazon EKS with Amazon FSx for OpenZFS
• AWS reduces publishing time for Carbon Footprint Data to 21 days or Less
• AWS Payment Cryptography reduces API pricing by up to 63% and introduces tiered key pricing
• Key Commitment Issues in S3 Encryption Clients
• Coursera and AWS survey reveals how technology leaders navigate cloud and AI transformation
• Automated extraction of compressed files on Amazon S3 using AWS Batch and Amazon ECS
• Cryptomining campaign targeting Amazon EC2 and Amazon ECS

Links:

• Exploring the new AWS European Sovereign Cloud: Sovereign Reference Framework
• Now generally available: Amazon EC2 C8gb instances
• Amazon CloudWatch SDK supports optimized JSON, CBOR protocols
• Building national foundation models
• New report: Cloud “fundamental” for European national security and defense
• AI Increased Productivity? Consider Hiring More Developers!
• IAM Policy Autopilot: An open-source tool that brings IAM policy expertise to builders and AI coding assistants
• AWS and Google Cloud collaborate to simplify multicloud networking
• Exploring Optimize CPU feature on Amazon RDS for SQL Server
• Prometheus MCP Server: AI-Driven Monitoring Intelligence for AWS Users

Links:

• Introducing Amazon Route 53 Global Resolver for secure anycast DNS resolution (preview)
• Introducing AWS Lambda Managed Instances: Serverless simplicity with EC2 flexibility
• AWS announces preview of AWS Interconnect - multicloud
• Introducing AWS Transform custom: Crush tech debt with AI-powered code modernization
• Amazon CloudWatch introduces unified data management and analytics for operations, security, and compliance
• Amazon EC2 P6e-GB300 UltraServers accelerated by NVIDIA GB300 NVL72 are now generally available
• Introducing AWS AI Factories
• Introducing AWS DevOps Agent (preview), frontier agent for operational excellence
• Amazon S3 Storage Lens adds performance metrics, support for billions of prefixes, and export to S3 Tables
• Build multi-step applications and AI workflows with AWS Lambda durable functions
• Amazon S3 increases the maximum object size to 50 TB
• Amazon S3 Tables now offer the Intelligent-Tiering storage class
• China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)
• Introducing Database Savings Plans for AWS Databases

Links:

• Protect sensitive data with dynamic data masking for Amazon Aurora PostgreSQL
• Amazon CloudFront announces support for mutual TLS authentication
• Amazon EC2 announces interruptible Capacity Reservations
• Introducing guidelines for network scanning
• Practical implementation considerations to close the AI value gap
• Everything you don’t need to know about Amazon Aurora DSQL: Part 4 – DSQL components
• Simplify data integration using zero-ETL from self-managed databases to Amazon Redshift
• Automatic quota management is now AWS Service Quotas adds support for automatic quota management
• Announcing Amazon Route 53 Accelerated Recovery for managing public DNS records
• Announcing Unused NAT Gateway Recommendations in AWS Compute Optimizer
• Amazon EKS introduces Provisioned Control Plane
• AWS Finally Lets You Find Your Idle NAT Gateways

Links:

• Announcing agreement EventBridge notifications for AWS Marketplace
• Network Load Balancers now support Weighted Target Groups
• AWS NAT Gateway now supports regional availability
• AWS Secrets Manager announces managed external secrets
• Accelerate infrastructure development with AWS CloudFormation intelligent authoring in IDEs
• AWS Cost Optimization Hub introduces Cost Efficiency metric to measure and track cloud cost efficiency
• AWS Lambda announces new tenant isolation mode to simplify building tenant-aware applications
• Introducing 18-Month Forecasting and Explainable AI Insights in AWS Cost Explorer
• Simplified developer access to AWS with ‘aws login
• Amazon DynamoDB now supports multi-attribute composite keys in global secondary indexes
• Simplify access to external services using AWS IAM Outbound Identity Federation
• Improve API discoverability with the new Amazon API Gateway Portal
• AWS Step Functions enhances Local Testing with TestState API
• Amazon CloudFront announces 3 new CloudFront Functions capabilities
• Recycle Bin adds support for Amazon EBS Volumes
• Announcing Amazon DocumentDB (with MongoDB compatibility) version 8.0
• AWS Lambda adds support for Rust
• Introducing Amazon MWAA Serverless
• Introducing flat-rate pricing plans with no overages
• New Amazon Bedrock service tiers help you match AI workload performance with cost
• Amazon EC2 P6-B300 instances with NVIDIA Blackwell Ultra GPUs are now available
• Amazon ECR introduces archive storage class for rarely accessed container images
• New AWS Billing Transfer for centrally managing AWS billing and costs across multiple organizations

Links:

• Custom domain names for VPC Lattice resources
• AWS Lambda networking over IPv6
• AWS Control Tower supports automatic enrollment of accounts
• Amazon Braket Notebook Environments Now Support CUDA-Q Natively
• Amazon MSK Express brokers now support Intelligent Rebalancing for 180 times faster operation performance
• Amazon Keyspaces now supports logged batches for atomic, multi-statement operations
• Amazon CloudWatch Composite Alarms adds threshold-based alerting
• Amazon Keyspaces (for Apache Cassandra) now supports Logged Batches
• Amazon Elastic Kubernetes Service gets independent affirmation of its zero operator access design
• AWS Fault Injection Service (FIS) launches new test scenarios for partial failures
• AWS CloudFormation Hooks adds granular invocation details for Hooks invocation summary
• Introducing structured output for Custom Model Import in Amazon Bedrock

Links:

• AWS PrivateLink now supports cross-region connectivity for AWS Services
• AWS announces new partnership to power OpenAI's AI workloads
• Prompt engineering with PartyRock: A guide for educators 
• New whitepaper available – AI for Security and Security for AI: Navigating Opportunities and Challenges
• From Business Logic to Working Code: How AWS Kiro Changes Who Can Build
• CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 - runc container issues 
• Amazon CloudWatch Application Signals adds AI-powered Synthetics debugging
• Inside Amazon Connect: The evolution of a disruptor
• How Indeed scaled Governance across 1,000+ AWS accounts with AWS Trusted Advisor 
• Improper authentication token handling in the Amazon WorkSpaces client for Linux
• How Omnissa saved millions by migrating to Amazon RDS and Amazon EC2
• The Swift AWS Lambda Runtime moves to AWSLabs
• CVE-2025-12815 - RES web portal may display preview of Virtual Desktops that the user shouldn't have access to

Links:

