AWS News Weekly

Flo Motlik - theserverlessway.com

Weekly Summaries of all AWS News and Releases

Play

Open in

20 episodes
weekly
Avg 18 min
English

Episodes 20

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Monday · 14 min
AWS News Sep 21 - Sep 27
This week: Claude Opus five point five lands in Amazon Bedrock alongside OpenAI's new GPT six Sol and Luna models, CloudWatch Omni brings AI-first observability built on OpenTelemetry, and EventBridge relaunches custom event buses with strict ordering and cross-account sharing. Plus DynamoDB multi-region strong consistency expands to fifteen regions, and EMR gets Long Term Support releases. AI & ML Bedrock: Claude Opus 5.5, fewer tokens, cheaper than Opus 5; in GovCloud Bedrock: OpenAI GPT-6 Sol & Luna, 1M-token context Bedrock Knowledge Base: Salesforce & Zendesk native connectors SageMaker HyperPod: Inference Gateway, up to 82% lower first-token latency Glue Data Quality: GenAI rule recommendations in seconds Observability CloudWatch Omni: GA, AI-first OpenTelemetry observability incl. Azure ECS: Live deployment timeline for canary/linear/blue-green, free DataSync: Free dashboard for all task executions Security & Compliance Network Security Manager: GA, org-wide WAF/Shield, auto drift fixes RDS PostgreSQL: Post-quantum TLS key exchange (v18+) EVS: FedRAMP Class C in US regions Security Hub: AI Inventory finds AI assets on Azure VMs IAM: Outbound federation OIDC discovery via VPC endpoints Transcribe: Customer-managed KMS keys for vocabularies/models Databases DynamoDB: Multi-region strong consistency in 15 regions, zero RPO RDS SQL Server Dev: Multi-AZ Always On AGs, no Enterprise license RDS: MySQL 5.7.44/8.0.46 Extended Support; SQL Server 2022 CU26 RDS Preview: PostgreSQL 19 Beta 4 ElastiCache Global Datastore: Tagging & tag-based access control Analytics & Streaming EMR: LTS releases, 36 months of fixes; Spark 4.1 + Iceberg v3 EMR 7.14: Spark 3.5.8, IPv6 & Spark Connect on EKS, 1TiB serverless Kinesis Data Streams: Service-managed partition keys, no hot shards EventBridge: New custom bus: cross-account, ordering, 1-yr retention Contact Center & Messaging Connect: Multi-agent AI via A2A protocol; routing step analytics End User Messaging: WhatsApp voice calls End User Messaging & SES: Agent skills for AWS MCP Server AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
August 17 · 15 min
AWS News Aug 10 - Aug 16
This week: EC2 launches application status checks for monitoring app-level health directly alongside instance checks, IAM introduces Account Access Manager for assigning roles to Identity Center users, and S3 now shows the specific policy ARN in access denied errors for faster troubleshooting. Plus new SageMaker JumpStart models, Bedrock cost allocation by IAM principal, and QuickSight adds deny-by-default for AI capabilities. Compute & Infrastructure EC2: App status checks monitor web servers/Docker; Auto Scaling replaces unhealthy instances EKS: Tune control plane params for pod placement and autoscaling Spot: Placement score now includes Local Zones Storage & Database RDS MariaDB: 12.3 LTS with Oracle TO_DATE compatibility, JSON validation RDS Oracle: APEX 26.1 low-code support Redshift: 2.4x faster at 30% lower cost AI/ML - SageMaker JumpStart GLM 5.2 FP8: 1M token context for agentic tasks NVIDIA Nemotron: Nano 12B (6x throughput), 3.5 Lightning 30B (4x throughput) Qwen: AgentWorld 35B, 3.5 122B multimodal (262K context) Specialized: GLM OCR, LightOn OCR, Redis langcache-embed, JetBrains Mellum2, FLUX 2, Gemma 4 12B AI/ML - Bedrock OpenAI Daybreak: Cyber defense models (Blue/Red) with chip-level security Cost allocation: IAM principal tagging for bedrock-mantle endpoint Security & Identity IAM: Account access manager (Identity Center + IAM roles), Role manager auto-creates service roles S3: Access denied errors show specific blocking policy ARN ACM: Switch email→DNS validation without reissuing Secrets Manager: Auto-rotation for Jenkins/SonarQube tokens Analytics & BI QuickSight: Purview DLP integration, deny-by-default for AI, per-user limits Clean Rooms: Privacy-enhanced SQL logs, custom aggregation thresholds Glue: One-click jump to SageMaker Unified Studio Management & Cost Console: Interactive global map for regions/local zones Billing: 5 preconfigured dashboards (cost trends, compute, database, reservations) Marketplace: Customizable notifications by category/channel Networking & Migration VPN Client v6: CLI support, admin controls, OpenVPN 3 Elastic DR: Auto-preserves UEFI boot mode for Linux SES: Custom URL paths for mobile deep linking AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
August 10 · 23 min
AWS News Aug 03 - Aug 09
This week: DynamoDB adds native vector search with single-digit millisecond latency, Amazon Bedrock brings OpenAI GPT models with million-token context windows, and Aurora Serverless now scales to 12 ACUs in under a second. Plus ECR supports 200GB image layers, Lambda gets 3Gbps bandwidth, and Bedrock AgentCore launches in GovCloud. Databases DynamoDB: Native vector search, single-digit ms latency, 99%+ recall, trillions of vectors Aurora Serverless: Scales to 12 ACUs in ElastiCache: Graviton4 nodes—47% higher throughput, 43% lower P99 latency Neptune: Air-gapped backup vaults with immutable storage, cross-account/region copy AI/ML Bedrock: OpenAI GPT 5.6 models (Sol/Terra/Luna), 1M token context, built-in web search SageMaker AI: Full fine-tuning for 25+ models (Llama, Gemma, Qwen); G7 instances with Blackwell GPUs Bedrock AgentCore: Temporal policies, rate limiting, EC2 self-hosted option, GovCloud support ECR: 200GB image layers—embed LLMs in single layer Compute & Containers Lambda: 3Gbps bandwidth (non-VPC), 10K SQS pollers (5x increase) ECS: Fractional NVIDIA L4 GPUs (1/8th slices) for small inference GameLift: Shareable stream URLs, 21 new instance types Security Security Hub Extended: Supply chain security category (Chainguard, Socket) Network Firewall: Built-in explicit forward proxy mode WAF: Miggo + Salt Security managed rules for AI/API protection VPC IPAM: BGP route monitoring, automated RPKI/ROA management Analytics & Data Glue Catalog: Iceberg export to S3 Tables, semantic search with KMS QuickSight: Multi-dataset topics with runtime joins MSK: Free authorizer logs for Provisioned clusters OpenSearch: Network-restricted UI access via IAM conditions Developer Tools Transform: SQL Server→Aurora PostgreSQL conversion; GA for tech debt remediation Lambda Console: Kiro + Cursor IDE integration EMR: Interactive Spark sessions via Spark Connect Operations S3 Backup: Direct access via Access Points—no restore needed RDS: Storage initialization progress visibility; SQL Server audit logs to CloudWatch IAM Identity Center: One-click multi-Region setup; skip account access option WorkSpaces: Enhanced CloudWatch metrics (free) AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
August 3 · 16 min
AWS News Jul 27 - Aug 02
This week: AWS launches Amazon Interconnect for purpose-built multicloud connectivity with Oracle and Google Cloud. MSK Express brokers now deliver Kafka data directly to S3 and Iceberg tables, cutting costs up to 60 percent. Transit Gateway adds policy-based routing for traffic steering by source, destination, and protocol. Plus IAM Identity Center gets multi-region replication and Bedrock drops GPT 5.6 prices up to 80 percent. Database RDS SQL Server: Restore TDE-encrypted DBs directly to Multi-AZ instances Neptune: Tag-based IAM access control for cluster isolation S3 Tables: Iceberg V3 Variant type for schema-free JSON ingestion OpenSearch 3.7: 1-bit vector quantization, faster retrieval via doc values Directory Service: In-place Standard→Enterprise upgrade (5K→500K objects) Redshift RG: Graviton instances on trailing track, 2.4x faster at 30% lower cost Aurora DSQL: Multi-Region active-active clusters in more locations Compute & Containers EKS: Private OIDC via PrivateLink, no internet egress needed EKS Provisioned: HPA processing 40x faster for autoscaling objects EC2 Auto Scaling: Instance refresh as CloudFormation update policy Lambda: Java 8/11/17 on AL2023 (AL2 patched through June 2027) AI/ML Security Hub MCP: Claude Desktop integration for exposure findings Bedrock GovCloud: Grok 4.3, Gemma 4 (31B/26B/2B) models Bedrock: GPT 5.6 price cuts—Luna 80%, Terra 20% SageMaker Studio: Full Git version control across all editors Data & Analytics Glue DQ: Distribution Analyzer histograms, ML anomaly detection Glue REST API: VPC connections, filter pushdown, partitioning DataSync Enhanced: EFS, FSx Lustre, HDFS, Azure Blob, Hyper-V support MSK Express: Native S3 delivery + Iceberg tables, 60% cost reduction Redshift Data API: Long polling, ListSessions, batch auto-commit Networking Transit Gateway: Policy-Based Routing by source/dest IP, port, protocol Direct Connect: View BGP routes with AS path and community values Amazon Interconnect: Oracle Cloud GA, Google supported, Azure 2026 Security & Identity WAF: Pre-parse transforms, 10 new options including SHA-256 IAM Identity Center: Multi-region replication for built-in directory IAM Policy Simulator: Console integration, SCP testing, what-if scenarios Storage & Transfer EFS: Cross-account replication in GovCloud AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
July 27 · 19 min
AWS News Jul 20 - Jul 26
This week: RDS adds SQL Server 2025 with native AI integration for calling Bedrock directly from T-SQL, Lambda durable functions hit GA for .NET with year-long pause support, and CloudWatch now tracks AI coding agent metrics across your org. Plus EKS Auto Mode gains EFA support, Secrets Manager events flow directly to EventBridge, and Claude Opus 5 arrives on Bedrock. Compute EC2 I8ge: Graviton4, 60% better compute, 55% better storage I/O, 60% lower latency EKS Auto Mode/Karpenter: EFA support, placement groups for node pools Lambda Durable Functions: GA for .NET, pause up to 1 year, KMS CMK encryption ECS Action Logs: Timestamped deployment visibility, Amazon Q root cause analysis ECS Service Connect: Zone-aware routing, reduces cross-AZ costs (default for new) AI/ML Claude Opus 5: Available on Bedrock, hours-long autonomous agents Claude Sonnet 5: Now in GovCloud on Bedrock SageMaker G7: RTX PRO 4500 Blackwell, 4.6x inference vs G6 SageMaker G7e: 8 RTX PRO 6000 GPUs, 768GB memory, 70B params single-node SageMaker G6: Now in GovCloud with L4 GPUs Bedrock AgentCore: Unified telemetry to single CloudWatch log group Data Exports: Standardized Bedrock metadata (model, pricing, inference type) Kiro: Opus 4.8 + Sonnet 5 in GovCloud with usage dashboards aws-bench: Open-source AI agent benchmark for cloud tasks Database RDS SQL Server 2025: Native AI/REST from T-SQL, Standard up to 32 cores, vector type RDS MySQL 9.7: Preview environment available Storage & Data KNFSD File Cache: Preview, NFS caching on AWS, VPC-speed reads Managed Prometheus: 1.5B active time series, 200K rules per workspace Apache Flink 2.3: Adaptive partitions, better CDC handling Networking NLB: Listener rules for source IP type routing, preserves client IP Direct Connect Peru: First 100Gbps location in Lima with MACsec Security & Management CloudTrail: Filter network events by identity for VPC endpoint logging Secrets Manager: Direct EventBridge events on value changes Organizations: 2000 RCPs per org (2x increase) Entity Resolution: Real-time advanced matching in milliseconds Developer Tools CloudWatch Coding Agent Insights: Track AI tool ROI, token alerts SageMaker Unified Studio: OpenSearch integration AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
