Access Denied, Now With a Good Reason

AWS Morning Brief for the week of March 30th, with Corey Quinn. Links:Amazon Aurora PostgreSQL now available with the AWS Free TierAmazon EKS announces 99.99% Service Level Agreement and new 8XL scaling tier for Provisioned Control Plane clustersAWS Lambda increases the file descriptor limit to 4,096 for functions running on Lambda Managed InstancesThe AWS Advanced JDBC Wrapper now supports automatic query caching with ValkeyAnnouncing Amazon Aurora PostgreSQL serverless database creation in secondsEnhancing auto scaling resilience by tracking worker utilization metricsAmazon CloudFront flat-rate pricing plans: new features and expanded capabilitiesIAM policy types: How and when to use themPreparing for agentic AI: A financial services approach

AWS Morning Brief for the week of March 23rd, with Corey Quinn. Links:Amazon Corretto 26 is now generally availableAmazon SimpleDB now supports exporting domain data to Amazon S3AWS CDK Mixins is now generally availableAWS Lambda Managed Instances now supports RustAmazon CloudWatch Logs now supports log ingestion using HTTP-based protocolAWS Lambda now supports Availability Zone metadataExpanding the BOX Program to Business Consulting and Advisory PartnersTwenty years of Amazon S3 and building what’s nextSynchronizing a Backup on-premises Db2 Server with Amazon RDS for Db2AWS and NVIDIA deepen strategic collaboration to accelerate AI from pilot to productionMigrate from Amazon Nova 1 to Amazon Nova 2 on Amazon BedrockEssential security controls to prevent unauthorized account removal in AWS OrganizationsDemystifying Amazon VPC peering chargesAWS and Others Invest $12.5M to Defend the Open Source Ecosystem from AI ThreatsAmazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls20 years of Amazon S3: A storage professional’s journey to AWS HeroCVE-2026-4270 - AWS API MCP File Access Restriction BypassCVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter ToolkitArbitrary code execution via crafted project files in Kiro IDECVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error

AWS Morning Brief for the week of March 16th, with Corey Quinn. Links:Amazon CloudWatch Logs announces increased query concurrency and API limitsIntroducing Amazon Connect Health, Agentic AI Built for HealthcareAmazon Route 53 Global Resolver is now generally availableAWS simplifies IAM role creation and setup in service workflowsDatabase Savings Plans now supports Amazon OpenSearch Service and Amazon Neptune AnalyticsAWS Elastic Beanstalk now offers AI-powered environment analysisAWS Elastic Beanstalk launches Deployments tab with in-progress deployment logsMulti-party approval now supports approval team baseliningAWS announces pricing for VPC Encryption ControlsThe Hidden Price Tag: Uncovering Hidden Costs in Cloud Architectures with the AWS Well-Architected Framework

AWS Morning Brief for the week of March 2nd, with Corey Quinn. Links:Amazon Aurora DSQL launches Playground for interactive database exploration Amazon Redshift Serverless introduces 3-year Serverless ReservationsAmazon S3 now provides AWS source region information in server access logs AWS Compute Optimizer now applies AWS-generated tags to EBS snapshots created during automationAWS Lambda Durable Execution SDK for Java now available in Developer PreviewAWS Trusted Advisor now delivers more accurate unused NAT Gateway checks powered by AWS Compute Optimizer6,000 AWS accounts, three people, one platform: Lessons learnedPetabyte-Scale Cost Optimization: How a Video Hosting Platform Saved 70% on S3Transform live video for mobile audiences with AWS Elemental Inference Migrate Amazon EC2 to ECS Express Mode using Kiro CLI and MCP servers AI-augmented threat actor accesses FortiGate devices at scaleAWS posts “correct the record” piece on AI bot outage