• Beyond pilots: A proven framework for scaling AI to production
• New Amazon CloudWatch metrics to monitor EC2 instances exceeding I/O performance
• Processing Amazon S3 objects at scale with AWS Step Functions Distributed Map S3 prefix
• What’s the difference between AWS ParallelCluster and AWS Parallel Computing Service?
• France Télévisions prepared for 2024 Olympic Games with AWS Countdown Premium
• Amazon Kinesis Data Streams now supports 10x larger record sizes
• Amazon DocumentDB (with MongoDB compatibility) announces upgraded query planner that can run queries up to 10x faster
• Announcing AWS X-Ray SDKs/Daemon End-of-Support and OpenTelemetry Migration
• Amazon S3 adds conditional write functionality to copy operations
• Introducing the Capacity Reservation Topology API for AI, ML, and HPC instance types
• How to deploy a SQL Server Failover Cluster Instance across three Availability Zones using Storage Spaces Direct 
• Reduce CAPTCHAs for AI agents browsing the web with Web Bot Auth (Preview) in Amazon Bedrock AgentCore Browser
• Using Kubernetes Labels to Split and Track Application Costs on Amazon EKS
• Introducing AWS Lambda event source mapping tools in the AWS Serverless MCP Server 
• Split Cost Allocation Data for Amazon EKS supports Kubernetes labels

Links:

• Streamline in-place application upgrades with Amazon VPC Lattice
• Build a proactive AI cost management system for Amazon Bedrock – Part 2 -
• Overview and best practices of multithreaded replication in Amazon RDS for MySQL, Amazon RDS for MariaDB, and Amazon Aurora MySQL 
• AWS announces Nitro Enclaves are now available in all AWS Regions
• Amazon CloudWatch Synthetics now supports bundled multi-check canaries 
• Amazon U7i instances now available in Europe (London) Region
• Amazon Connect now supports automated follow-up evaluations triggered by initial evaluation results
• How the Wildlife Conservation Society uses AWS to accelerate coral reef monitoring worldwide
• Amazon MQ is now available in AWS Asia Pacific (New Zealand) Region 
• Amazon CloudWatch introduces interactive incident reporting
• AWS Secret-West Region is now available
• Charting the life of an Amazon CloudFront request

Links:

• Amazon Location Service Introduces New Map Styling Features for Enhanced Customization
• AWS Resource Explorer launches immediate resource discovery within a Region 
• AWS SAM CLI adds Finch support, expanding local development tool options for serverless applications
• Simplified model access in Amazon Bedrock
• Amazon EC2 now supports CPU options optimization for license-included instances
• Introducing Amazon EBS Volume Clones: Create instant copies of your EBS volumes
• Optimizing document AI and structured outputs by fine-tuning Amazon Nova Models and on-demand inference
• Introducing URL and host header rewrite with AWS Application Load Balancers
• New Amazon EKS Auto Mode features for enhanced security, network control, and performance
• Monitor, analyze, and manage capacity usage from a single interface with Amazon EC2 Capacity Manager
• Performance optimization strategies for MySQL on Amazon RDS
• AWS re:Invent 2025: Reimagining customer experience with Amazon
• AWS Deprecates Two Dozen Services (Most of Which You’ve Never Heard Of)
• A FinOps Guide to Comparing Containers and Serverless Functions for Compute
• Announcing vector search for Amazon ElastiCache
• AWS Post-Event Summaries

Links:

• Introducing AWS Pricing Capabilities in Amazon Q Developer: Ask Questions, Get Instant Cost Insights
• Amazon Location Service Updates for Vietnam's New Administrative Boundaries
• Part 6: Effective sunset of the legacy data platform in BBVA: the migration methodology 
• Amazon Q Developer and Kiro – Prompt Injection Issues in Kiro and Q IDE plugins 
• Amazon DynamoDB now supports Internet Protocol version 6 (IPv6)
• AWS ranks #1 in Forecasting and Estimation Use Case in Gartner Critical Capabilities for Cloud Financial Management Tools report 
• Introducing Amazon Quick Suite: your agentic AI-powered workspace
• Unlock real-time advertising insights with Amazon Marketing Stream and AWS
• IMDS impersonation
• Reduce Docker image build time on AWS CodeBuild using Amazon ECR as a remote cache
• Understanding Amazon Chime SDK costs in AWS Cost Explorer
• AWS Introduces self-service invoice correction feature
• Bridging data silos: cross-bounded context querying with Vanguard’s Operational Read-only Data Store (ORDS) using Amazon Redshift 
• Beyond Bootstrap: Bootstrapless CDK Deployments at GoDaddy
• Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.34
• Amazon SageMaker notebook instance now supports Amazon Linux 2023
• Your Ultimate Guide to Cloud Financial Management sessions at re:Invent 2025: Know Before You Go 
• Automatic quota management is now generally available for AWS Service Quotas 
• CVE-2025-11462 AWS ClientVPN macOS Client Local Privilege Escalation
• CVE-2025-11573 - Denial of Service issue in Amazon.IonDotnet

Links:

• Deploying AI models for inference with AWS Lambda using zip packaging
• Announcing Amazon ECS Managed Instances 
• Amazon EBS increases the maximum size and provisioned performance of General Purpose (gp3) volumes 
• Accelerating AWS Infrastructure Deployment: A Practical Guide to Console-to-Code 
• AWS Builder ID now supports Sign in with Google 
• Build a dynamic workflow orchestration engine with Amazon DynamoDB and AWS Lambda
• AWS Transfer Family adds support for additional IAM condition keys 
• AWS Compute Optimizer now supports 99 new Amazon EC2 instance types

Links:

• You can now preview Amazon S3 Tables in the S3 console
• AWS Organizations supports full IAM policy language for service control policies (SCPs)
• Amazon Route 53 Resolver Query Logging now available in Asia Pacific (New Zealand)
• A guide to reducing waste and improving efficiency with AWS
• Amazon RDS announces cross-Region and cross-account snapshot copy
• AWS announces EC2 instance attestation
• Humane World for Animals uses AWS to scale global animal welfare programs
•  deprecating its SOAP API
• Prompt Library | AWS Startups
• AWS named as a Leader in the 2025 Gartner Magic Quadrant for AI Code Assistants

Links:

• Qwen models are now available in Amazon Bedrock
• AWS Budgets now supports custom time periods
• Amazon CloudWatch launches Cross-Account and Cross-Region Log Centralization
• Amazon S3 now supports conditional deletes in S3 general purpose buckets
• New fault action in AWS FIS to inject I/O latency on Amazon EBS volumes
• AWS has once again announced a change (in this case, changing the email address from which invoices show up), only to walk it back prior to implementation.
• Use Raspberry Pi 5 as Amazon EKS Hybrid Nodes for edge workloads
• Malware Protection for S3 Expands File Size and Archive Scanning Limits
• AWS named as a Leader in 2025 Gartner Magic Quadrant for Cloud-Native Application Platforms and Container Management
• Migrate from Anthropic’s Claude 3.5 Sonnet to Claude 4 Sonnet on Amazon Bedrock

Links:

