AWS News Weekly

This week: AWS Lambda launches Web Functions, letting you run Express or Hono apps directly with active-CPU pricing and CloudFront origin support. SageMaker JumpStart adds Meta's Muse Spark Open and Reflection's Beam for agentic coding, Lambda durable functions get 10x more operations, and AWS Transform converts Azure .NET apps to AWS. Plus OpenSearch index-level encryption and S3 on Vercel. Compute Lambda Web Functions: HTTP-native, Express/Hono, pay active CPU only Lambda durable: 30K ops (10x), 1MB checkpoints, Go SDK GA Lambda: Loop detection for EventBridge custom buses Time Sync: Microsecond time on 135 more EC2 types Security OpenSearch: Per-index KMS encryption Secrets Manager: Managed rotation for Databricks, Twilio Security Hub: Resource criticality; CRI Profile v2.2 Transfer Family: Custom SFTP ports, host keys in Secrets Manager AI/ML JumpStart: Muse Spark Open (816B MoE), Beam, Nemotron 3.5 Super VL SageMaker Studio: Google/GitHub/Apple sign-up, no credit card AgentCore: Usage-based STM pricing; Web Search in GovCloud Agent Toolkit: SageMaker AI/ML and MWAA skills Data & Storage EMR: Native Spark data quality checks, 30+ rules, free DynamoDB Streams: Start reading from timestamp DataSync Enhanced: FSx for OpenZFS, NFS 4.2 S3: On Vercel Marketplace and v0 RDS Proxy: SQL Server 2022, up to 83% faster failover Networking CloudFront: Lambda Web Functions origin, dual-stack VPC origins Oracle Database@AWS: Aggregate/default routes for peering Operations ECS: New free LiveTaskCount; RunningTaskCount now free CloudWatch: Conditional log routing, chained parsers ElastiCache Valkey: Insights dashboard, 15s metrics ARC Region switch: Run Command, quota parity checks Resilience Hub: DevOps Agent investigations Other End User Messaging: Managed OTP incl. WhatsApp, Brand Profiles Transform: Azure-to-AWS .NET code conversion GA HealthOmics: Shared VPCs, 3rd-party registries, GPU fallback DCV 2026.0: RHEL 10, Ubuntu 26.04, new macOS client Connect: AI-prefilled after-contact guides AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

AI & Bedrock Nova 2.5 Sonic: GA voice model, better reasoning/tool calls, lower latency Claude Haiku 5.5: ~75% cheaper than Haiku 4.5, effort controls (+GovCloud) GLM 5.3: 753B MoE, 1M context, 128K output GPT-6.1 Sol: Ultrafast mode; reasoning summaries for OpenAI models TwelveLabs Pegasus 1.5: Video-to-text with time-coded metadata Kiro GovCloud: Opus 5.5 (half the tokens) & Sonnet 5.5 (30% faster) Strands Bidi Agents: GA for production voice agents Security & Compliance GuardDuty: RDS Protection detects exfiltration/destruction in PostgreSQL Client VPN: Device posture checks (CrowdStrike, Jamf, JumpCloud) Continuum for Pentesting: CI/CD pentest integration (preview) Private CA: Detailed issuance logs in CloudTrail, incl. failures ACM: ACME certificate issuance via PrivateLink IAM Identity Center: Network access controls for Identity Store/SCIM Security Hub: Export findings to S3 (CSV/OCSF JSON) Network Firewall: Wildcard container attribute filters Lambda: OAuth auth for self-managed Kafka event sources Data & Databases Redshift: Create/refresh Iceberg materialized views Ruby Driver Wrapper: GA, faster RDS/Aurora failover & switchover RDS Oracle: Upgrade prechecks + early reconnect event Compute & Containers EC2 C8gb: 30% faster than Graviton3, 300 Gbps EBS, 7 more regions EC2 AMIs: Shared tags visible to recipient accounts Batch: CloudWatch job metrics, EKS access entry auth GameLift: CPU burstability for container fleets Management & Cost Cost Explorer/Budgets: Bedrock costs by model, provider, inference type Config: 77 new resource types Control Tower AFT: Plan-only Terraform runs SageMaker Unified Studio: Custom CloudFormation tooling blueprints Capabilities by Region: Feature-level availability alerts Quick: Brand templates for docs/presentations Connect: AI checks for evaluation forms AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: Amazon Bedrock adds Claude Sonnet five point five plus new Grok and OpenAI models, Aurora PostgreSQL can now query Iceberg and Parquet data in S three with no ETL, and EKS gets Kubernetes one point thirty-seven with scale-to-zero autoscaling. Plus Security Hub remediation plans that fix multiple exposures at once, smarter S three Vectors filtering, and service retirements to