Last Week In AWS Podcast

Corey Quinn

The latest in AWS news, sprinkled with snark. Posts about AWS come out over sixty times a day. We filter through it all to find the hidden gems, the community contributions--the stuff worth hearing about! Then we summarize it with snark and share it with you--minus the nonsense.

Listen in PodNod RSS feed Show website

20 episodes
Updated Monday

Episodes20

Newest first

Monday · 7 min
New Tools, Ancient Failures, Same Old AWS
AWS Morning Brief for the week of July 26th, with Corey Quinn. Links: Amazon ECS now provides Action Logs for deployment and orchestration visibility Amazon Managed Service for Prometheus supports 1.5B active metrics and 200K rules per workspace Amazon SES introduces pricing plans AWS Network Load Balancer now supports Listener Rules for custom traffic routing AWS Organizations increases RCP quota to 2,000 per organization AWS now supports automatic credit memo application preferences AWS Secrets Manager now publishes secret update notifications to Amazon EventBridge JVM memory, CPU, and classpath best practices for Java containers on AWS Connection pooling strategies in Amazon Aurora DSQL Custom OS installation now available on AWS DeepRacer devices Thermodynamic sampling of disordered materials with an analog Hamiltonian Rydberg simulator Unlocking data residency use cases with Amazon S3 in AWS Local Zones AWS Security Bulletins: New Tools, Ancient Failures
July 20 · 8 min
You Owe Your Country's GDP to AWS
AWS Morning Brief for the week of July 20th, with Corey Quinn. Links: Amazon CloudWatch Logs announces intelligent tiering for storage Amazon Cognito now supports importing users with password hashes Introducing Amazon GuardDuty AI Protection for AWS AI workloads AWS Organizations now applies account departure security controls by default for new organizations created via AWS Organizations console AWS Lambda announces self-managed code storage Amazon S3 removes 30-day minimum for transitions to S3 Standard-IA and S3 One Zone-IA Amazon SQS turns 20: Two decades of reliable messaging at scale Announcing Lambda MicroVMs: serverless compute environments with VM-level isolation and near-instant startup Eliminating Java cold starts with AWS Lambda Managed Instances Introducing open source Bulk Executor for Amazon DynamoDB Automating CIDR expansion: Reducing IP exhaustion downtime Setting up Layer 2 Networking on Amazon EC2 Security Hub adds AI workload protection and multicloud support for Microsoft Azure Five CVEs and the Agentic AI Security Reckoning
July 13 · 6 min
United Solved IP Exhaustion, You Won't Believe How
AWS Morning Brief for the week of July 13th with Corey Quinn. Links: AWS Security Hub extends unified security management to Microsoft Azure Amazon EKS Auto Mode reduces GPU management fees by up to 60% Amazon RDS for Oracle now supports Oracle Database 26ai AWS Builder Center Now Offers Free Sandbox Environments AWS Security Hub now offers Network Scanning to identify publicly reachable resources Amazon Cognito now supports self-service provisioned API rate limits AWS Security Hub adds impact analysis for exposure findings Blazing a Trail: How Peloton Rebuilt the SDLC for the Agentic Era with Amazon Bedrock How United Airlines solved IP exhaustion with Private NAT Gateway Building secure AI agents at scale: Introducing Loom for AWS What does it cost to answer one question? Measuring per-request cost in agentic workloads Designing for the inevitable: System prompt leakage and mitigations in generative AI applications The CISO’s guide to post-quantum mandates and migrations Two CVEs on the theme of guarding keys badly
July 6 · 4 min
AWS Discovers ACME Isn't Just Roadrunner Stuff
AWS Morning Brief for the week of July, 6th with Corey Quinn. Links: Announcing general availability of Amazon WorkSpaces for AI agents Amazon CloudWatch supports creating alarms from log queries ECS Service Connect now supports Zone-Aware routing How InterWiz reduced AI costs by 90% with Amazon Bedrock Accelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express mode Automate public TLS certificate issuance with ACME support in AWS Certificate Manager Upgrade Amazon EKS clusters with confidence using Kubernetes version rollbacks Safely Releasing Frontier Models to Customers Accelerating government FinOps with Amazon Quick Four CVEs: AWS reads half your request, leaks the rest
June 29 · 6 min
Open Governance for MySQL Plot Twist
