BGP, Oracle, and Other Things That Hurt

AWS Morning Brief for the week of September 8th with Corey Quinn. Links:AWS Lambda now supports SnapStart for container image functionsAmazon CloudWatch now supports warm-up periods for alarmsAmazon Kinesis Data Streams announces data delivery to general purpose Amazon S3 bucketsAmazon Linux 2027 is now available in public previewAmazon CloudFront announces API support for flat-rate pricing plansAAA games on a $35 stick: How Luna removes the hardware barrier with AWSHow t54 built a trust layer with Amazon Bedrock AgentCore paymentsIntroducing Claude Fable 5.1 on AWSTokenomics at scale: How Jamf built real-time spend enforcement for Amazon BedrockHow PGA TOUR automated live profanity detection with AWS using Amazon TranscribeAWS and Microsoft Azure collaborate to expand multicloud networkingWe invited a direct competitor into Security Hub Extended. Here’s why.Detect stalled Amazon S3 live replication to prevent unexpected storage costsSix AWS security bulletins in five days

AWS Morning Brief for the week of August 31st, with Corey Quinn. Links:AWS Lambda functions now support full IAM resource-based policiesAWS Security Agent (now part of AWS Continuum) now supports budget controls and finding revalidationAWS Secrets Manager adds managed external secrets support for Cisco Security Platform and NetskopeAutomating filtered Cost and Usage Report exports with AWS Data ExportsAWS Glue 6.0 now available with 30% lower price and full Apache Iceberg v3 supportHappy 20th Birthday, Amazon EC2I'm an Amazon SVP who hadn't coded in 25 years. Then I wrote 100,000 lines of code with AI.AWS and DuckLabs: Building the future of analytics togetherState of Kansas modernizes mainframe file transfer using AWS Transfer FamilyFive AWS security bulletins, zero AWS-side fixes

AWS Morning Brief for the week of August 24th, with Corey Quinn. Links:AWS CloudShell now includes a built-in visual file editorAWS Cost Anomaly Detection supports third-party models on Amazon BedrockAWS announces a new Availability Zone in the Europe (London) RegionAWS Billing and Cost Management Introduces Managed Dashboards for Instant Cloud Financial VisibilityIn the works: AWS Builder Lofts in Berlin, Hyderabad, and São PauloAmazon Linux default SSM parameter will now track the latest kernelIntroducing public preview runtimes on AWS Lambda, starting with Node.js 26 and Python 3.15AWS and Amazon WorkSpaces recognized as a Leader in the 2026 Gartner Magic Quadrant for Desktop as a Service Amazon Bedrock AgentCore payments is now generally available: Enabling agents to transact safely and autonomously at scaleAWS Network Firewall now supports rule hit countUpdates to your AWS Sign-In experienceFour AWS Security Bulletins in One August Week

AWS Morning Brief for the week of August 17th, with Corey Quinn. Links:Amazon EC2 introduces application status checksAWS IAM Identity Center supports one-click multi-Region option for new organization instancesAmazon S3 adds additional policy details to access denied error messagesAWS Secrets Manager adds managed external secrets support for Jenkins and SonarQubeBurst to Region: Overflow AWS Outposts workloads to Amazon EC2Designing for failure: Building resilient systems on AWSAmazon Quick for Microsoft 365: Agentic AI where you workIntroducing the next-generation AWS VPN Client with CLI support and admin controlsAWS Certificate Manager will discontinue email validation to prove domain validation for certificatesHow AWS IAM role manager rethinks the starting point for IAM rolesHow to authenticate customers during chat with Amazon Connect CustomerHow WeatherBug reduced storage costs by 80% using Amazon S3 Storage Lens and Kiro CLIIntroducing the new AWS Cloud Quest: AI-powered practice, hands-on building, and a path to official AWS badgesTwo bulletins, one CVE, and Base64 bites C++

AWS Morning Brief for the week of August 10th, with Corey Quinn. Links:Amazon ECR now supports image layers up to 200 GBAWS Lambda announces scalable network bandwidth up to 3,000 Mbps for functions outside a VPCAWS Security Hub Extended adds supply chain security as its 10th categoryOpenAI GPT-5.6 Sol, Terra, and Luna now support 1 million token context windows on Amazon BedrockHow to understand and estimate combined AWS WAF and AWS Shield Advanced costsAmazon DynamoDB now supports real-time vector search at any scaleRuntime instances: persistent compute for production AI agents on Amazon Bedrock AgentCoreAmazon Connect Service Quota MonitorEnforcing data residency with single-Region Claude Code on Amazon BedrockReintroducing Network Firewall Proxy for Secure Egress ConnectivityAWS Supports Agent Plugins: An Open Standard for Portable Agent ExtensionsIntroducing Dogwood: runtime verification for AI agentsAWS partners with Anthropic and OpenAI to bring AWS Continuum into developer workflowsCaching KMS data keys in multi-thread environments: Per-tenant encryption for event-driven systems at scaleAccess Amazon S3 backup data directly using S3 Access Points in AWS BackupTwelve AWS bulletins, mostly AI toolingFrom weeks to minutes: How Formula 1® uses agentic AI on AWS to accelerate data operations