July 13 · 18 min
AWS News Jul 06 - Jul 12
This week: Security Hub expands to monitor Microsoft Azure resources alongside AWS with unified posture management, Systems Manager now connects and manages Azure VMs without manual agent installation, and ACM launches a fully managed ACME server for automated TLS certificate issuance. Plus RDS for Oracle 26ai brings Bedrock integration, and Aurora Dsql adds real-time CDC to Kinesis. Security & Identity Secrets Manager: Auto-rotation for Paddle API keys, GitLab tokens ACM: Managed ACME server for automated TLS via Certbot/cert-manager Security Hub: Blast radius mapping, attack chain graphs Security Hub: Azure resource monitoring (VMs, containers, identities) Security Hub: Network scanning confirms actual internet reachability Organizations: Account departure controls enabled by default VPC: Centralized encryption-in-transit via declarative policies Compute & Containers EKS Auto Mode: GPU fees cut 35% (G-series), 60% (P-series) July 2026 ECS Managed: Same GPU fee reductions as EKS Auto Mode EMR Serverless: 2x worker limits (32 vCPUs, 244GB memory) EC2: Replace root volume directly from EBS, no snapshot needed AI/ML SageMaker Studio: One-click Hugging Face model import SageMaker HyperPod: Disaggregated prefill/decode for LLM inference SageMaker HyperPod: AMI-based Slurm config, deep health checks SageMaker Unified Studio: MWAA integration, 19 new workflow operators SageMaker Unified Studio: OpenLineage data lineage for IAM domains SageMaker Unified Studio: Custom asset cataloging (any format) SageMaker Feature Store: Batch ops for high-throughput ingestion Neuron 2.31: MX FP8, UltraServer Operator, 14 new kernels RDS Oracle 26ai: Bedrock integration, AI Vector Search, Select AI Data & Analytics Aurora DSQL: CDC streaming to Kinesis Data Streams Redshift: Graviton R8g, 2.4x faster, 30% cheaper MSK Replicator: External Kafka to MSK Standard brokers Management & DevTools Systems Manager: Azure VM management without agent install CloudWatch App Signals: Auto exception snapshots, latency anomalies Config: 191 new managed rules (Bedrock, SageMaker, EKS, etc.) AWS MCP Server: OAuth support, DMS Schema Conversion integration EMR on EKS: AI Spark troubleshooting agent Builder Center: Free 8-hour sandbox environments AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
July 6 · 20 min
AWS News Jun 29 - Jul 05
This week: EC2 C9g instances debut with fifth-gen Graviton delivering 25% better performance, Claude Sonnet 5 arrives on Bedrock with superior coding and agentic capabilities, and CloudFormation express mode cuts deployments by up to 4x. Plus OpenSearch gets a purpose-built log analytics engine with 4x better price-performance, and ECS adds zone-aware routing to cut cross-AZ costs. Compute EC2 C9g/C9gd: Graviton 5, 25% faster than G4, 35% faster ML inference EC2 Dedicated Hosts: AMD SEV-SNP confidential computing support EC2 Auto Scaling: Reservations-then-balanced strategy for capacity reservations Time Sync: Microsecond accuracy on 26 more instance types AI/ML Claude Sonnet 5: On Bedrock, better multi-file code changes, fewer corrections Bedrock AgentCore: 5K concurrent sessions, 200 interactions/sec default quotas Bedrock AgentCore Gateway: WAF integration for agent protection SageMaker: Serverless fine-tuning for Gemma 4 models (4B, 31B) SageMaker Inference: Auto image caching, 50% faster cold starts SageMaker HyperPod: Auto security patching, AMI version visibility Security Hub: 31 AI security controls for Bedrock/SageMaker GovCloud: GPT-5.4 (272K context), Nemotron 3 Super on Bedrock Containers EKS: Minor version rollback within 7 days ECS Express Mode: Custom task definitions supported ECS: Zone-aware Service Connect routing, deployment timeline UI ECS: Configurable circuit breaker thresholds Network Firewall: Native container rules (namespace, labels) Storage & Data S3 Logs: Direct to CloudWatch Logs and S3 Tables (Iceberg) OpenSearch: Log analytics engine, 4x price-performance, 70% less storage Neptune: Dual-stack IPv4/IPv6 support Operations CloudFormation: Pre-deployment validation in seconds CloudFormation Express: 4x faster deploys (CloudFront in seconds) CloudWatch Logs: Auto tag enrichment, query-based alarms CloudWatch Pipelines: OpenTelemetry metric transformations Security GuardDuty: File modification detection on EC2/EKS/ECS IAM Identity Center: Programmatic account access for apps RDS: Dynamic IAM auth scaling, no connection limits Networking Interconnect Last Mile: Preview with AT&T, automated branch connectivity AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
June 29 · 14 min
AWS News Jun 22 - Jun 28
This week: Lambda MicroVMs bring VM-level isolation to serverless for running untrusted code, GuardDuty adds AI-powered investigations to help distinguish real threats from false positives, and CloudWatch Logs now accepts syslog directly from network devices without agents. Plus Outposts gets full lifecycle management in the console and new OpenAI models hit Bedrock in GovCloud. Compute & Infrastructure Lambda MicroVMs: VM-level isolation for user/AI code, 8hr state, dedicated HTTPS endpoint EC2 AMI Watermarks: Custom watermarks persist through copies, track provenance SageMaker G7e: 8x RTX PRO 6000 Blackwell GPUs, 96GB each for LLM/agentic AI SageMaker G6e: 8x L40S GPUs, 2.5x better than G5, 13B param LLMs EMR Serverless: Update app configs without stopping running jobs AI & Machine Learning Bedrock GovCloud: OpenAI GPT, NVIDIA Nemotron models, FedRAMP High/IL4-5 