• Enforcing organization-wide Amazon S3 bucket-tagging policies
• ECS Exec is now available in the AWS Management Console
• AWS Control Tower now supports Internet Protocol Version 6 (IPv6)
• Introducing AWS CDK Refactor (Preview)
• Accelerate serverless testing with LocalStack integration in VS Code IDE
• AWS WAF now includes free WAF Vended Logs based on request volume
• AWS recognized as a Leader in the 2025 Gartner Magic Quadrant for Contact Center as a Service (CCaaS) with Amazon Connect
• Introducing universal installers for AWS CLI v2 on macOS

Links:

• Amazon disrupts watering hole campaign by Russia’s APT29
• AWS IAM launches new VPC endpoint condition keys for network perimeter controls
• RDS Data API now supports IPv6
• Now Open — AWS Asia Pacific (New Zealand) Region
• AWS Resource Explorer is now available in AWS Asia Pacific (Taipei) Region
• Protect your Amazon Route 53 DNS zones and records 
• Efficiently verify Amazon S3 data at scale with compute checksum operation
• AWS Elemental celebrates 10 years of innovation
• Choosing the right AWS live streaming solution for your use case

Links:

• How Ancestry optimizes a 100-billion-row Iceberg table
• Mastering Amazon Q Developer with Rules 
• Bob’s Used Books: Build a .NET Serverless Application on AWS – Part 2: Architecture
• How Amazon Finance built an AI assistant using Amazon Bedrock and Amazon Kendra to support analysts for data discovery and business insights 
• Building Your Open Source Commercial Strategy with AWS
• How to optimize Amazon RDS and Amazon Aurora database costs/performance with AWS Compute Optimizer
• Gracefully handle failed AWS Lambda events from Amazon DynamoDB Streams
• Announcing the AWS Billing and Cost Management MCP server
• AWS joins the DocumentDB project to build interoperable, open source document database technology
• Count Tokens API supported for Anthropic’s Claude models now in Amazon Bedrock

Links: 

• AWS pricing for Kiro dev tool 'a wallet-wrecking tragedy
• SQL injection vulnerability in the AWS Aurora DSQL MCP Server | by Michael Kandelaars | Aug, 2025 | Medium
• Top AWS chip engineer reportedly defects to Arm
• Copilot Broke Your Audit Log, but Microsoft Won’t Tell You - Pistachio Blog - Cybersecurity Awareness Training
• AWS blames bug for Kiro pricing glitch that drained developer limits | InfoWorld
• Amazon Cloud Chief: Replacing Junior Staff With AI Is 'Dumbest' Idea - Business Insider
• AWS CEO says AI replacing junior staff is 'dumbest idea
• HR giant Workday says hackers stole personal data in recent breach | TechCrunch
• AWS in 2025: The Stuff You Think You Know That’s Now Wrong
•  free senior engineer level code reviews right in your IDE
• Celebrating 10 years of Amazon Aurora innovation
• Vibe code with AWS databases using Vercel v0
• Enhanced throttling observability in Amazon DynamoDB
• Under the hood: how AWS Lambda SnapStart optimizes function startup latency
• AWS Security Incident Response introduces integrations with ITSM
• Amazon Cognito adds terms of use and privacy policy documents support to Managed Login
• AWS Billing and Cost Management now provides customizable Dashboards
• AWS Billing and Cost Management Console adds new recommended actions
• Amazon VPC IPAM adds in-console CloudWatch alarm management
• https://github.com/minimaxir/big-list-of-naughty-strings

Links:

• a billion dollars in savings 
• highlights why I'm wrong
• Demystifying Amazon Bedrock Pricing for a Chatbot Assistant
• Improving Your Visibility to AWS Sales: A Practical Guide for Partners
• Anthropic’s Claude Sonnet 4 in Amazon Bedrock Expanded Context Window
• Amazon EC2 Single GPU P5 instances are now generally available 
• Announcing Extended Support for Amazon DocumentDB (with MongoDB compatibility) version 3.6
• CVE-2025-8904 - Issue with Amazon EMR Secret Agent component
• Amazon DynamoDB now supports more frequent throughput mode updates from provisioned to on-demand capacity 
• Validate radiology reports using Amazon Nova
• Amazon FSx for OpenZFS now supports Internet Protocol Version 6 (IPv6)
• AWS Resource Explorer now Supports Filtering for Multiple Values
• AWS IAM Identity Center introduces support for user background sessions with Amazon SageMaker Studio 
• Amazon FSx for NetApp ONTAP now supports decreasing your SSD storage capacity 
• AWS Security Incident Response now supports membership coverage for individual AWS organizational units
• Understanding AWS Savings Plan Recommendations: Payer vs. Linked Account Views 

Links: 

• AWS Cloud Visibility Best Practices
• This Ars article
• AWS European Sovereign Cloud to be operated by EU citizens
• Amazon killing a user’s account
• Mountpoint for Amazon S3 CSI driver v2: Accelerated performance and improved resource usage for Kubernetes workloads
• Streamlining outbound emails with Amazon SES Mail Manager
• AWS Lambda now supports GitHub Actions to simplify function deployment
• Anthropic’s Claude Opus 4.1 now in Amazon Bedrock
• Amazon CloudWatch introduces organization-wide VPC flow logs enablement
• Understanding and Remediating Cold Starts: An AWS Lambda Perspective
• Amazon SQS increases maximum message payload size to 1 MiB
• OpenAI open weight models now available on AWS 
• Best practices for analyzing AWS Config recording frequencies
• Amazon EKS adds safety control to prevent accidental cluster deletion
• AWS Console Mobile App now offers access to AWS Support
• Amazon EC2 now supports force terminate for EC2 instances 
• Amazon DynamoDB adds support for Console-to-Code
• Using generative AI for building AWS networks
• Simplify network connectivity using Tailscale with Amazon EKS Hybrid Nodes
• Cost tracking multi-tenant model inference on Amazon Bedrock

• Amazon Aurora MySQL database clusters now support up to 256 TiB of storage volume 
• Introducing v2 of Powertools for AWS Lambda (Java)
• Introducing Extended Support for Amazon ElastiCache version 4 and version 5 for Redis OSS
• Amazon DocumentDB Serverless is now available 
• AWS Lambda response streaming now supports 200 MB response payloads
• How Zapier runs isolated tasks on AWS Lambda and upgrades functions at scale
• Amazon Application Recovery Controller now supports Region switch
• Announcing general availability of Amazon EC2 G6f instances with fractional GPUs
• Amazon Promotes Malphas to Senior Vice President of Bad Decisions, Unveils 17th Leadership Principle
• Amazon CloudFront introduces new origin response timeout controls
• Optimize traffic costs of Amazon MSK consumers on Amazon EKS with rack awareness
• Amazon Bedrock now available in the US West (N. California) Region
• New AWS whitepaper: AWS User Guide to Financial Services Regulations and Guidelines in Australia 
• Amazon EC2 Auto Scaling adds AWS Lambda functions as notification targets for lifecycle hooks