AWS Morning Brief for the week of June 29th, with Corey Quinn. Links: Amazon CloudWatch launches OTel Container Insights for Amazon EKS Amazon GuardDuty AI-powered investigations accelerate threat response (Preview) Amazon Route 53 Global Resolver now supports sharing DNS Views between AWS Accounts Automate AWS Invoice Retrieval with New Programmatic APIs Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs Upgrading Lambda function runtimes at scale with AWS Transform custom Huntington Bank: Redacting sensitive data from 400M+ documents with AWS Open Governance for MySQL: A Step Forward for the Community How AWS and a local community organization built a developer engagement model that works Modernizing border control with digital arrival cards on AWS Cloud Prevent data exfiltration: AWS egress controls for cloud workloads Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs A new way to keep your AWS Certification current CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins
June 22 · 9 min
MySQL 5.7 Will Outlive Us All
AWS Morning Brief for the week of June 22nd, with Corey Quinn. Links: AWS Marketplace announces AI-assisted product listing Amazon CloudWatch introduces Log Analytics for unified log analysis Amazon EKS now supports customer-routed control plane egress Free Network Bandwidth Amazon GameLift Servers is Here! AWS announces AWS Blocks, an open-source framework for composing application backends on AWS (Preview) AWS Compute Optimizer enhances EBS volume recommendations with additional performance metrics Introducing AWS Continuum for security at machine speed AWS Management Console Private Access now works without internet connectivity AWS Security Agent announces support for Threat Modeling Grok 4.3 from xAI now available in Amazon Bedrock Amazon Aurora and RDS for MySQL expand Extended Support for MySQL 5.7 through June 2029 AWS Marketplace reduces listing fee for professional services to 0.5% S3 Vectors: More Results, Cheaper Queries, Fresh Fees Amazon S3 annotations: attach rich, queryable context directly to your objects Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs AWS DevOps Agent adds release management capabilities to assess code changes before production (preview) AWS WAF adds AI traffic monetization capability to help content owners charge AI bots for content access Simulating Amazon EC2 EBS burst credits before downsizing an instance AWS Security Bulletin Quartet: AI Tools Forget Unix 101
June 15 · 8 min
27 Security Bulletins and Other Bedtime Reading
AWS Morning Brief for the week of June 15th, with Corey Quinn. Links: AWS announces AWS Workload Credentials Provider Announcing the public preview of AWS FinOps Agent Introducing AI-Powered Cost Investigations For Cost Anomalies Amazon CloudWatch Logs Insights adds 23 new query commands and functions Introducing Target Coverage in Savings Plans Purchase Analyzer Introducing the AWS Credits Detail Page Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs AWS Nitro Isolation Engine: Formally verifying the hypervisor in the AWS Nitro System It’s safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore 27 AWS Security Bulletins: A Patch Tuesday That Lasted a Year
June 8 · 7 min
OpenAI on Bedrock and Other Strange Bedfellows
AWS Morning Brief for the week of June 8th, with Corey Quinn. Links: AWS Interconnect - multicloud now offers a free 500 Mbps tier Oracle Database@AWS is now available in twenty AWS Regions Amazon Cognito now supports multi-Region replication Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.36 Amazon SES now supports tenant-level suppression lists AWS Compute Optimizer now supports 32-day lookback for EBS volume and ECS service rightsizing recommendations AWS Cost and Usage Report 2.0 now supports Athena and Redshift integration Amazon ElastiCache for Valkey now supports durability Understanding how backups work in Amazon Aurora OpenAI models and Codex on Amazon Bedrock are now generally available How Bedrock Streaming optimizes its AWS costs From Monolith to Multi-Account: Pinterest’s AWS Organization Transformation Journey Gain visibility into DDoS attacks with flow logs in AWS Shield Advanced Identify unused AWS KMS keys and prevent accidental key deletions CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer
June 1 · 6 min
The Week AWS Remembered GovCloud Exists