plan for. AI & ML Bedrock: Claude Sonnet 5.5 (incl. GovCloud), Grok 4.7, GPT-6.1 Sol GPT-6 Astra: UltraFast mode, 6x faster (300 tok/s) Databases Aurora Serverless: Adds 16 ACUs/sec, scales to 256 ACUs Aurora PostgreSQL: Query Iceberg/Parquet via embedded DuckDB DocumentDB 8.0.2: Retryable writes, 5 new aggregation stages RDS/Aurora: R8a and M8a AMD instances ElastiCache Valkey: Serverless public endpoints; 15s OTel metrics DynamoDB: Filtered export to S3 Analytics & Storage S3 Vectors: Metadata pre-filtering, up to 5x higher recall S3 Tables: All Iceberg V3 types; 100 buckets/Region (10x) Glue: Iceberg V3 optimization; write-protected materialized views EMR Serverless: 1TB shuffle (up from 200GB) Redshift: Cross-Region data lake queries; DEBUG log permission CloudWatch Logs: Auto-indexing; bytes-scanned query estimate Security Security Hub: Remediation plans grouped by root cause GuardDuty: Org declarative policies; Runtime Monitoring in Security Hub CloudTrail: Event Coverage reveals data event logging gaps Route 53 DNS Firewall: Palo Alto DNS Security GA; DNS analytics IAM Identity Center: Multi-Region in opt-in, GovCloud, China Containers & Compute EKS 1.37: Metrics API GA, HPA scale-to-zero beta ECS: Blue/green, linear, canary via VPC Lattice WorkSpaces Core: G7 Blackwell GPUs, 2.1x vs G6 Deadline Cloud: ECS containers; job template expressions Lifecycle Sunset: Managed Blockchain, DevOps Guru (2027) End of support: Mechanical Turk Other Backup: Air-gapped vaults for FSx for NetApp ONTAP Grafana 13.2: Git Sync, dynamic dashboards SSM / DataSync: RAM org sharing; shared VPC support Transfer Family: Multi-file download; 1,000 connector auto-approval AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: Claude Opus five point five lands in Amazon Bedrock alongside OpenAI's new GPT six Sol and Luna models, CloudWatch Omni brings AI-first observability built on OpenTelemetry, and EventBridge relaunches custom event buses with strict ordering and cross-account sharing. Plus DynamoDB multi-region strong consistency expands to fifteen regions, and EMR gets Long Term Support releases. AI & ML Bedrock: Claude Opus 5.5, fewer tokens, cheaper than Opus 5; in GovCloud Bedrock: OpenAI GPT-6 Sol & Luna, 1M-token context Bedrock Knowledge Base: Salesforce & Zendesk native connectors SageMaker HyperPod: Inference Gateway, up to 82% lower first-token latency Glue Data Quality: GenAI rule recommendations in seconds Observability CloudWatch Omni: GA, AI-first OpenTelemetry observability incl. Azure ECS: Live deployment timeline for canary/linear/blue-green, free DataSync: Free dashboard for all task executions Security & Compliance Network Security Manager: GA, org-wide WAF/Shield, auto drift fixes RDS PostgreSQL: Post-quantum TLS key exchange (v18+) EVS: FedRAMP Class C in US regions Security Hub: AI Inventory finds AI assets on Azure VMs IAM: Outbound federation OIDC discovery via VPC endpoints Transcribe: Customer-managed KMS keys for vocabularies/models Databases DynamoDB: Multi-region strong consistency in 15 regions, zero RPO RDS SQL Server Dev: Multi-AZ Always On AGs, no Enterprise license RDS: MySQL 5.7.44/8.0.46 Extended Support; SQL Server 2022 CU26 RDS Preview: PostgreSQL 19 Beta 4 ElastiCache Global Datastore: Tagging & tag-based access control Analytics & Streaming EMR: LTS releases, 36 months of fixes; Spark 4.1 + Iceberg v3 EMR 7.14: Spark 3.5.8, IPv6 & Spark Connect on EKS, 1TiB serverless Kinesis Data Streams: Service-managed partition keys, no hot shards EventBridge: New custom bus: cross-account, ordering, 1-yr retention Contact Center & Messaging Connect: Multi-agent AI via A2A protocol; routing step analytics End User Messaging: WhatsApp voice calls End User Messaging & SES: Agent skills for AWS MCP Server AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: EC2 launches application status checks for monitoring app-level health directly alongside instance checks, IAM introduces Account Access Manager for assigning roles to Identity Center users, and S3 now shows the specific policy ARN in access denied errors for faster troubleshooting. Plus new SageMaker JumpStart models, Bedrock cost allocation by IAM principal, and QuickSight adds deny-by-default for AI capabilities. Compute & Infrastructure EC2: App status checks monitor web servers/Docker; Auto Scaling