Links:

• Launching Amazon CloudWatch generative AI observability (Preview) 
• Amazon CloudWatch adds IPv6 support
• Boost cold-start recommendations with vLLM on AWS Trainium 
• AWS Private CA now supports issuing up to 100 million certificates per CA 
• Amazon Connect announces per-day pricing for external voice connectors 
• Amazon RDS for Db2 adds support for group-based authorization with self-managed Active Directory 
• Manage multi-tenant Amazon Bedrock costs using application inference profiles
• Simplify serverless development with console to IDE and remote debugging for AWS Lambda | AWS News Blog 
• AWS Generative AI for Developers Professional Certificate 
• Simplify AWS Organization Tag Policies using new wildcard statement  
• Security Update for Amazon Q Developer Extension for Visual Studio Code (Version #1.84) 
• Cost Optimization Hub now supports account names in optimization opportunities 
• Year One of Valkey: Open-Source Innovations and ElastiCache version 8.1 for Valkey - 
• go listen to the audio version of this newsletter specifically for this item. 
• AWS Security Incident Response: The customer’s journey to accelerating the incident response lifecycle 
• AWS Service Reference Information now supports actions for last accessed services - 
• Five facts about how the CLOUD Act actually works | AWS Security Blog 
• Bob’s Used Books: Build a .NET Serverless Application on AWS, Part 1: Deployment and Setup 
• Amazon EC2 now supports skipping the operating system shutdown when stopping or terminating instances 
• New whitepaper available: AICPA SOC 2 Compliance Guide on AWS 
• Why 2025 is the Inflection Point for AWS Cloud Migration 
• Beyond IAM access keys: Modern authentication approaches for AWS 
• Introducing SRA Verify – an AWS Security Reference Architecture assessment tool 
• Supercharging Ad Creative with Amazon Bedrock and Amazon Nova: How AI is Revolutionizing Content Generation for Advertising & Marketing Use-Cases
• Building resilient multi-tenant systems with Amazon SQS fair queues 
• How Truth For Life transformed its viewer analytics while optimizing costs

Links:

• Amazon EBS now provides visibility into EBS volume initialization status
• The Amazon S3 console now displays an external access summary for all your buckets
• Amazon S3 Tables reduce compaction costs by up to 90%
• AWS API MCP Server now available 
• AWS Cost Anomaly Detection improves accuracy with model enhancements
• AWS Price List API now supports four new Query Filters
•  Introducing AWS AI League
• Announcing Model Context Protocol (MCP) Server for AWS Price List
• Amazon S3 Metadata now supports metadata for all your S3 objects 
• AWS Free Tier update: New customers can get started and explore AWS with up to $200 in credits
• Introducing Amazon Bedrock AgentCore: Securely deploy and operate AI agents at any scale (preview)
• Introducing Amazon S3 Vectors: First cloud storage with native vector support at scale (preview)
• Under the hood: Amazon EKS ultra scale clusters
• Proven Practices for Succeeding with a Multicloud Strategy
• Accenture scales video analysis with Amazon Nova and Amazon Bedrock Agents
• Coming soon: Exam update and new name for cloud operations certification

Links:

• AWS Direct Connect Layer 1 Explained: From Data Centers to Cloud Connectivity
• Oracle Database@AWS announces general availability, expands networking capabilities
• Amazon Bedrock introduces API keys for streamlined development
• Announcing AWS Builder Center
• Amazon P6e-GB200 UltraServers now available for the highest GPU performance in EC2
• Quantifying the Impact of Developer Experience: Amazon’s 15.9% Breakthrough
• Establishing a European trust service provider for the AWS European Sovereign Cloud
• Use K8sGPT and Amazon Bedrock for simplified Kubernetes cluster maintenance
• Evolve your Amazon DynamoDB table’s data model
• Introducing: Guidance for a media lake on AWS

• Finch expands support to Ubuntu, streamlining container development across platforms
• Amazon CloudFront announces support for HTTPS DNS records
• Amazon Q Business launches the ability to customize responses
• Build the highest resilience apps with multi-Region strong consistency in Amazon DynamoDB global tables
• Leveling up Amazon RDS with AWS Graviton4: Benchmarks
• Build AWS architecture diagrams using Amazon Q CLI and MCP
• Using generative AI to help dog owners make smarter health decisions
• AWS Certificate Manager now supports exporting public certificates
• Remote access to AWS: A guide for hybrid workforces
• How to Use AWS Data Transfer Terminal

Links:

• What is AWS Security Hub?
• Amazon data center complex
• Code reviews in you IDE
• AWS Local Zones Features - AWS 
• Last Week in AWS Slack community
• Amazon VPC raises default Route Table capacity
• Announcing Intelligent Search for re:Post and re:Post Private
• How to Set Up Automated Alerts for Newly Purchased AWS Savings Plans
• Introducing AWS Lambda native support for Avro and Protobuf formatted Apache Kafka events

Links:

• AWS IAM now enforces MFA for root users across all account types
• AWS expands resource control policies (RCPs) support to two additional services
• One Year EC2 Instance Savings Plans are now available for P5 and P5en instances
• AWS Certificate Manager introduces exportable public SSL/TLS certificates to use anywhere
• Verify internal access to critical AWS resources with new IAM Access Analyzer capabilities
• Introducing AWS CDK Community Meetings
• Rapid monitoring of Amazon S3 bucket policy changes in AWS environments
• 1Password’s New Secrets Syncing Integration With AWS | 1Password

Links:

• Amazon EFS is now available in the AWS Asia Pacific (Taipei) region
• Amazon S3 Tables now provide storage cost visibility for individual tables
• AWS Console Mobile Application adds support for CloudWatch Log Insights
• AWS launches public preview of Amazon Elastic VMware Service (Amazon EVS)
• Stream multi-channel audio to Amazon Transcribe using the Web Audio API
• Amazon to launch second Secret Cloud Region in 2025
• CVE-2025-6031 - Insecure device pairing in end-of-life Amazon Cloud Cam
• What To Do When You’re Underwater on Your AWS EDP
• AWS screwed up the What's New at AWS page

Links:

• Amazon EC2 now enables you to delete underlying EBS snapshots when deregistering AMIs
• AWS Compute Optimizer now supports Aurora I/O-Optimized recommendations
• AWS Invoice Summary API is now generally available 
• Optimize Your AWS Spend with New Cost Savings Features in AWS Trusted Advisor 
• Announcing up to 45% price reduction for Amazon EC2 NVIDIA GPU-accelerated instances 
• Now open – AWS Asia Pacific (Taipei) Region
• Upgrade your Amazon DynamoDB global tables to the current version

Links:

