AWS News Weekly

This week: AWS Lambda launches Web Functions, letting you run Express or Hono apps directly with active-CPU pricing and CloudFront origin support. SageMaker JumpStart adds Meta's Muse Spark Open and Reflection's Beam for agentic coding, Lambda durable functions get 10x more operations, and AWS Transform converts Azure .NET apps to AWS. Plus OpenSearch index-level encryption and S3 on Vercel. Compute Lambda Web Functions: HTTP-native, Express/Hono, pay active CPU only Lambda durable: 30K ops (10x), 1MB checkpoints, Go SDK GA Lambda: Loop detection for EventBridge custom buses Time Sync: Microsecond time on 135 more EC2 types Security OpenSearch: Per-index KMS encryption Secrets Manager: Managed rotation for Databricks, Twilio Security Hub: Resource criticality; CRI Profile v2.2 Transfer Family: Custom SFTP ports, host keys in Secrets Manager AI/ML JumpStart: Muse Spark Open (816B MoE), Beam, Nemotron 3.5 Super VL SageMaker Studio: Google/GitHub/Apple sign-up, no credit card AgentCore: Usage-based STM pricing; Web Search in GovCloud Agent Toolkit: SageMaker AI/ML and MWAA skills Data & Storage EMR: Native Spark data quality checks, 30+ rules, free DynamoDB Streams: Start reading from timestamp DataSync Enhanced: FSx for OpenZFS, NFS 4.2 S3: On Vercel Marketplace and v0 RDS Proxy: SQL Server 2022, up to 83% faster failover Networking CloudFront: Lambda Web Functions origin, dual-stack VPC origins Oracle Database@AWS: Aggregate/default routes for peering Operations ECS: New free LiveTaskCount; RunningTaskCount now free CloudWatch: Conditional log routing, chained parsers ElastiCache Valkey: Insights dashboard, 15s metrics ARC Region switch: Run Command, quota parity checks Resilience Hub: DevOps Agent investigations Other End User Messaging: Managed OTP incl. WhatsApp, Brand Profiles Transform: Azure-to-AWS .NET code conversion GA HealthOmics: Shared VPCs, 3rd-party registries, GPU fallback DCV 2026.0: RHEL 10, Ubuntu 26.04, new macOS client Connect: AI-prefilled after-contact guides AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

AI & Bedrock Nova 2.5 Sonic: GA voice model, better reasoning/tool calls, lower latency Claude Haiku 5.5: ~75% cheaper than Haiku 4.5, effort controls (+GovCloud) GLM 5.3: 753B MoE, 1M context, 128K output GPT-6.1 Sol: Ultrafast mode; reasoning summaries for OpenAI models TwelveLabs Pegasus 1.5: Video-to-text with time-coded metadata Kiro GovCloud: Opus 5.5 (half the tokens) & Sonnet 5.5 (30% faster) Strands Bidi Agents: GA for production voice agents Security & Compliance GuardDuty: RDS Protection detects exfiltration/destruction in PostgreSQL Client VPN: Device posture checks (CrowdStrike, Jamf, JumpCloud) Continuum for Pentesting: CI/CD pentest integration (preview) Private CA: Detailed issuance logs in CloudTrail, incl. failures ACM: ACME certificate issuance via PrivateLink IAM Identity Center: Network access controls for Identity Store/SCIM Security Hub: Export findings to S3 (CSV/OCSF JSON) Network Firewall: Wildcard container attribute filters Lambda: OAuth auth for self-managed Kafka event sources Data & Databases Redshift: Create/refresh Iceberg materialized views Ruby Driver Wrapper: GA, faster RDS/Aurora failover & switchover RDS Oracle: Upgrade prechecks + early reconnect event Compute & Containers EC2 C8gb: 30% faster than Graviton3, 300 Gbps EBS, 7 more regions EC2 AMIs: Shared tags visible to recipient accounts Batch: CloudWatch job metrics, EKS access entry auth GameLift: CPU burstability for container fleets Management & Cost Cost Explorer/Budgets: Bedrock costs by model, provider, inference type Config: 77 new resource types Control Tower AFT: Plan-only Terraform runs SageMaker Unified Studio: Custom CloudFormation tooling blueprints Capabilities by Region: Feature-level availability alerts Quick: Brand templates for docs/presentations Connect: AI checks for evaluation forms AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: Amazon Bedrock adds Claude Sonnet five point five plus new Grok and OpenAI models, Aurora PostgreSQL can now query Iceberg and Parquet data in S three with no ETL, and EKS gets Kubernetes one point thirty-seven with scale-to-zero autoscaling. Plus Security Hub remediation plans that fix multiple exposures at once, smarter S three Vectors filtering, and service retirements to plan for. AI & ML Bedrock: Claude Sonnet 5.5 (incl. GovCloud), Grok 4.7, GPT-6.1 Sol GPT-6 Astra: UltraFast mode, 6x faster (300 tok/s) Databases Aurora Serverless: Adds 16 ACUs/sec, scales to 256 ACUs Aurora PostgreSQL: Query Iceberg/Parquet via embedded DuckDB DocumentDB 8.0.2: Retryable writes, 5 new aggregation stages RDS/Aurora: R8a and M8a AMD instances ElastiCache Valkey: Serverless public endpoints; 15s OTel metrics DynamoDB: Filtered export to S3 Analytics & Storage S3 Vectors: Metadata pre-filtering, up to 5x higher recall S3 Tables: All Iceberg V3 types; 100 buckets/Region (10x) Glue: Iceberg V3 optimization; write-protected materialized views EMR Serverless: 1TB shuffle (up from 200GB) Redshift: Cross-Region data lake queries; DEBUG log permission CloudWatch Logs: Auto-indexing; bytes-scanned query estimate Security Security Hub: Remediation plans grouped by root cause GuardDuty: Org declarative policies; Runtime Monitoring in Security Hub CloudTrail: Event Coverage reveals data event logging gaps Route 53 DNS Firewall: Palo Alto DNS Security GA; DNS analytics IAM Identity Center: Multi-Region in opt-in, GovCloud, China Containers & Compute EKS 1.37: Metrics API GA, HPA scale-to-zero beta ECS: Blue/green, linear, canary via VPC Lattice WorkSpaces Core: G7 Blackwell GPUs, 2.1x vs G6 Deadline Cloud: ECS containers; job template expressions Lifecycle Sunset: Managed Blockchain, DevOps Guru (2027) End of support: Mechanical Turk Other Backup: Air-gapped vaults for FSx for NetApp ONTAP Grafana 13.2: Git Sync, dynamic dashboards SSM / DataSync: RAM org sharing; shared VPC support Transfer Family: Multi-file download; 1,000 connector auto-approval AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: Claude Opus five point five lands in Amazon Bedrock alongside OpenAI's new GPT six Sol and Luna models, CloudWatch Omni brings AI-first observability built on OpenTelemetry, and EventBridge relaunches custom event buses with strict ordering and cross-account sharing. Plus DynamoDB multi-region strong consistency expands to fifteen regions, and EMR gets Long Term Support releases. AI & ML Bedrock: Claude Opus 5.5, fewer tokens, cheaper than Opus 5; in GovCloud Bedrock: OpenAI GPT-6 Sol & Luna, 1M-token context Bedrock Knowledge Base: Salesforce & Zendesk native connectors SageMaker HyperPod: Inference Gateway, up to 82% lower first-token latency Glue Data Quality: GenAI rule recommendations in seconds Observability CloudWatch Omni: GA, AI-first OpenTelemetry observability incl. Azure ECS: Live deployment timeline for canary/linear/blue-green, free DataSync: Free dashboard for all task executions Security & Compliance Network Security Manager: GA, org-wide WAF/Shield, auto drift fixes RDS PostgreSQL: Post-quantum TLS key exchange (v18+) EVS: FedRAMP Class C in US regions Security Hub: AI Inventory finds AI assets on Azure VMs IAM: Outbound federation OIDC discovery via VPC endpoints Transcribe: Customer-managed KMS keys for vocabularies/models Databases DynamoDB: Multi-region strong consistency in 15 regions, zero RPO RDS SQL Server Dev: Multi-AZ Always On AGs, no Enterprise license RDS: MySQL 5.7.44/8.0.46 Extended Support; SQL Server 2022 CU26 RDS Preview: PostgreSQL 19 Beta 4 ElastiCache Global Datastore: Tagging & tag-based access control Analytics & Streaming EMR: LTS releases, 36 months of fixes; Spark 4.1 + Iceberg v3 EMR 7.14: Spark 3.5.8, IPv6 & Spark Connect on EKS, 1TiB serverless Kinesis Data Streams: Service-managed partition keys, no hot shards EventBridge: New custom bus: cross-account, ordering, 1-yr retention Contact Center & Messaging Connect: Multi-agent AI via A2A protocol; routing step analytics End User Messaging: WhatsApp voice calls End User Messaging & SES: Agent skills for AWS MCP Server AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com