replaces unhealthy instances EKS: Tune control plane params for pod placement and autoscaling Spot: Placement score now includes Local Zones Storage & Database RDS MariaDB: 12.3 LTS with Oracle TO_DATE compatibility, JSON validation RDS Oracle: APEX 26.1 low-code support Redshift: 2.4x faster at 30% lower cost AI/ML - SageMaker JumpStart GLM 5.2 FP8: 1M token context for agentic tasks NVIDIA Nemotron: Nano 12B (6x throughput), 3.5 Lightning 30B (4x throughput) Qwen: AgentWorld 35B, 3.5 122B multimodal (262K context) Specialized: GLM OCR, LightOn OCR, Redis langcache-embed, JetBrains Mellum2, FLUX 2, Gemma 4 12B AI/ML - Bedrock OpenAI Daybreak: Cyber defense models (Blue/Red) with chip-level security Cost allocation: IAM principal tagging for bedrock-mantle endpoint Security & Identity IAM: Account access manager (Identity Center + IAM roles), Role manager auto-creates service roles S3: Access denied errors show specific blocking policy ARN ACM: Switch email→DNS validation without reissuing Secrets Manager: Auto-rotation for Jenkins/SonarQube tokens Analytics & BI QuickSight: Purview DLP integration, deny-by-default for AI, per-user limits Clean Rooms: Privacy-enhanced SQL logs, custom aggregation thresholds Glue: One-click jump to SageMaker Unified Studio Management & Cost Console: Interactive global map for regions/local zones Billing: 5 preconfigured dashboards (cost trends, compute, database, reservations) Marketplace: Customizable notifications by category/channel Networking & Migration VPN Client v6: CLI support, admin controls, OpenVPN 3 Elastic DR: Auto-preserves UEFI boot mode for Linux SES: Custom URL paths for mobile deep linking AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: DynamoDB adds native vector search with single-digit millisecond latency, Amazon Bedrock brings OpenAI GPT models with million-token context windows, and Aurora Serverless now scales to 12 ACUs in under a second. Plus ECR supports 200GB image layers, Lambda gets 3Gbps bandwidth, and Bedrock AgentCore launches in GovCloud. Databases DynamoDB: Native vector search, single-digit ms latency, 99%+ recall, trillions of vectors Aurora Serverless: Scales to 12 ACUs in ElastiCache: Graviton4 nodes—47% higher throughput, 43% lower P99 latency Neptune: Air-gapped backup vaults with immutable storage, cross-account/region copy AI/ML Bedrock: OpenAI GPT 5.6 models (Sol/Terra/Luna), 1M token context, built-in web search SageMaker AI: Full fine-tuning for 25+ models (Llama, Gemma, Qwen); G7 instances with Blackwell GPUs Bedrock AgentCore: Temporal policies, rate limiting, EC2 self-hosted option, GovCloud support ECR: 200GB image layers—embed LLMs in single layer Compute & Containers Lambda: 3Gbps bandwidth (non-VPC), 10K SQS pollers (5x increase) ECS: Fractional NVIDIA L4 GPUs (1/8th slices) for small inference GameLift: Shareable stream URLs, 21 new instance types Security Security Hub Extended: Supply chain security category (Chainguard, Socket) Network Firewall: Built-in explicit forward proxy mode WAF: Miggo + Salt Security managed rules for AI/API protection VPC IPAM: BGP route monitoring, automated RPKI/ROA management Analytics & Data Glue Catalog: Iceberg export to S3 Tables, semantic search with KMS QuickSight: Multi-dataset topics with runtime joins MSK: Free authorizer logs for Provisioned clusters OpenSearch: Network-restricted UI access via IAM conditions Developer Tools Transform: SQL Server→Aurora PostgreSQL conversion; GA for tech debt remediation Lambda Console: Kiro + Cursor IDE integration EMR: Interactive Spark sessions via Spark Connect Operations S3 Backup: Direct access via Access Points—no restore needed RDS: Storage initialization progress visibility; SQL Server audit logs to CloudWatch IAM Identity Center: One-click multi-Region setup; skip account access option WorkSpaces: Enhanced CloudWatch metrics (free) AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: AWS launches Amazon Interconnect for purpose-built multicloud connectivity with Oracle and Google Cloud. MSK Express brokers now deliver Kafka data directly to S3 and Iceberg tables, cutting costs up to 60 percent. Transit Gateway adds policy-based routing for traffic steering by source, destination, and protocol. Plus IAM Identity Center gets multi-region replication and Bedrock drops GPT 5.6 prices up to 80 