Bedrock Guardrails: Auto-refine policies via iterative improvement workflows Bedrock AgentCore: Cross-account memory access via resource-based policies GuardDuty AI Investigations: 90-day analysis, MITRE ATT&CK mapping, confidence scoring Kiro GovCloud: FedRAMP High/IL4-5 for agentic AI development MSK AI Agent Skills: Expert guidance for troubleshooting, sizing, migrations Networking & Security CloudWatch Logs: Direct syslog ingestion via VPC endpoint, auto-parsing Network Firewall: Safer default drop action, VisionHeight managed rules Route 53 Global Resolver: Share DNS views cross-account via RAM Cognito: Customer-managed KMS keys for user pool encryption Data & Analytics S3 Backup: 8x faster cross-account/region copies via change tracking Neptune: CloudFormation support for global databases OpenSearch: AI-assisted migrations from Solr/Elasticsearch MSK Replicator: mTLS auth for external Kafka migrations Operations & Management CloudWatch Container Insights: OTel-based metrics every 30s for EKS CloudWatch Dashboards: Tagging support, ABAC via IAM IAM Identity Center: Separate quotas for accounts (7K) and apps (7K) Outposts: Full lifecycle management via console/CLI/API Other Updates HealthOmics: Nextflow profiles, ephemeral storage up to 3TB Connect: Agentic CX designer preview, Live Sync for guided experiences Batch: Instance priority control with new allocation strategies Swift IoT SDK: Native Apple/Linux support with TLS 1.3 AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
June 22 · 32 min
AWS News Jun 15 - Jun 21
This week: AWS launches Continuum for autonomous security vulnerability management, Bedrock AgentCore reaches GA with built-in guardrails and optimization tools, and S3 Vectors slashes query costs by up to 80%. Plus WAF introduces AI bot monetization, CloudWatch adds cross-account metrics replication, and new Graviton 5-powered M9g database instances deliver 30% better performance. Compute EC2 G7: GA, NVIDIA RTX PRO 6000 Blackwell, 4.6x better AI inference vs G6 RDS: M9g instances (Graviton 5), 30% better perf, up to 192 vCPU RDS X2m: Memory-optimized SQL Server, 50%+ licensing savings, 4TB RAM Outposts: bmn-cx3a bare-metal, AMD EPYC + 800Gbps networking ECS: Auto scaling 4x faster with 20-second metric resolution Storage & Data S3 Vectors: 80% lower query costs for 10M+ vectors, 10K results/query (100x increase) S3 Annotations: Up to 1GB JSON/XML/YAML metadata per object RDS SQL Server: GP3 volumes to 64TiB, 80K IOPS, 2000MB/s (4-5x increase) AI/ML Bedrock AgentCore: GA - harness, memory, web search, guardrails integration Bedrock Managed Knowledge Base: GA, 6 connectors, hybrid search Bedrock Guardrails: InvokeGuardrailChecks API, Automated Reasoning in Sydney Glue Catalog: AI-enriched tables with glossary terms, semantic search API Security AWS Continuum: Security Agent with simulated exploit validation Security Agent: AI threat modeling (STRIDE), IDE integration WAF: Traffic monetization for AI bots via x402 protocol Route 53: Palo Alto DNS Security integration (preview) Console Sign-in: Resource-based policies for network restrictions Observability CloudWatch: Cross-account metric replication, OpenTelemetry support, Query Studio GA CloudWatch Log Analytics: Unified Insights/Live Tail/Contributor console CloudWatch Synthetics: Multi-region canaries from single config Developer Tools Blocks: Open-source TypeScript framework, local-to-prod with zero changes DevOps Agent: Custom SRE agents, headless mode, release management (preview) Transform: Continuous modernization, mainframe workflows, Bedrock migration assessment Database Aurora/RDS MySQL: Extended support through June 2029 Oracle DB@AWS: Autonomous AI Database Serverless on Exadata AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
June 15 · 13 min
AWS News Jun 08 - Jun 14
This week: New Graviton5-powered M9g instances deliver 25% better compute with mathematically proven workload isolation, Claude Fable 5 brings autonomous AI agents to Bedrock, and Amazon Q now explains your cost anomalies and spending patterns in plain language. Plus Lambda Managed Instances hit most regions, CloudWatch Logs gets 23 new query commands, and VPC Flow Logs now captures resource tags directly. Analytics & Data Redshift: Snapshot billing now based on unique blocks, not total size Aurora DSequel: JSONB support with default compression DocumentDB 5.0.1: New aggregation operators, command-level CloudWatch metrics Aurora PostgreSQL 18.3: B-tree skip scans, parallel large transaction replication OpenSearch: MCP Apps for AI agents to query logs/traces/metrics Compute EC2 M9g/M9gd: Graviton5, 25% better performance, first Nitro Isolation Engine EC2 M8i/R8i: Bare metal sizes with 600Gbps network, 300Gbps EBS Lambda Managed Instances: EC2 pricing models for steady-state workloads ECS Managed Daemons: Inter-task visibility via pid/ipc mode settings AI/ML Bedrock: Claude Fable 5 (Mythos-class), Gemma 4 family (3 variants, 256K context) SageMaker: Serverless fine-tuning for Nemotron 3 Nano (30B params) EMR Serverless: Spark Connect interactive sessions QuickSight: Snowflake Cortex AI integration via MCP Cost & Observtic Cost Anomaly Detection: Amazon Q explains spending with CloudTrail correlation Cost Explorer: Q Developer integration for one-click spend analysis Compute Optimizer: Idle detection for 6 more services (DynamoDB, ElastiCache, etc.) Savings Plans Analyzer: Set coverage targets, compare scenarios CUR 2.0: Update table configs without recreating exports Observability CloudWatch Logs Insights: 23 new commands (hash, CSV/XML parsing, histograms) VPC Flow Logs: EC2 tags and next-hop metadata captured directly Application Signals: Health-ranked service maps, infra/logs/traces tabs Prometheus: Native histograms, out-of-order sample ingestion Migration & Management Application Migration Service: Renamed to Transform MGN Lake Formation: S3 file access using table permissions Workload Credentials Provider: Open source cert/secrets automation MWAA Serverless: EventBridge events for workflow state changes AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