AWS Morning Brief for the week of August 3rd, with Corey Quinn. \Links:Amazon CloudWatch Logs now supports Application Load Balancer logsAWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in GAAWS announces aws-bench, an open-source benchmark for AI agents on AWSAWS Direct Connect now supports BGP route visibility on Virtual InterfacesAWS IAM Identity Center extends multi-Region support to Identity Center directoryAWS announces general availability of Policy-Based Routing on AWS Transit GatewayIAM Policy Simulator moves to the IAM console and adds additional capabilitiesAmazon Kinesis Data Streams now supports scaling down ingest capacity with warm throughputAccelerate Spark on EMR Serverless with larger workers and shuffle-optimized disksInstalling and updating the AWS CLI with single-line commandsDeploying Kimi K3 on AWSHow Amazon CloudFront delivered traffic for the FIFA World Cup 2026Amazon identifies North Korean hacker group behind open-source supply chain attacksAWS KMS or AWS CloudHSM: Choose the right key management solutionAWS Shield Advanced is embracing the AWS WAF Anti-DDoS managed rule group: What changes and how to prepareSecure your npm and pip package updates in Amazon LinuxAWS security bulletins: patching the patch

AWS Morning Brief for the week of July 26th, with Corey Quinn. Links:Amazon ECS now provides Action Logs for deployment and orchestration visibilityAmazon Managed Service for Prometheus supports 1.5B active metrics and 200K rules per workspaceAmazon SES introduces pricing plansAWS Network Load Balancer now supports Listener Rules for custom traffic routingAWS Organizations increases RCP quota to 2,000 per organizationAWS now supports automatic credit memo application preferencesAWS Secrets Manager now publishes secret update notifications to Amazon EventBridgeJVM memory, CPU, and classpath best practices for Java containers on AWSConnection pooling strategies in Amazon Aurora DSQLCustom OS installation now available on AWS DeepRacer devicesThermodynamic sampling of disordered materials with an analog Hamiltonian Rydberg simulatorUnlocking data residency use cases with Amazon S3 in AWS Local ZonesAWS Security Bulletins: New Tools, Ancient Failures

AWS Morning Brief for the week of July 20th, with Corey Quinn. Links:Amazon CloudWatch Logs announces intelligent tiering for storageAmazon Cognito now supports importing users with password hashesIntroducing Amazon GuardDuty AI Protection for AWS AI workloadsAWS Organizations now applies account departure security controls by default for new organizations created via AWS Organizations consoleAWS Lambda announces self-managed code storageAmazon S3 removes 30-day minimum for transitions to S3 Standard-IA and S3 One Zone-IAAmazon SQS turns 20: Two decades of reliable messaging at scaleAnnouncing Lambda MicroVMs: serverless compute environments with VM-level isolation and near-instant startupEliminating Java cold starts with AWS Lambda Managed InstancesIntroducing open source Bulk Executor for Amazon DynamoDBAutomating CIDR expansion: Reducing IP exhaustion downtimeSetting up Layer 2 Networking on Amazon EC2Security Hub adds AI workload protection and multicloud support for Microsoft AzureFive CVEs and the Agentic AI Security Reckoning

AWS Morning Brief for the week of July 13th with Corey Quinn. Links:AWS Security Hub extends unified security management to Microsoft AzureAmazon EKS Auto Mode reduces GPU management fees by up to 60%Amazon RDS for Oracle now supports Oracle Database 26aiAWS Builder Center Now Offers Free Sandbox EnvironmentsAWS Security Hub now offers Network Scanning to identify publicly reachable resourcesAmazon Cognito now supports self-service provisioned API rate limitsAWS Security Hub adds impact analysis for exposure findingsBlazing a Trail: How Peloton Rebuilt the SDLC for the Agentic Era with Amazon BedrockHow United Airlines solved IP exhaustion with Private NAT GatewayBuilding secure AI agents at scale: Introducing Loom for AWSWhat does it cost to answer one question? Measuring per-request cost in agentic workloadsDesigning for the inevitable: System prompt leakage and mitigations in generative AI applicationsThe CISO’s guide to post-quantum mandates and migrationsTwo CVEs on the theme of guarding keys badly

AWS Morning Brief for the week of July, 6th with Corey Quinn. Links:Announcing general availability of Amazon WorkSpaces for AI agentsAmazon CloudWatch supports creating alarms from log queriesECS Service Connect now supports Zone-Aware routingHow InterWiz reduced AI costs by 90% with Amazon BedrockAccelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express modeAutomate public TLS certificate issuance with ACME support in AWS Certificate ManagerUpgrade Amazon EKS clusters with confidence using Kubernetes version rollbacksSafely Releasing Frontier Models to CustomersAccelerating government FinOps with Amazon QuickFour CVEs: AWS reads half your request, leaks the rest