AWS Morning Brief for the week of February 23rd, with Corey Quinn. Links:Amazon Bedrock expands support for AWS PrivateLinkAWS CloudWatch Alarm Mute Rules eliminate alert fatigueAmazon EC2 supports nested virtualization on virtual Amazon EC2 instancesAnnouncing Amazon DocumentDB long-term support (LTS) on 5.0AWS Certificate Manager updates default certificate validity to comply with new guidelinesClaude Sonnet 4.6 now available in Amazon BedrockKiro is now available in AWS GovCloud (US) RegionsAmazon EC2 Hpc8a Instances powered by 5th Gen AMD EPYC processors are now availableIntroducing VPC encryption controls: Enforce encryption in transit within and across VPCs in a RegionMigrating from AWS App Runner to Amazon ECS Express ModeIntroducing Agent Plugins for AWSBuild unified intelligence with Amazon Bedrock AgentCoreReduce unexpected AWS costs: Tracing AWS billing charges with log correlation techniques

AWS Morning Brief for the week of February 17th, with Corey Quinn. Links:Amazon Aurora DSQL is now available in additional AWS RegionsAmazon Bedrock adds support for six fully-managed open weights modelsAWS Config now supports 30 new resource typesAnnouncing new Amazon EC2 general purpose M8azn instancesAWS Network Firewall announces new price reductionsAmazon S3 Tables add partition and sort order definition in the CreateTable APIAmazon Athena adds 1-minute reservations and new capacity control featuresBuilding fault-tolerant applications with AWS Lambda durable functions Simplify cross-account stream processing with AWS Lambda and Amazon DynamoDBAutomated Reasoning checks rewriting chatbot reference implementationMastering Amazon Bedrock throttling and service availability: A comprehensive guideReservoir computing on an analog Rydberg-atom quantum computer

AWS Morning Brief for the week of February 9th, with Corey Quinn. Links:Change the server-side encryption type of Amazon S3 objectsAnnouncing memory-optimized instance bundles for Amazon LightsailAmazon RDS now provides an enhanced console experience to connect to a databaseAWS Multi-party approval now requires one-time password verification for votingAWS Management Console now displays Account Name on the Navigation barStructured outputs now available in Amazon BedrockAmazon EC2 C8id, M8id, and R8id instances with up to 22.8 TB local NVMe storage are generally available AWS IAM Identity Center now supports multi-Region replication for AWS account access and application useTrigger AWS Lambda functions from Amazon RDS for SQL Server database eventsAmazon CloudFront now supports mTLS authentication to originsBevar Ukraine: Empowering Ukrainian refugees with AI-powered support on AWSSecurity Findings in SageMaker Python SDK

AWS Morning Brief for the week of February 2nd, with Corey Quinn. Links:AWS Network Firewall now supports GenAI traffic visibility and enforcement with Web category-based filteringMore room to build: serverless services now support payloads up to 1 MBIntroducing pre-warming for Amazon Keyspaces tablesManaging IP address exhaustion for Amazon RDS ProxyStrategies for upgrading Amazon Aurora PostgreSQL and Amazon RDS for PostgreSQL from version 13File integrity monitoring with AWS Systems Manager and Amazon Security Lake

AWS Morning Brief for the week of January 26th, with Corey Quinn. Links:AWS on Customer Choice & MulticloudAWS Adds Policy Details to Access Denied ErrorsAmazon ECR Cross-Repository Layer SharingAmazon RDS Blue/Green Deployments (<5s downtime)S3 Storage Lens Now in GovCloud (US)Enterprise-Scale Migration to Apache IcebergKafka-Based Oracle LOB Migration to AWSAurora PostgreSQL Shared Plan Cache

AWS Morning Brief for the week of January 20th, with Corey Quinn. Links:Unanchored ACCOUNT_ID webhook filters for CodeBuildAmazon EBS now supports up to four Elastic Volumes modifications in 24 hoursAWS Databases are now available on v0 by VercelAWS Lambda announces cross-account access for DynamoDB StreamsEnhanced Transactions view now available in AWS Billing ConsoleAWS Data Exports adds granular operation visibility for Amazon Bedrock model usageAmazon EC2 X8i instances powered by custom Intel Xeon 6 processors are generally availableOpening the AWS European Sovereign CloudAWS Organizations now supports upgrade rollout policy for Aurora and RDSProvision Oracle Database@AWS stack using AWS CloudFormationCLI v1 Maintenance Mode AnnouncementCVE-2026-0830: Command Injection in Kiro GitLab Merge Request Helper