June 8 · 19 min
AWS News Jun 01 - Jun 07
This week: OpenAI's GPT 5.5 and Codex land on Amazon Bedrock with full pricing parity, Cognito adds multi-region replication for resilient authentication, and ECS on Fargate scales up to 32 vCPUs for demanding workloads. Plus Bedrock AgentCore gets interactive terminal access for debugging AI agents, and the AWS MCP Server now supports multi-account workflows in a single session. Email & Messaging SES: Per-tenant suppression lists for bounce/complaint isolation AI/ML - Bedrock Bedrock: OpenAI GPT-5.5, GPT-5.4, Codex now GA Bedrock: CloudWatch metrics for OpenAI/Anthropic endpoints Bedrock: GPT-5.4 in GovCloud US West Bedrock AgentCore: BYOS from Secrets Manager with custom KMS/rotation Bedrock AgentCore: Interactive terminal access to agent sessions Bedrock Console: Redesigned with unified catalog, project-aware docs AI/ML - SageMaker HyperPod: EFA-only interfaces (no IP consumption for large clusters) HyperPod: AI coding assistant troubleshooting (Claude Code, Cursor, Kiro) Unified Studio: Custom IAM permissions boundaries for SCP compliance Unified Studio: 12 languages, quick setup under 20 seconds Unified Studio: Schedule notebook runs with AI troubleshooting Data Agent: Conversation history, Catalog business context integration SageMaker AI: Multi-turn RL for agentic fine-tuning (serverless) Compute & Containers ECS: Trainium/Inferentia support for Managed Instances ECS Fargate: 32 vCPU tasks with up to 244GB memory EKS: Kubernetes 1.36 (User Namespaces GA, in-place vertical scaling) EKS: CloudWatch Vended Logs for managed controllers PCS: Deep Learning AMI on Ubuntu 24.04 with NVIDIA/EFA/Lustre Networking & Storage Direct Connect: Per-VIF bandwidth limits (50Mbps-1.6Tbps) ElastiCache Valkey: Sync/async durability for data persistence Database RDS SQL Server: Bring Your Own Media for license mobility RDS DB2: Version 12.1 with free Community Edition Keyspaces: CDC iterator position for adaptive polling Analytics & BI QuickSight: Private VPC-hosted MCP server connections Q Research: Customer-managed KMS encryption CUR 2.0: Direct Athena/Redshift integration, no ETL AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
June 1 · 14 min
AWS News May 25 - May 31
This week: Major GPU upgrades hit SageMaker with P6 Blackwell and P5e H200 instances for AI training, OpenSearch Serverless scales 20x faster with scale-to-zero pricing for agentic workloads, and Claude Opus 4 arrives on Bedrock for complex autonomous coding tasks. Plus Shield Advanced adds packet-level DDoS forensics and SES now shows inbox placement metrics. Security & Compliance GuardDuty: Malware scan for S3 continuous backups, verify clean recovery points Shield Advanced: Packet-level DDoS forensics (IPs, ports, protocols) to S3/CloudWatch Backup: OTP verification required for multi-party approval on air-gapped vaults Organizations: CloudTrail events for account join/leave with change method details DynamoDB Streams: PrivateLink FIPS endpoints in GovCloud AI/ML Bedrock: Claude Opus 4.8 for agentic coding, longer autonomous runs Neuron 2.30: NKI 0.4 with Trainium 3, 22 new kernels, agentic model porting SageMaker notebooks: P6 B200 (8x Blackwell GPUs), P5en, P5, P4de instances Elemental Inference: Smart Subtitles - AI real-time captions, multi-language Database & Analytics RDS Multi-AZ: ENA Express replication, 25Gbps single-flow, lower latency Aurora MySQL: Kiro integration for natural language DB operations EMR: Spark 4.0.2, VARIANT types, Iceberg v3 lineage, Lake Formation RBAC Redshift Serverless: 4 RPU minimum ($1.50/hr) in more regions Networking & Infrastructure Interconnect multicloud: Free 500Mbps tier (160TB/month) IPAM: Tags on pool allocations for IAM/SCP governance IoT Core: Direct messaging API with delivery acknowledgements OpenSearch & Search OpenSearch Serverless: 20x faster scaling, scale-to-zero, 60% cost savings Contact Center Connect Profiles: AI post-contact summaries in 8 language families Connect Profiles: GenAI self-service evaluation with custom criteria Connect: Task scheduling up to 90 days, tag-based agent report access Operations Resilience Hub: 3-level app model, AI failure assessment, Organizations integration SES: Inbox placement metrics, blocklist monitoring, pre-send testing Cost Management: Budgets widgets in dashboards AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
May 25 · 14 min
AWS News May 18 - May 24
This week: Aurora MySQL 8.4 reaches GA with stronger security defaults, ECS deployments gain pause-and-continue controls for approval workflows, and Security Hub now detects unused IAM access across your organization. Plus DocumentDB Serverless gets major performance boosts, SAM CLI supports CloudFormation Language Extensions, and a new Istanbul Local Zone brings single-digit millisecond latency to Türkiye. Secrets & Identity Secrets Manager Agent: Pre-fetching for batch caching, IAM role assumption for cross-account Secrets Manager: Managed rotation for Datadog API keys and Snowflake tokens Security Hub: Detects unused IAM access across org, generates least-privilege policies Compute & Containers ECS: Pause/continue deployment controls with 14-day timeouts, approval workflows ECS + EBS: Now available in GovCloud regions Elastic VMware Service: 32 ESXi hosts per environment (2x increase) Lightsail CDN: IPv6-only instance origins supported Data & Analytics Redshift: Direct writes to Iceberg tables, ALTER TABLE for partitioning DocumentDB Serverless: v8.0 with 7x query latency, 30x faster vector index builds Aurora MySQL 8.4: GA with TLS 1.2/1.3 enforced, automated upgrade prechecks CloudWatch Logs Insights: 13 new commands (base64 decode, logfmt parse, geo distance) Keyspaces: Expanded to new Asia Pacific regions ML & AI SageMaker Studio: GPU reservation via Flexible Training Plans, up to 65% savings SageMaker HyperPod: Inference payload capture to S3 for training/evaluation SageMaker endpoints: OpenAI-compatible APIs (works with LangChain, Strands) SageMaker Unified Studio: Glue Data Quality rules, auto connector provisioning, business metadata Bedrock: Custom tagging for inference calls (team, project, environment) Infrastructure & Networking Local Zones: Istanbul launch (C7i, M7i, R7i, S3, EKS, ALB) Local Zones: Now in console region selector Managed Grafana: Dual-stack IPv4/IPv6 connectivity Transfer Family: Federated permissions with Identity Center multi-region Developer Tools SAM CLI: CloudFormation Language Extensions support (Fn::ForEach) ExtendDB: Open source DynamoDB adapter with PostgreSQL backend AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
May 18 · 19 min
AWS News May 11 - May 17
This week: AWS Transform adds containerized migration and an agentic AI assistant for .NET developers, Claude Platform launches as GA making AWS the first cloud to offer Anthropic's native experience, and EC2 M3 Ultra Mac instances bring Mac Studio hardware to the cloud. Plus CloudFormation's new cross-account output references, major SageMaker GPU instance expansions, and Organizations doubles SCP limits. Migration & Modernization Transform: Containerizes apps, generates Dockerfiles, Terraform, Helm charts Transform: Agentic AI assistant for .NET modernization in VS Toolkit Transform: Agent builder toolkit for custom modernization agents Transform: BYOB S3 storage with KMS encryption AI/ML Claude Platform: GA on AWS - first cloud with native Anthropic experience via IAM SageMaker: P6b200 instances (8 Blackwell GPUs, 1400GB HBM), 2x perf vs P5en SageMaker: Serverless fine-tuning for Qwen 3.6 (27B params) SageMaker Data Agent: IAM Identity Center support, generates Python/SQL from English SageMaker Feature Store: Python SDK v3 with Lake Formation access controls Bedrock: Advanced Prompt Optimization - compare across 5 models, multimodal support Security Agent: Full repo code review, reasons about architecture and trust boundaries Compute & Networking EC2 M3 Ultra Mac: GA - M3 Ultra chip, 28-core CPU, 256GB unified memory ENA Express: 25Gbps cross-AZ (was 5Gbps) Karpenter: ARC zonal shift integration for EKS Redshift RG: Graviton-powered, 2.4x faster, 30% lower cost, built-in data lake engine Database & Storage Aurora D-sequel: CDC preview - streams changes to Kinesis RDS Oracle: M8i/R8i with Standard Edition License Included FSx OpenZFS: Multi-AZ in shared VPCs for participant accounts Serverless & Events Lambda: Scheduled scaling via EventBridge Scheduler EventBridge Scheduler: 13 new services, 600+ API actions, 270+ total ARC Region Switch: Automates Lambda event source failover Networking & Security CloudFront: Premium tiers now self-service (500M-6B requests) CloudFront: OCSP revocation checking and mTLS passthrough mode WAF: Dynamic label interpolation, synthetic labels for IP/JA3/JA4 Organizations: 2x SCP limits (10 per node, 10K chars) CloudFormation: Fn::GetStackOutput for cross-account/region refs AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
May 11 · 26 min
AWS News May 04 - May 10
This week: ElastiCache adds built-in full-text and vector search with Valkey 9, SageMaker AI introduces agentic model customization that cuts deployment from months to days, and Bedrock AgentCore launches payment capabilities for autonomous AI agents. Plus major IAM quota increases, new M8 and R8 EC2 instances, and the AWS MCP Server goes GA. Compute EC2 I8ge: 60% better compute, 55% better storage/TB, 120TB NVMe, 60% lower IO latency EC2 R8idn/R8idb: 43% better compute/vCPU, 600Gbps network, 300Gbps EBS EC2 M8idn/M8idb: 43% better compute/vCPU, 600Gbps network, 300Gbps EBS RDS SQL Server: M8i/R8i (15% better price-perf), M8a/R8a (70% higher throughput) AI/ML SageMaker AI: Agentic model customization - months to days with coding agents Agent Toolkit: 40+ skills, managed MCP server with IAM guardrails (GA) AWS MCP Server: GA - any AWS API, sandboxed Python, IAM/CloudTrail integration Bedrock AgentCore: Autonomous payments (preview), file system mounts, memory metadata filtering Analytics QuickSight: S3 table buckets direct connect, Dataset Q&A text-to-SQL, NL dashboard generation ElastiCache Valkey 9: Full-text/vector hybrid search, 40% higher throughput Entity Resolution: Incremental ML matching - 95% faster (1M records/hour vs 2 days) OpenSearch: VPC egress for private connections, unused index insights Storage & Database Aurora D-sequel: PostgreSQL JSON type with compression RDS SQL Server: Readable replicas on multi-volume instances (256TiB) Networking VPC Lattice: Private domain-name targets via in-VPC DNS resolution Site-to-Site VPN: In-place bandwidth tier changes Route 53 Resolver: IPv6 DNS64 synthesis, dynamic region management Security & Identity IAM: Doubled quotas - 10K roles/policies/profiles, 700 OIDC providers Payment Cryptography: Cross-account key sharing JDBC Wrapper: Column-level KMS encryption plugin Operations EventBridge: PutEvents now in CloudTrail CloudWatch: Tag-based log group queries, mobile alarm investigation with AI Backup for EKS: 10x faster cluster backups Developer Tools SAM: WebSocket API support, BuildKit for container builds Neptune: One-click CloudShell connect AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