AWS Morning Brief for the week of June 1st, with Corey Quinn. Links: Monitor AWS Budgets directly in Billing and Cost Management Dashboards with new Budgets widget Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications Optimize costs in Amazon Aurora How AWS DevOps Agent uses multi-agent reasoning to find root causes Claude Opus 4.8 is now available on AWS Best Practices for TCP Connection Management on EC2 Introducing US-based, US citizen, 24/7 technical support for AWS GovCloud (US) customers: Your mission never sleeps, neither do we Well-architected best practices for software supply chain security Automate Amazon EBS gp2 to gp3 migration at scale with AWS Step Functions and AWS Lambda AWS Organizations emits CloudTrail events for account membership changes CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing
May 26 · 5 min
AWS and Oracle Together at Last, Apparently
AWS Morning Brief for the week of May 25th, with Corey Quinn. Links: Amazon Bedrock expands support for request-level usage attribution Amazon ECS introduces pause and continue controls for service deployments AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in preview AWS Organizations now supports higher quotas for service control policies (SCPs) Amazon Aurora MySQL 8.4 is now generally available Introducing ExtendDB: An open source DynamoDB-compatible adapter with pluggable storage backends Nine Entertainment’s journey: Achieving 98% cost savings with Amazon ElastiCache Serverless for Valkey Announcing updated retry behavior for AWS SDKs and Tools Announcing AWS CDK Mixins: Composable Abstractions for AWS Resources CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin
May 18 · 7 min
M3 Ultra Macs, Claude Platform, and 619 New APIs Walk Into a Bar
AWS Morning Brief for the week of May 18th , with Corey Quinn. Links: Announcing general availability of Amazon EC2 M3 Ultra Mac instances Amazon EventBridge Scheduler adds 619 new SDK API actions, including Lambda Managed Instances Amazon Redshift launches RG instances powered by AWS Graviton Amazon Route 53 Domains adds support for 34 new Top Level Domains including .app, .dev, and .health. ENA Express for Amazon EC2 instances now supports traffic between Availability Zones Streaming CloudWatch metrics to VPC-based OpenTelemetry collectors using Lambda How HotelTrader cut inter-AZ cost 95% and latency by 49% with Valkey GLIDE on Amazon ElastiCache Introducing Claude Platform on AWS: Anthropic’s native platform, through your AWS account Amazon CloudFront Premium flat-rate pricing plan now supports higher, configurable usage allowances Scalable cross-cloud data migration to Amazon S3 with distributed rclone Dirty Frag and other issues in Amazon Linux kernels CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel Ongoing updates on Copy.fail and variants Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &amp: CVE-2026-8597)
May 11 · 6 min
AI-Native Foundations and the CVEs That Love Them
AWS Morning Brief for the week of May 11th , with Corey Quinn. Links: Announcing Agent Toolkit for AWS — help AI coding agents build effectively on AWS Amazon CloudFront Announces WebSocket Support for VPC Origins Amazon EventBridge supports data plane logging to AWS CloudTrail AWS IAM now provides higher maximum quotas for roles, role trust policies, instance profiles, managed policies, and identity providers AWS Marketplace now supports programmatic procurement with Agreements API The AWS MCP Server is now generally available Announcing Valkey 9.0 for Amazon ElastiCache Query billion-scale vectors with SQL: Integrating Amazon S3 Vectors and Aurora PostgreSQL You Wanted to Become AI-Native, and All You Got Was a Lousy Foundation CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent CVE-2026-31431
May 4 · 8 min
Bedrock Bags OpenAI, Q Developer Bags Groceries
AWS Morning Brief for the week of May 4th, with Corey Quinn. Links: AWS Management Console now supports settings to control service and Region visibility - AWS Amazon CloudWatch adds visual agent configuration to the EC2 console AWS Announces Amazon Connect Decisions Amazon Connect Talent for AI-powered hiring (now available in Preview) Introducing Amazon EC2 R8in and R8ib instances Amazon OpenSearch Service now supports index-level encryption Amazon Redshift Serverless AI-driven scaling is now the default for new workgroups AWS Cost Optimization Hub now supports CSV download AWS KMS now tracks last usage of all KMS keys AWS Lambda adds support for Ruby 4.0 AWS Marketplace Management Portal now supports bank account deletion Amazon Bedrock now offers OpenAI models, Codex, and Managed Agents (Limited Preview) Amazon CloudFront now supports invalidation by cache tag Introducing Amazon EC2 C8ine and M8ine instances Identifying security risks using AWS Cost and Usage Report data Amazon Q Developer end-of-support announcement Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912 Issues in tough library and tuftool CLI utility CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow CVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues
April 27 · 9 min
The Week AWS Discovered JOIN Statements
AWS Morning Brief for the week of April 27th, with Corey Quinn. Links: Amazon CloudWatch pipelines now supports configuration of processors via AI Introducing the Amazon EKS Hybrid Nodes gateway for hybrid Kubernetes networking Amazon EKS enhances cluster governance with new IAM condition keys Attributed Revenue Dashboard Now Available in AWS Partner Central AWS Lambda functions can now mount Amazon S3 buckets as file systems with S3 Files Amazon CloudWatch Logs Insights introduces JOIN and sub-query commands AWS Lambda Durable Execution SDK for Java GA Amazon S3 Express One Zone now supports S3 Inventory Amazon S3 now supports five additional checksum algorithms AWS Secrets Manager extends managed external secrets to MongoDB Atlas and Confluent Cloud Track Amazon Bedrock Costs by Caller Identity with IAM Principal-Based Cost Allocation Transforming FinOps with the Latest Amazon Q Cost Capabilities Aurora Serverless: Faster performance, enhanced scaling, and still scales down to zero From developer desks to the whole organization: Running Claude Cowork in Amazon Bedrock Get to your first working agent in minutes: Announcing new features in Amazon Bedrock AgentCore Automated network incident response with AWS DevOps Agent Accelerate development workflows with Amazon EBS Volume Clones Troubleshooting Amazon S3 access denied errors using Kiro CLI CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python
April 20 · 5 min
Multicloud Interconnect and the Great CVE Hunt
AWS Morning Brief for the week of April 20th, with Corey Quinn. Links: Amazon CloudWatch now supports cross-region telemetry auditing and enablement rules Introducing Amazon EC2 C8in and C8ib instances Amazon Quick now supports multi-account sign-in within the same browser Amazon WorkSpaces Personal and Amazon WorkSpaces Core are now available in two additional AWS Regions AWS announces general availability of AWS Interconnect - multicloud Automate AWS Cost Reporting with Scheduled Dashboard Email Delivery Introducing Anthropic’s Claude Opus 4.7 model in Amazon Bedrock Introducing Amazon Bio Discovery CVE-2026-5429 - Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme Issues with Amazon Athena ODBC Driver Issues with AWS Research and Engineering Studio (RES) CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport
April 13 · 6 min
S3 Files and an AI-Powered Singing Rat Trap
AWS Morning Brief for the week of April, 13th with Corey Quinn. Links: AWS Certificate Manager now supports native certificate search Amazon S3 Lifecycle pauses actions on objects that are unable to replicate Amazon Bedrock now offers Claude Mythos Preview (Gated Research Preview) Amazon OpenSearch Serverless now supports Zstandard (zstd) codec for index compression AWS Secrets Manager console now supports custom input for AWS KMS keys Amazon Bedrock now supports cost allocation by IAM user and role Amazon S3 starts rolling out new security best practice to new and existing buckets by default Introducing AI-Powered Cost Analysis in AWS Cost Explorer Launching S3 Files, making S3 buckets accessible as file systems The future of managing agents at scale: AWS Agent Registry now in preview Understanding Amazon Bedrock model lifecycle Introducing OpenTelemetry & PromQL support in Amazon CloudWatch
April 6 · 5 min
S3 Gets Vectors, CloudFront Gets SHA-256, You Get the Bill
AWS Morning Brief for the week of April 6th, with Corey Quinn. Links: Announcing Amazon RDS for Oracle on AWS Outposts AWS Direct Connect now supports AWS CloudFormation AWS Service Availability Updates Amazon S3 Vectors expands to 17 additional AWS Regions Amazon CloudFront now supports SHA-256 for signed URLs and signed cookies Amazon CloudWatch now supports OpenTelemetry metrics in public preview Announcing compute-optimized instance bundles for Amazon Lightsail Announcing managed daemon support for Amazon ECS Managed Instances Leverage Agentic AI for Autonomous Incident Response with AWS DevOps Agent Navigating the NGINX Ingress retirement: A practical guide to migration on AWS Optimizing data transfer costs when using AWS Network Load Balancer AWS Security Agent on-demand penetration testing now generally available