• Amazon ECS increases container exit reason message to 1024 characters
• Amazon GameLift Servers SDKs are now on GitHub
• AWS Cost Explorer now offers new Cost Comparison feature
• AWS DataSync simplifies and accelerates cross-cloud data transfers
• AWS Secrets Manager announces support for cost allocation tags for secrets
• CloudTrail Lake now supports event enrichment and expanded event size
• Cost Optimization Hub now supports Savings Plans and reservations preferences
• Amazon Aurora DSQL is now generally available
• Enhance AI-assisted development with Amazon ECS, Amazon EKS and AWS Serverless MCP server
• OpenSearch UI: Six months in review
• 5 steps for building a VMware transition strategy for public sector customers
• Cloud Repatriation is Getting Complicated

Sponsor

The Duckbill Group: https://www.duckbillgroup.com/

Join us for Office Hours!

https://www.duckbillgroup.com/officehours/

Links:

• Amazon Aurora reduces cross-Region Global Database Switchover time to typically under 30 seconds
• Amazon MSK adds support for Apache Kafka version 4.0
• AWS Control Tower releases Enabled controls view for centralized visibility - AWS
• AWS Cost Anomaly Detection enables advanced alerting through AWS User Notifications
• AWS service changes
• DynamoDB local is now accessible on AWS CloudShell
• Join Us at FinOps X 2025: Your Guide to All Things AWS
• Introducing the AWS Product Lifecycle page and AWS service availability updates
• Join AWS Cloud Infrastructure Day to learn cutting-edge innovations building global cloud infrastructure
• How to secure your instances with multi-factor authentication
• Cost Optimization for Healthcare on AWS
• CORS configuration through Amazon CloudFront
• Introducing Strands Agents, an Open Source AI Agents SDK | AWS Open Source Blog
• Andy Jassy’s leadership lesson he practices at work and at home

Links:

• Amazon VPC Reachability Analyzer now supports resource exclusion
• AWS announces new AWS Data Transfer Terminal location in the San Francisco Bay Area
• Accelerate CI/CD pipelines with the new AWS CodeBuild Docker Server capability
• Accelerate the modernization of Mainframe and VMware workloads with AWS Transform
• New Amazon EC2 P6-B200 instances powered by NVIDIA Blackwell GPUs to accelerate AI innovations
• Introducing Amazon Q Developer in Amazon OpenSearch Service
• Amazon CloudWatch Database Insights applied in real scenarios
• Cost-effective AI image generation with PixArt-Σ inference on AWS Trainium and AWS Inferentia
• United Airlines implement enterprise-wide resilience program with AWS
• Bringing more to the table: How Amazon S3 Tables rapidly delivered new capabilities in the first 5 months
• Understanding Amazon S3 client-side encryption options

Sponsor
The Duckbill Group: https://www.duckbillgroup.com/

Join us for Office Hours!
https://www.duckbillgroup.com/officehours/

Links:

• Amazon Connect external voice pricing changes
• AWS Marketplace now supports SaaS products from all deployment locations
• Amazon Q Developer elevates the IDE experience with new agentic coding experience
• Amazon Q Developer in GitHub (in preview) accelerates code generation
• In the works – AWS South America (Chile) Region
• Monitoring network traffic in AWS Lambda functions
• Announcing the end of support for AWS DynamoDB Session State Provider
• WordFinder app: Harnessing generative AI on AWS for aphasia communication
• Accelerating government efficiency with AWS Enterprise Support
• Introducing the AWS Zero Trust Accelerator for Government

Sponsor
The Duckbill Group: https://www.duckbillgroup.com/

Join us for Office Hours!
https://www.duckbillgroup.com/officehours/

Links:

• Automated HTTP validated public certificates with Amazon CloudFront
• AWS Systems Manager launches just-in-time node access
• MAP enhancements to accelerate AI customer adoption
• Announcing SaaS Manager for Amazon CloudFront
• Announcing second-generation AWS Outposts racks
• Amazon CloudWatch launches tiered pricing and additional destinations for AWS Lambda logs
• AWS Launch Wizard automates multi-node SAP NetWeaver deployment on SAP ASE Database
• AWS Lambda standardizes billing for INIT Phase

Sponsor

The Duckbill Group: https://www.duckbillgroup.com/

Join us for Office Hours!

https://www.duckbillgroup.com/officehours/

Links:

• Amazon CloudWatch agent now supports Red Hat OpenShift Service on AWS (ROSA) 
• Amazon Cognito now supports refresh token rotation 
• Amazon Q Developer releases state-of-the-art agent for feature development 
• AWS Account Management now supports IAM-based account name updates 
• AWS CodeBuild adds support for specifying EC2 instance type and configurable storage size 
• AWS Console Mobile Application adds support for Amazon Lightsail 
• AWS STS global endpoint now serves your requests locally in Regions enabled by default 
• AWS Transfer Family introduces Terraform module for deploying SFTP server endpoints 
• How Smartsheet reduced latency and optimized costs in their serverless architecture 
• In the works – New Availability Zone in Maryland for US East (Northern Virginia) Region 
• CVE-2025-3857 – Infinite loop condition in Amazon.IonDotnet 
• I annotated Amazon CEO Andy Jassy’s 2024 Letter to Shareholders 

Links:

• AWS simplifies Amazon VPC Peering billing
• AWS now allows customers in Europe to pay For their usage in advance
• AWS Lambda@Edge announces advanced logging controls
• Announcing new AWS Wavelength Zone in Dakar
• Announcing the AWS Well-Architected Generative AI Lens
• Announcing General Availability of GitLab Duo with Amazon Q
• Racing beyond DeepRacer: Debut of the AWS LLM League
• Manage budgets efficiently with budget events in AWS Deadline Cloud

Links:

• Amazon Route 53 adds public authoritative DNS service to AWS GovCloud (US) Regions
• Cost Optimization Hub supports DynamoDB and MemoryDB reservation recommendations
• Load Balancer Capacity Unit Reservation for Gateway Load Balancers
• Announcing new AWS Elemental MediaTailor pricing model with lower VOD ad insertion costs
• How AWS and Intel make LLMs more accessible and cost-effective with DeepSeek
• Announcing up to 85% price reductions for Amazon S3 Express One Zone
• Optimize Amazon VPC Flow Logs analysis with Cribl Stream sampling
• Exploring Data Transfer Costs for AWS Network Load Balancers

Links:

• Amazon EC2 now supports more bandwidth and jumbo frames to select destinations
• API Gateway launches support for dual-stack (IPv4 and IPv6) endpoints
• AWS Lambda adds support for Ruby 3.4
• Amazon CloudWatch Logs increases maximum log event size to 1 MB
• Amazon Neptune announces 99.99% availability Service Level Agreement
• Announcing the general availability of Amazon VPC Route Server
• Under the hood: Amazon EKS Auto Mode
• Optimizing cost savings: The advantage of Amazon Aurora over self-managed open source databases
• How AWS Sales uses generative AI to streamline account planning
• Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048)

Links:

• Amazon DynamoDB now supports percentile statistics for request latency
• Amazon EKS now enforces upgrade insights checks as part of cluster upgrades
• Amazon GameLift Servers expands instance support with next-generation EC2 instance families
• AWS CloudFormation now supports targeted resource scans in the IaC generator
• AWS adds currency selection to Payment Profiles
• AWS Deadline Cloud now supports Internet Protocol Version 6 (IPv6)
• AWS announces expanded service support in the AWS Console Mobile App
• AWS Network Manager and AWS Cloud WAN now support AWS PrivateLink and IPv6
• Unlocking the power of Splunk with Amazon Bedrock – Build AI assistant using agents
• From virtual machine to Kubernetes to serverless: How dacadoo saved 78% on cloud costs and automated operations
• Accelerating CI with AWS CodeBuild: Parallel test execution now available
• Amazon S3 Path Deprecation Plan – The Rest of the Story | AWS News Blog
• Detailed geographic information for all AWS Regions and Availability Zones is now available
• Optimizing network footprint in serverless applications
• Simplifying private API integrations with Amazon EventBridge and AWS Step Functions
• Announcing the Developer Preview of Amazon S3 Transfer Manager in Rust
• AWS SDK for Ruby: Deprecating Ruby 2.5 & 2.6 Runtime Supports and Future Compatibility
• Announcing the AWS CDK L2 Construct for Amazon Cognito Identity Pools
• AWS re:Invent 2024 recap for government agencies

Links:

• AWS Client VPN increases authorization rules and route quotas
• Announcing the New AWS Wickr Admin Console
• AWS announces the next generation of Amazon Connect where powerful AI improves every customer interaction
• Manage SLO exclusion time windows using CloudWatch Application Signals
• Handling billions of invocations – best practices from AWS Lambda
• Visually build telephony applications with AWS Step Functions
• Corey is speaking at SREcon in Santa Clara!

Links:

• Amazon Bedrock now supports multi-agent collaboration
• Amazon RDS for MySQL announces Extended Support minor 5.7.44-RDS.20250213
• Amazon Route 53 Traffic Flow introduces a new visual editor to improve DNS policy editing
• Application Load Balancer announces integration with Amazon VPC IPAM
• Announcing the end of support for Node.js 14.x and 16.x in AWS CDK
• Watch the recordings from AWS Developer Day 2025
• How GoDaddy built a category generation system at scale with batch inference for Amazon Bedrock
• Formula 1® unlocks the most competitive season yet with AWS
• Secure cloud innovation starts at re:Inforce 2025

Links:

• Amazon Bedrock launches Session Management APIs for GenAI applications (Preview)
• Announcing Amazon GameLift Streams
• Amazon Q Developer announces a new CLI agent within the command line
• AWS Secrets Manager increases the API Requests per Second limits
• AWS Transfer Family announces reduced login latency for SFTP servers
• IAM Access Analyzer now supports Internet Protocol Version 6 (IPv6)
• Streamline your AWS Marketplace renewals
• Introducing an enhanced local IDE experience for AWS Step Functions
• End of support notifications and enhanced discoverability for Amazon EKS
• The end of an era: the final AWS DeepRacer League Championship at re:Invent 2024
• Securely onboarding countries to the AWS Cloud

Links:

• Amazon Connect reduces telephony pricing in Vietnam
• Amazon EC2 announces Time-based Copy for AMIs
• Amazon Location Service now supports AWS PrivateLink
• Anthropic's Claude 3.7 Sonnet is now available in Amazon Bedrock
• AWS Batch now supports resource aware scheduling
• AWS Chatbot is now named Amazon Q Developer
• AWS CodePipeline introduces new console experience for viewing pipeline releases
• You can now use your China UnionPay credit card to create an AWS account
• Accelerate Security Incident Response and Recovery with AWS Security Incident Response Partners
• Amazon Web Services named a Leader in the 2024 Gartner Magic Quadrant for Data Integration Tools
• Migrate very large databases to Amazon Aurora MySQL using MyDumper and MyLoader
• Announcing CDK Garbage Collection
• Generate Code Documentation Using Amazon Q Developer
• ByteDance processes billions of daily videos using their multimodal video understanding models on AWS Inferentia2
• Unlock deeper insights and faster investigations with AWS CloudTrail Lake

Links:

• Amazon ECS increases the CPU limit for ECS tasks to 192 vCPUs
• Amazon Q Developer now supports upgrade to Java 21
• AWS announces Backup Payment Methods for invoices
• AWS CodePipeline adds native Amazon EKS deployment support
• AWS Price List API supports AWS PrivateLink
• AWS CloudFormation: 2024 Year in Review
• Cost optimize your Minecraft Java EC2 Server
• Improving Security in Amazon WorkMail with MFA
• Update on Support for Amazon Chime
• Best practices to respond to security risks across your AWS Organizations
• Reduce IT costs by implementing automatic shutdown for Amazon EC2 instances
• How to restrict Amazon S3 bucket access to a specific IAM role
• Introducing the AWS Trust Center
• Is AWS Delivering on Its 3-Layer Approach to AI?

Links:

• Amazon DynamoDB now supports auto-approval of quota adjustments
• Amazon Elastic Block Store (EBS) now adds full snapshot size information in Console and API
• Amazon RDS for MySQL announces Extended Support minor 5.7.44-RDS.20250103
• Amazon Redshift Serverless announces reduction in IP Address Requirements to 3 per Subnet
• AWS Deadline Cloud now supports Adobe After Effects in Service-Managed Fleets
• AWS Network Load Balancer now supports removing availability zones
• AWS CloudTrail network activity events for VPC endpoints now generally available
• Harness Amazon Bedrock Agents to Manage SAP Instances
• Timestamp writes for write hedging in Amazon DynamoDB
• Updating AWS SDK defaults – AWS STS service endpoint and Retry Strategy
• Learning AWS best practices from Amazon Q in the Console
• Automating Cost Optimization Governance with AWS Config
• Amazon Q Developer in chat applications rename - Summary of changes - AWS Chatbot

Links:

• Amazon EBS now supports additional resource-level permissions for creating EBS volumes from snapshots
• Amazon Managed Service for Prometheus collector adds support for cross-account ingestion
• Amazon Redshift Concurrency Scaling is now available in 1 additional region
• Amazon Q Developer now troubleshoots AWS Console errors in all AWS Commercial regions
• Amazon Q Developer introduces a new, simplified setup experience for Pro tier subscriptions
• AWS IAM Identity Center now offers improved error messages and AWS CloudTrail logging for provisioning issues
• AWS Step Functions now supports 100,000 state machines and activities per AWS account
• Cost Optimization Hub supports more EC2 Auto Scaling group recommendations
• Announcing the general availability of AWS Database Migration Service Serverless support for files with an S3 source endpoint
• AI-Powered Football Match Analysis: SAP Sports One on AWS
• Introducing AWS CloudFormation Stack Refactoring
• AWS Tightens the Reins: New AWS SaaS Marketplace Rules Will Impact Your Commitments