percent. Database RDS SQL Server: Restore TDE-encrypted DBs directly to Multi-AZ instances Neptune: Tag-based IAM access control for cluster isolation S3 Tables: Iceberg V3 Variant type for schema-free JSON ingestion OpenSearch 3.7: 1-bit vector quantization, faster retrieval via doc values Directory Service: In-place Standard→Enterprise upgrade (5K→500K objects) Redshift RG: Graviton instances on trailing track, 2.4x faster at 30% lower cost Aurora DSQL: Multi-Region active-active clusters in more locations Compute & Containers EKS: Private OIDC via PrivateLink, no internet egress needed EKS Provisioned: HPA processing 40x faster for autoscaling objects EC2 Auto Scaling: Instance refresh as CloudFormation update policy Lambda: Java 8/11/17 on AL2023 (AL2 patched through June 2027) AI/ML Security Hub MCP: Claude Desktop integration for exposure findings Bedrock GovCloud: Grok 4.3, Gemma 4 (31B/26B/2B) models Bedrock: GPT 5.6 price cuts—Luna 80%, Terra 20% SageMaker Studio: Full Git version control across all editors Data & Analytics Glue DQ: Distribution Analyzer histograms, ML anomaly detection Glue REST API: VPC connections, filter pushdown, partitioning DataSync Enhanced: EFS, FSx Lustre, HDFS, Azure Blob, Hyper-V support MSK Express: Native S3 delivery + Iceberg tables, 60% cost reduction Redshift Data API: Long polling, ListSessions, batch auto-commit Networking Transit Gateway: Policy-Based Routing by source/dest IP, port, protocol Direct Connect: View BGP routes with AS path and community values Amazon Interconnect: Oracle Cloud GA, Google supported, Azure 2026 Security & Identity WAF: Pre-parse transforms, 10 new options including SHA-256 IAM Identity Center: Multi-region replication for built-in directory IAM Policy Simulator: Console integration, SCP testing, what-if scenarios Storage & Transfer EFS: Cross-account replication in GovCloud AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: RDS adds SQL Server 2025 with native AI integration for calling Bedrock directly from T-SQL, Lambda durable functions hit GA for .NET with year-long pause support, and CloudWatch now tracks AI coding agent metrics across your org. Plus EKS Auto Mode gains EFA support, Secrets Manager events flow directly to EventBridge, and Claude Opus 5 arrives on Bedrock. Compute EC2 I8ge: Graviton4, 60% better compute, 55% better storage I/O, 60% lower latency EKS Auto Mode/Karpenter: EFA support, placement groups for node pools Lambda Durable Functions: GA for .NET, pause up to 1 year, KMS CMK encryption ECS Action Logs: Timestamped deployment visibility, Amazon Q root cause analysis ECS Service Connect: Zone-aware routing, reduces cross-AZ costs (default for new) AI/ML Claude Opus 5: Available on Bedrock, hours-long autonomous agents Claude Sonnet 5: Now in GovCloud on Bedrock SageMaker G7: RTX PRO 4500 Blackwell, 4.6x inference vs G6 SageMaker G7e: 8 RTX PRO 6000 GPUs, 768GB memory, 70B params single-node SageMaker G6: Now in GovCloud with L4 GPUs Bedrock AgentCore: Unified telemetry to single CloudWatch log group Data Exports: Standardized Bedrock metadata (model, pricing, inference type) Kiro: Opus 4.8 + Sonnet 5 in GovCloud with usage dashboards aws-bench: Open-source AI agent benchmark for cloud tasks Database RDS SQL Server 2025: Native AI/REST from T-SQL, Standard up to 32 cores, vector type RDS MySQL 9.7: Preview environment available Storage & Data KNFSD File Cache: Preview, NFS caching on AWS, VPC-speed reads Managed Prometheus: 1.5B active time series, 200K rules per workspace Apache Flink 2.3: Adaptive partitions, better CDC handling Networking NLB: Listener rules for source IP type routing, preserves client IP Direct Connect Peru: First 100Gbps location in Lima with MACsec Security & Management CloudTrail: Filter network events by identity for VPC endpoint logging Secrets Manager: Direct EventBridge events on value changes Organizations: 2000 RCPs per org (2x increase) Entity Resolution: Real-time advanced matching in milliseconds Developer Tools CloudWatch Coding Agent Insights: Track AI tool ROI, token alerts SageMaker Unified Studio: OpenSearch integration AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: Security Hub expands to monitor Microsoft Azure resources alongside AWS with unified posture management, Systems Manager now connects and manages Azure VMs