April 27 · 25 min
AWS News Apr 20 - Apr 26
This week: Lambda Durable Execution SDK brings year-long workflow checkpointing to Java developers, S3 adds ten checksum algorithms for data integrity, and CloudWatch Logs Insights now supports JOIN queries across log groups. Plus MSK Replicator gains external cluster migration, Aurora Serverless v4 delivers 30% better performance, and Bedrock AgentCore lets you prototype agents without orchestration code. Identity & Directory Managed Microsoft AD: Auto-upgraded to Windows 2016, adds LAPS support Managed Microsoft AD: Kerberos encryption audit logs to CloudWatch Migration & Landing Zone Transform: Automates Control Tower/Organizations/IAM setup, exports as CFN/CDK/LZA Contact Center Connect: Pass customer context into calls for instant recognition Connect Outbound: Hourly segment refresh, priority dialing by 10 attributes Connect: Agentic voice AI expands to 10 locales Connect: 8 new AI agent metrics (goal success, faithfulness, tool accuracy) Storage S3 Express One Zone: S3 Inventory support for directory buckets S3: 10 checksum algorithms added, auto-validates on upload Streaming & Kafka MSK Replicator: Enhanced logs, bidirectional sync, external Kafka→Express Observability CloudWatch Logs Insights: JOIN and sub-query across log groups CloudWatch Pipelines: Natural language log processor config Containers & Kubernetes EKS: 7 new IAM condition keys (private endpoints, KMS, version, deletion) EKS Hybrid Nodes: Gateway automates VPC-to-pod networking Database DocumentDB: In-place upgrade v5→v8, 7x faster queries, 5x compression Aurora Serverless: 30% faster, smarter scaling, scales to zero Compute & Lambda Lambda Durable Execution SDK: GA - checkpointing, pause up to 1 year Lambda: Mount S3 buckets as file systems via S3 Files EC2: Hide managed service resources from console/API IoT & Edge IoT Greengrass 2.17: Non-root Linux, nucleus lite (36→4MB), TPM 2.0 VMware & Windows Elastic VMware Service: Includes Windows Server licensing Backup & Governance Backup Policies: Direct targeting for Redshift Serverless, Aurora DSQL Location & Address Location Service: Bulk address validation (US/CA/AU/UK) with geocoding AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
April 20 · 9 min
AWS News Apr 13 - Apr 19
This week: AWS Interconnect goes multicloud with Google Cloud support and Azure coming in 2026, Secrets Manager adds post-quantum encryption to protect against future threats, and new C8in instances deliver 600 Gbps networking. Plus CloudWatch gets cross-region telemetry management and Aurora D-sequel launches a dedicated PHP connector. Networking Interconnect Last Mile: Branch/DC to cloud via Lumen, 1-100 Gbps dynamic scaling, MACsec default Interconnect Multicloud: GA - private links to GCP now, Azure/Oracle in 2026, free 500Mbps/region Elastic DR: IPv6 support for replication and control plane Compute EC2 C8in/C8ib: GA - 6th-gen Intel, 600Gbps network (C8in), 300Gbps EBS (C8ib), 43% faster than C6in EC2 C8gn/M8gn/R8gn: 48xlarge/metal now 120Gbps EBS, 480K IOPS (2x previous) Storage FSx: Cross-region backup copy now supports opt-in regions ECR Pull Through Cache: Auto-syncs OCI referrers (signatures, SBOMs, attestations) Analytics Redshift: Top-K query optimization via min/max block skipping, no config needed OpenSearch Serverless: Derived Source reduces storage by reconstructing _source on-the-fly CloudWatch Logs Insights: Parameterized saved queries, up to 20 params, chainable AI/ML SageMaker JumpStart: 3 models - Nemotron 120B, Qwen 3.5 9B/27B SageMaker JumpStart: Optimized deployments - pick cost/throughput/latency targets, 30+ models SageMaker HyperPod: Multi-instance-type groups with priority fallback Deadline Cloud: AI troubleshooting for render failures (Maya, Blender, Houdini, Nuke) Database Aurora dsql: PHP connector with IAM token gen, connection pooling, retry logic Security Secrets Manager: Hybrid post-quantum TLS (ML-KEM) against harvest-now attacks Observtic CloudWatch: Multi-region telemetry audit/enablement, org-wide rules Managed Grafana: v12.4 - drilldown apps, CloudWatch PPL/SQL, Scenes engine Enterprise Apps Q Business: Google Drive ACL enforcement with real-time permission checks QuickSight: Sheet tooltips for hover context; multi-account login (up to 5) Amazon Q: 5 simultaneous account sessions in browser AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
April 13 · 16 min
AWS News Apr 06 - Apr 12
This week: S3 Files transforms buckets into fully-featured file systems accessible from EC2, Lambda, and containers without data duplication. Lambda response streaming reaches all commercial regions for faster LLM apps, and Cost Explorer adds natural language queries powered by Amazon Q. Plus Bedrock's Claude Mythos Preview for cybersecurity and EKS warm pools for rapid scaling. Storage S3 Files: Mount buckets as file systems on EC2/Lambda/containers, EFS-backed low-latency S3: SSE-C disabled by default for new buckets; S3 Lifecycle: Auto-pauses expiration on failed replication objects AI/ML Bedrock: Claude Mythos Preview (gated); IAM user/role cost tracking Bedrock AgentCore Browser: OS-level automation (mouse, keyboard, system dialogs) Cost Explorer: Natural language queries via Amazon Q SageMaker Studio: Serverless Apache Airflow workflows; notebook import/export Compute Lambda: Response streaming now in all commercial regions (200MB payloads) EKS: Warm pools for managed node groups EC2 Capacity Manager: Tag-based metric grouping (5 custom keys) Database RDS Blue/Green: Proxy integration