Links:

• Amazon EFS is now available in the AWS Mexico (Central) Region
• Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.32
• Amazon S3 Metadata is now generally available
• Amazon Timestream for InfluxDb now supports Storage Scaling
• AWS Elastic Beanstalk now supports Python 3.13 on Amazon Linux 2023
• AWS Health now supports Internet Protocol Version 6 (IPv6)
• Announcing AWS Managed Notifications in the AWS Console Mobile App
• Announcing new AWS Wavelength Zone in Casablanca
• AWS now supports Zone Groups for Availability Zones
• Announcing the AWS CDK Glue L2 Construct
• Deploy DeepSeek-R1 Distilled Llama models in Amazon Bedrock
• Announcing upcoming changes to the AWS Security Token Service global endpoint
• Design patterns for multi-tenant access control on Amazon S3
• Amazon Nimble Studio Closed to New Customers

Links:

• Amazon Bedrock Flows announces preview of multi-turn conversation support
• Amazon CloudWatch allows alarming on data up to 7 days old
• Amazon S3 Tables are now available in five additional AWS Regions
• AWS Client VPN announces support for concurrent VPN connections
• AWS CodeBuild now supports test splitting and parallelism
• AWS Marketplace introduces 8 decimal place precision for usage pricing
• Announcing AWS User Notifications GA on AWS CloudFormation
• Enhance the resilience of critical workloads by architecting with multiple AWS Regions
• Introducing cross-account targets for Amazon EventBridge Event Buses
• Diving deep into the new Amazon Aurora Global Database writer endpoint
• AWS and NANOG join forces: Unlocking IPv6 potential with the IPv6 Clinic at NANOG 93
• Issue with AWS Sign-in IAM User Login Flow – Possible Username Enumeration (CVE-2025-0693)

Links:

• AWS CodePipeline introduces new debugging experience in AWS Management Console
• The AWS Management Console now supports simultaneous sign-in for multiple AWS accounts
• EC2 Image Builder simplifies converting Windows ISO files to AMIs
• Now open — AWS Mexico (Central) Region
• AWS CDK is splitting Construct Library and CLI
• Amazon Bedrock launches with Claude 3.5 Sonnet in the AWS Top Secret cloud
• Preventing unintended encryption of Amazon S3 objects
• Secure root user access for member accounts in AWS Organizations | AWS Security Blog
• Cost-optimized log aggregation and archival in Amazon S3 using s3tar
• Issue with Amazon WorkSpaces, Amazon AppStream 2.0, and Amazon DCV (CVE-2025-0500 and CVE-2025-0501)

Sponsor
The Duckbill Group: https://www.duckbillgroup.com/

Links:

• Amazon DynamoDB now supports configurable point-in-time-recovery periods
• AWS Compute Optimizer now expands idle and rightsizing recommendations for Amazon EC2 Auto Scaling groups
• Announcing the new AWS Asia Pacific (Thailand) Region | AWS News Blog
• Shaping the future of CDK together
• The benefits of an email-based AI virtual assistant on AWS
• Securing a city-sized event: How Amazon integrates physical and logical security at re:Invent

Sponsor
The Duckbill Group: https://www.duckbillgroup.com/

Links:

• Amazon AppStream 2.0 introduces client for macOS
• Amazon EC2 instances support bandwidth configurations for VPC and EBS
• Amazon Timestream for InfluxDB now supports Internet Protocol Version 6 (IPv6) connectivity
• Amazon WorkSpaces Thin Client now available to purchase in India
• AWS Backup launches support for search and item-level recovery
• AWS Mainframe Modernization now supports connectivity over Internet Protocol version 6 (IPv6)
• AWS Marketplace now supports self-service promotional media on seller product detail pages
• AWS re:Post now supports Spanish and Portuguese
• AWS Resource Explorer supports 59 new resource types
• AWS offers a self-service feature to update business names on AWS Invoices
• Announcing CloudFormation support for AWS Parallel Computing Service
• Announcing Node Health Monitoring and Auto-Repair for Amazon EKS - AWS
• And that’s a wrap!
• Best practices for creating a VPC for Amazon RDS for Db2
• How the Amazon TimeHub team handled disruption in AWS DMS CDC task caused by Oracle RESETLOGS: Part 3
• How to detect and monitor Amazon Simple Storage Service (S3) access with AWS CloudTrail and Amazon CloudWatch
• Enforce resource configuration to control access to new features with AWS
• Maximizing your cloud journey: Engaging an AWS Solutions Architect

Links:

• Amazon Bedrock Guardrails reduces pricing by up to 85%
• Amazon CloudWatch now provides centralized visibility into telemetry configurations
• Amazon EC2 F2 instances, featuring up to 8 FPGAs, are generally available
• Amazon SES now offers Global Endpoints for multi-region sending resilience
• AWS Toolkit for Visual Studio Code now includes Amazon CloudWatch Logs Live Tail
• Accelerate your AWS Graviton adoption with the AWS Graviton Savings Dashboard
• Capture data changes while restoring an Amazon DynamoDB table
• Understand the benefits of physical replication in Amazon RDS for PostgreSQL Blue/Green Deployments
• How AWS sales uses Amazon Q Business for customer engagement
• AWS Network Firewall Geographic IP Filtering launch
• Issue with DynamoDB local - CVE-2022-1471

Links:

• AWS announces access to VPC resources over AWS PrivateLink
• Announcing Amazon Aurora DSQL (Preview)
• Announcing Amazon Bedrock IDE in preview as part of Amazon SageMaker Unified Studio
• AWS announces Amazon CloudWatch Database Insights
• Amazon DynamoDB global tables previews multi-Region strong consistency
• Amazon EC2 introduces Allowed AMIs to enhance AMI governance
• Announcing Amazon EC2 I8g instances
• Announcing Amazon EKS Auto Mode
• Announcing Amazon EKS Hybrid Nodes
• Announcing Amazon Elastic VMware Service (Preview)
• Announcing Amazon FSx Intelligent-Tiering, a new storage class for FSx
• Amazon Q Developer can now automate code reviews
• Amazon Q Developer announces automatic unit test generation to accelerate feature development
• Amazon S3 adds new default data integrity protections
• Announcing Amazon S3 Metadata (Preview) – Easiest and fastest way to manage your metadata
• Amazon S3 launches storage classes for AWS Dedicated Local Zones
• Announcing Amazon S3 Tables – Fully managed Apache Iceberg tables optimized for analytics workloads
• AWS announces Amazon SageMaker Lakehouse
• AWS Control Tower launches managed controls using declarative policies
• AWS announces AWS Data Transfer Terminal for high-speed data uploads
• Amazon Web Services announces declarative policies
• Introducing AWS Glue 5.0
• AWS announces Invoice Configuration
• AWS Marketplace now offers EC2 Image Builder components from independent software vendors
• AWS announces AWS Security Incident Response for general availability
• Announcing AWS Transfer Family web apps
• Buy with AWS accelerates solution discovery and procurement on AWS Partner websites
• Oracle Database@AWS is now in limited preview
• PartyRock improves app discovery and announces upcoming free daily use
• Announcing the preview of Amazon SageMaker Unified Studio
• VPC Lattice now includes TCP support with VPC Resources
• Announcing the 2024 Geo and Global AWS Partners of the Year
• Amazon MemoryDB Multi-Region is now generally available
• Top announcements of AWS re:Invent 2024