March 30 · 4 min
Aurora PostgreSQL: Now Free Enough to Be Dangerous
AWS Morning Brief for the week of March 30th, with Corey Quinn. Links: Amazon Aurora PostgreSQL now available with the AWS Free Tier Amazon EKS announces 99.99% Service Level Agreement and new 8XL scaling tier for Provisioned Control Plane clusters AWS Lambda increases the file descriptor limit to 4,096 for functions running on Lambda Managed Instances The AWS Advanced JDBC Wrapper now supports automatic query caching with Valkey Announcing Amazon Aurora PostgreSQL serverless database creation in seconds Enhancing auto scaling resilience by tracking worker utilization metrics Amazon CloudFront flat-rate pricing plans: new features and expanded capabilities IAM policy types: How and when to use them Preparing for agentic AI: A financial services approach
March 23 · 9 min
S3 Turns 20 and SimpleDB Is Still Alive
AWS Morning Brief for the week of March 23rd, with Corey Quinn. Links: Amazon Corretto 26 is now generally available Amazon SimpleDB now supports exporting domain data to Amazon S3 AWS CDK Mixins is now generally available AWS Lambda Managed Instances now supports Rust Amazon CloudWatch Logs now supports log ingestion using HTTP-based protocol AWS Lambda now supports Availability Zone metadata Expanding the BOX Program to Business Consulting and Advisory Partners Twenty years of Amazon S3 and building what’s next Synchronizing a Backup on-premises Db2 Server with Amazon RDS for Db2 AWS and NVIDIA deepen strategic collaboration to accelerate AI from pilot to production Migrate from Amazon Nova 1 to Amazon Nova 2 on Amazon Bedrock Essential security controls to prevent unauthorized account removal in AWS Organizations Demystifying Amazon VPC peering charges AWS and Others Invest $12.5M to Defend the Open Source Ecosystem from AI Threats Amazon threat intelligence teams identify Interlock ransomware campaign targeting enterprise firewalls 20 years of Amazon S3: A storage professional’s journey to AWS Hero CVE-2026-4270 - AWS API MCP File Access Restriction Bypass CVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit Arbitrary code execution via crafted project files in Kiro IDE CVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error
March 16 · 11 min
Beanstalk AI: The Resurrection Nobody Asked For
AWS Morning Brief for the week of March 16th, with Corey Quinn. Links: Amazon CloudWatch Logs announces increased query concurrency and API limits Introducing Amazon Connect Health, Agentic AI Built for Healthcare Amazon Route 53 Global Resolver is now generally available AWS simplifies IAM role creation and setup in service workflows Database Savings Plans now supports Amazon OpenSearch Service and Amazon Neptune Analytics AWS Elastic Beanstalk now offers AI-powered environment analysis AWS Elastic Beanstalk launches Deployments tab with in-progress deployment logs Multi-party approval now supports approval team baselining AWS announces pricing for VPC Encryption Controls The Hidden Price Tag: Uncovering Hidden Costs in Cloud Architectures with the AWS Well-Architected Framework

Last Week In AWS Podcast

New Tools, Ancient Failures, Same Old AWS

You Owe Your Country's GDP to AWS

United Solved IP Exhaustion, You Won't Believe How

AWS Discovers ACME Isn't Just Roadrunner Stuff

Open Governance for MySQL Plot Twist

MySQL 5.7 Will Outlive Us All

27 Security Bulletins and Other Bedtime Reading

OpenAI on Bedrock and Other Strange Bedfellows

The Week AWS Remembered GovCloud Exists

AWS and Oracle Together at Last, Apparently

M3 Ultra Macs, Claude Platform, and 619 New APIs Walk Into a Bar

AI-Native Foundations and the CVEs That Love Them

Bedrock Bags OpenAI, Q Developer Bags Groceries

The Week AWS Discovered JOIN Statements

Multicloud Interconnect and the Great CVE Hunt

S3 Files and an AI-Powered Singing Rat Trap

S3 Gets Vectors, CloudFront Gets SHA-256, You Get the Bill

Aurora PostgreSQL: Now Free Enough to Be Dangerous

S3 Turns 20 and SimpleDB Is Still Alive

Beanstalk AI: The Resurrection Nobody Asked For