for faster switchover RDS Oracle: M8i/R8i instances (15% better price-perf); Oracle Management Agent 24.1 RDS SQL Server: Latest CU/security patches (2 CVEs) Aurora PostgreSQL: Versions 17.9, 16.13, 15.17, 14.22 OpenSearch Serverless: Zstandard compression (32% smaller indexes) OpenSearch: Graviton4 i8ge instances (60% better compute); unified observability Networking & Security ACM: Search certificates by domain/ARN/status Transfer Family: IPv6 support for SFTP/AS2 connectors Route 53 GovCloud: DNS delegation for private hosted zones Private CA: Custom RAM permissions for cross-account sharing Developer Tools Smithy-Java GA: Type-safe clients, Java 21 virtual threads Greengrass SDK: C/C++/Rust support ( Verified Permissions: Human-readable policy store aliases End User Computing WorkSpaces: Unique DNS per PrivateLink endpoint; AI-powered Advisor Other Braket: Rigetti 108-qubit processor IVS: Redundant ingest with failover Backup: FSx support in 5 new regions CloudWatch Pipelines: Conditional processing, keep-original for compliance AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
April 6 · 23 min
AWS News Mar 30 - Apr 05
This week: AWS announces lifecycle changes for several services including App Runner and Audit Manager entering maintenance mode, Amazon Security Agent brings autonomous penetration testing to GA, and DevOps Agent launches for automated incident resolution. Plus CloudWatch gets native OpenTelemetry support with PromQL querying, S3 Vectors expands to 31 regions, and Direct Connect adds CloudFormation support. Compute & Containers ECS Managed Daemons: Deploy security/observability agents independently, one per instance, runs before app tasks ECS Managed Instances: Instance store volumes for containers, reduces costs vs EBS Lightsail: Compute-optimized bundles up to 72 vCPUs for batch/ML/gaming Database & Storage S3 Vectors: Expands to 31 regions, 2B vectors/index, 100ms latency Aurora DSQL: Official .NET and Rust connectors with IAM auth RDS Oracle on Outposts: Fully managed on-prem with Multi-AZ across racks Oracle Database@AWS: Sub-millisecond latency networking for Exadata migrations AI/ML Amazon Security Agent GA: Autonomous pen testing across AWS/Azure/GCP/on-prem DevOps Agent GA: Resolves incidents, learns apps, cuts MTTR to minutes Bedrock AgentCore Evaluations: 13 built-in evaluators, CI/CD integration Bedrock Guardrails: Cross-account safeguards from central management Transform Custom GA: Codebase analysis for 1M+ LOC, 7 managed transformations OpenSearch: Agentic AI for log analytics, natural language queries Networking Direct Connect: CloudWatch BGP metrics, CloudFormation support, 100Gbps in NZ CloudFront: BYOIP IPv6 via IPAM, SHA-256 signed URLs Observability CloudWatch: Native OTLP metrics, Query Studio with PromQL, auto-enable logging CloudWatch Logs: Lookup command for enrichment, Security Hub CSPM ingestion Container Insights: OTel metrics for EKS, 150 labels, GPU/Trainium detection Security & Compliance Private CA: CloudWatch utilization metrics Sustainability Console: Carbon emissions data without billing permissions Messaging End User Messaging: RCS for Business with SMS fallback End User Messaging Notify: OTP in minutes, 200+ countries Service Lifecycle Maintenance mode Apr 2026: App Runner, Audit Manager, CloudTrail Lake, IoT FleetWise Sunset planned: RDS Custom for Oracle, WorkMail, WorkSpaces Thin Client AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com
March 30 · 15 min
AWS News Mar 23 - Mar 29
This week: Aurora PostgreSQL joins the AWS Free Tier with express configuration for instant serverless setup, Lambda Managed Instances gets a major boost to 32GB memory and 16 vCPUs, and Step Functions adds 28 new service integrations including Bedrock AgentCore. Plus SageMaker HyperPod continuous provisioning, ParallelCluster P6B300 support, and Amazon Q launches in Tokyo, London, and Frankfurt regions. Compute Lambda: 32GB RAM/16 vCPUs, 4096 file descriptors (4x increase) EC2 I8ge: Graviton4, 120TB NVMe, 60% better compute vs I3en GameLift: EC2 5th-8th gen instances (Graviton, DDR5) ECS: FIPS compliance on Graviton/GPU in GovCloud AI/ML Bedrock AgentCore: Managed session storage, Chrome policies, custom CA certs Bedrock: Palmyra Vision 7B model (document/chart analysis) SageMaker HyperPod: Continuous provisioning for Slurm clusters SageMaker: RLHF fine-tuning for 12 models (Qwen, DeepSeek, Llama) SageMaker Studio: Kiro/Cursor IDE support via AWS Toolkit SageMaker Batch: Quota management with job preemption Servertic/Step Functions Step Functions: 28 new services, 1100 API actions, Bedrock AgentCore integration Lambda Durable: Idempotent invocations from workflows Database Aurora PostgreSQL: Free Tier ($100 credits), express config (seconds to query) Aurora DSQL: Ruby pg gem connector with auto IAM tokens Storage & Data HealthOmics: Batch runs up to 100K workflows per request HealthImaging: Study/series-level IAM access control S3 Vectors: Automated ingestion via Step Functions Analytics Amazon Q: London, Frankfurt, Tokyo regions (data sovereignty) CloudWatch Logs IA: Data protection, OpenSearch PPL/SQL queries Timestream InfluxDB: CloudWatch metrics integration Networking & Security Route 53 Profiles: Granular IAM per resource type Firewall Manager: Asia Pacific New Zealand region Transfer Family: Async MDN for AS2 messaging Developer Tools ParallelCluster 3.15: P6b instances, Slurm 25.11 Storage Gateway Terraform: AL2023, IMDSv2 default AppConfig: User-targeted gradual rollouts Agent Plugin: Serverless guidance for Kiro/Claude/Cursor AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me For detailed show notes check out awsnewsweekly.com

Showing 1–20 of 20 episodes