Sponsor

The Duckbill Group: https://www.duckbillgroup.com/

Links:

• Amazon CloudWatch adds context to observability data in service consoles, accelerating analysis
• Amazon Cognito introduces Managed Login to support rich branding for end user journeys
• Amazon Cognito now supports passwordless authentication for low-friction and secure logins
• Amazon Connect Email is now generally available
• Amazon EBS announces Time-based Copy for EBS Snapshots
• Amazon EC2 Auto Scaling introduces highly responsive scaling policies
• Amazon EC2 Capacity Blocks now supports instant start times and extensions
• Amazon ECR announces 10x increase in repository limit to 100,000
• Amazon EFS now supports up to 2.5 million IOPS per file system
• Amazon S3 now supports enforcement of conditional write operations for S3 general purpose buckets
• Application Signals provides OTEL support via X-Ray OTLP endpoint for traces
• AWS delivers enhanced root cause insights to help explain cost anomalies
• Enhanced Pricing Calculator now supports discounts and purchase commitments (in preview)
• AWS PrivateLink now supports cross-region connectivity
• Announcing the new AWS User Notifications SDK
• Announcing new feature tiers: Essentials and Plus for Amazon Cognito
• Announcing Savings Plans Purchase Analyzer
• Data Exports for FOCUS 1.0 is now in general availability
• Introducing a new experience for AWS Systems Manager
• Introducing generative AI troubleshooting for Apache Spark in AWS Glue (preview)
• Understanding how certain database parameters impact scaling in Amazon Aurora Serverless v2
• Analyzing your AWS Cost Explorer data with Amazon Q Developer: Now Generally Available
• Your guide to AWS for Advertising & Marketing at re:Invent 2024
• AWS IoT Services alignment with US Cyber Trust Mark
• Streamlining AWS Organizations Cleanup Strategies

Sponsor

Wiz: wiz.io/lastweek

Links:

• Enhanced account linking experience across AWS Marketplace and AWS Partner Central
• Amazon API Gateway now supports Custom Domain Name for private REST APIs
• Amazon Aurora Serverless v2 supports scaling to zero capacity
• Amazon CloudFront now supports Anycast Static IPs
• Amazon CloudFront now supports additional log formats and destinations for access logs
• Amazon CloudFront announces VPC origins
• Amazon CloudWatch launches full visibility into application transactions
• Amazon EC2 now provides lineage information for your AMIs
• Amazon Q Developer in the AWS Management Console now uses the service you’re viewing as context for your chat
• Amazon WorkSpaces introduces support for Rocky Linux
• AWS App Studio is now generally available
• AWS CloudTrail Lake launches enhanced analytics and cross-account data access
• AWS Compute Optimizer now supports rightsizing recommendations for Amazon Aurora
• AWS Elastic Beanstalk adds support for Node.js 22
• AWS Lambda supports Amazon S3 as a failed-event destination for asynchronous and stream event sources
• Introducing an AWS Management Console Visual Update (Preview)
• The new AWS Systems Manager experience: Simplifying node management
• AWS announces Block Public Access for Amazon Virtual Private Cloud
• Load Balancer Capacity Unit Reservation for Application and Network Load Balancers
• Announcing Idle Recommendations in AWS Compute Optimizer
• Announcing Savings Plans Purchase Analyzer
• AWS Lambda turns ten – looking back and looking ahead
• Boost Engagement with AWS and Amazon Ads
• Build fullstack AI apps in minutes with the new Amplify AI Kit
• Important changes to CloudTrail events for AWS IAM Identity Center
• Follow Corey on BlueSky!
• Follow Last Week In AWS on BlueSky!

Links:

• Buy a shirt benefiting 826 National!
• Amazon DataZone updates pricing and removes the user-level subscription fee
• Amazon DynamoDB reduces prices for on-demand throughput and global tables
• Amazon DynamoDB introduces warm throughput for tables and indexes
• Amazon EBS now supports detailed performance statistics on EBS volume health
• Amazon Q Developer plugins for Datadog and Wiz now generally available
• Amazon S3 now supports up to 1 million buckets per AWS account
• AWS Backup now supports copying Amazon S3 backups across Regions and accounts in opt-in Regions
• AWS CloudTrail Lake announces enhanced event filtering
• How and why you should move to Cost and Usage Report (CUR) 2.0?
• AWS BuilderCards second edition at re:Invent 2024
• Accelerate your third-party Amazon EKS add-on onboarding using Conformitron
• Python 3.13 runtime now available in AWS Lambda
• Deploy the Cost Optimizer for Amazon WorkSpaces in a highly-regulated environment.
• Introducing the Live Event Framework: Live Streaming with Ad Insertion on AWS
• Introducing kro: Kube Resource Orchestrator
• AWS Snow device updates

Links:

• Amazon CloudFront no longer charges for requests blocked by AWS WAF
• Amazon OpenSearch Service announces Extended Support for engine versions
• Configure Route53 CIDR blocks rules based on Internet Monitor suggestions
• Announcing an improved self-guided experience for AWS Partner Central
• AWS introduces service versioning and deployment history for Amazon ECS services
• Reduce your Microsoft licensing costs by upgrading to 4th generation AMD processors
• The attendee’s guide to the AWS re:Invent 2024 Compute track
• Unauthorized tactic spotlight: Initial access through a third-party identity provider
• Scaling up the Prime Video audio/video monitoring service and reducing costs by 90% - Prime Video Tech
• Our Charity T-Shirt Drive

Links:

• Amazon CloudWatch now monitors EBS volumes exceeding provisioned performance
• Amazon Q Developer announces support for inline chat to streamline the developer experience
• Amazon Route 53 announces HTTPS, SSHFP, SVCB, and TLSA DNS resource record support
• Amazon Virtual Private Cloud launches new security group sharing features
• AWS now accepts partial card payments
• Announcing AWS Amplify integration with Amazon S3 for static website hosting
• AWS CodeBuild now supports retrying builds automatically
• AWS Trust & Safety Center is now available on AWS re:Post
• 2024 re:Invent Know Before You Go – Cloud Financial Management Sessions
• Introducing an enhanced local IDE experience for AWS Lambda developers