without manual agent installation, and ACM launches a fully managed ACME server for automated TLS certificate issuance. Plus RDS for Oracle 26ai brings Bedrock integration, and Aurora Dsql adds real-time CDC to Kinesis. Security & Identity Secrets Manager: Auto-rotation for Paddle API keys, GitLab tokens ACM: Managed ACME server for automated TLS via Certbot/cert-manager Security Hub: Blast radius mapping, attack chain graphs Security Hub: Azure resource monitoring (VMs, containers, identities) Security Hub: Network scanning confirms actual internet reachability Organizations: Account departure controls enabled by default VPC: Centralized encryption-in-transit via declarative policies Compute & Containers EKS Auto Mode: GPU fees cut 35% (G-series), 60% (P-series) July 2026 ECS Managed: Same GPU fee reductions as EKS Auto Mode EMR Serverless: 2x worker limits (32 vCPUs, 244GB memory) EC2: Replace root volume directly from EBS, no snapshot needed AI/ML SageMaker Studio: One-click Hugging Face model import SageMaker HyperPod: Disaggregated prefill/decode for LLM inference SageMaker HyperPod: AMI-based Slurm config, deep health checks SageMaker Unified Studio: MWAA integration, 19 new workflow operators SageMaker Unified Studio: OpenLineage data lineage for IAM domains SageMaker Unified Studio: Custom asset cataloging (any format) SageMaker Feature Store: Batch ops for high-throughput ingestion Neuron 2.31: MX FP8, UltraServer Operator, 14 new kernels RDS Oracle 26ai: Bedrock integration, AI Vector Search, Select AI Data & Analytics Aurora DSQL: CDC streaming to Kinesis Data Streams Redshift: Graviton R8g, 2.4x faster, 30% cheaper MSK Replicator: External Kafka to MSK Standard brokers Management & DevTools Systems Manager: Azure VM management without agent install CloudWatch App Signals: Auto exception snapshots, latency anomalies Config: 191 new managed rules (Bedrock, SageMaker, EKS, etc.) AWS MCP Server: OAuth support, DMS Schema Conversion integration EMR on EKS: AI Spark troubleshooting agent Builder Center: Free 8-hour sandbox environments AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: EC2 C9g instances debut with fifth-gen Graviton delivering 25% better performance, Claude Sonnet 5 arrives on Bedrock with superior coding and agentic capabilities, and CloudFormation express mode cuts deployments by up to 4x. Plus OpenSearch gets a purpose-built log analytics engine with 4x better price-performance, and ECS adds zone-aware routing to cut cross-AZ costs. Compute EC2 C9g/C9gd: Graviton 5, 25% faster than G4, 35% faster ML inference EC2 Dedicated Hosts: AMD SEV-SNP confidential computing support EC2 Auto Scaling: Reservations-then-balanced strategy for capacity reservations Time Sync: Microsecond accuracy on 26 more instance types AI/ML Claude Sonnet 5: On Bedrock, better multi-file code changes, fewer corrections Bedrock AgentCore: 5K concurrent sessions, 200 interactions/sec default quotas Bedrock AgentCore Gateway: WAF integration for agent protection SageMaker: Serverless fine-tuning for Gemma 4 models (4B, 31B) SageMaker Inference: Auto image caching, 50% faster cold starts SageMaker HyperPod: Auto security patching, AMI version visibility Security Hub: 31 AI security controls for Bedrock/SageMaker GovCloud: GPT-5.4 (272K context), Nemotron 3 Super on Bedrock Containers EKS: Minor version rollback within 7 days ECS Express Mode: Custom task definitions supported ECS: Zone-aware Service Connect routing, deployment timeline UI ECS: Configurable circuit breaker thresholds Network Firewall: Native container rules (namespace, labels) Storage & Data S3 Logs: Direct to CloudWatch Logs and S3 Tables (Iceberg) OpenSearch: Log analytics engine, 4x price-performance, 70% less storage Neptune: Dual-stack IPv4/IPv6 support Operations CloudFormation: Pre-deployment validation in seconds CloudFormation Express: 4x faster deploys (CloudFront in seconds) CloudWatch Logs: Auto tag enrichment, query-based alarms CloudWatch Pipelines: OpenTelemetry metric transformations Security GuardDuty: File modification detection on EC2/EKS/ECS IAM Identity Center: Programmatic account access for apps RDS: Dynamic IAM auth scaling, no connection limits Networking Interconnect Last Mile: Preview with AT&T, automated branch connectivity AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com