This week: EC2 launches application status checks for monitoring app-level health directly alongside instance checks, IAM introduces Account Access Manager for assigning roles to Identity Center users, and S3 now shows the specific policy ARN in access denied errors for faster troubleshooting. Plus new SageMaker JumpStart models, Bedrock cost allocation by IAM principal, and QuickSight adds deny-by-default for AI capabilities. Compute & Infrastructure EC2: App status checks monitor web servers/Docker; Auto Scaling replaces unhealthy instances EKS: Tune control plane params for pod placement and autoscaling Spot: Placement score now includes Local Zones Storage & Database RDS MariaDB: 12.3 LTS with Oracle TO_DATE compatibility, JSON validation RDS Oracle: APEX 26.1 low-code support Redshift: 2.4x faster at 30% lower cost AI/ML - SageMaker JumpStart GLM 5.2 FP8: 1M token context for agentic tasks NVIDIA Nemotron: Nano 12B (6x throughput), 3.5 Lightning 30B (4x throughput) Qwen: AgentWorld 35B, 3.5 122B multimodal (262K context) Specialized: GLM OCR, LightOn OCR, Redis langcache-embed, JetBrains Mellum2, FLUX 2, Gemma 4 12B AI/ML - Bedrock OpenAI Daybreak: Cyber defense models (Blue/Red) with chip-level security Cost allocation: IAM principal tagging for bedrock-mantle endpoint Security & Identity IAM: Account access manager (Identity Center + IAM roles), Role manager auto-creates service roles S3: Access denied errors show specific blocking policy ARN ACM: Switch email→DNS validation without reissuing Secrets Manager: Auto-rotation for Jenkins/SonarQube tokens Analytics & BI QuickSight: Purview DLP integration, deny-by-default for AI, per-user limits Clean Rooms: Privacy-enhanced SQL logs, custom aggregation thresholds Glue: One-click jump to SageMaker Unified Studio Management & Cost Console: Interactive global map for regions/local zones Billing: 5 preconfigured dashboards (cost trends, compute, database, reservations) Marketplace: Customizable notifications by category/channel Networking & Migration VPN Client v6: CLI support, admin controls, OpenVPN 3 Elastic DR: Auto-preserves UEFI boot mode for Linux SES: Custom URL paths for mobile deep linking AWS News Feed: Whats new at AWS For help with your AWS Infrastructure check out flomotlik.me or email [email protected] For detailed show notes check out awsnewsweekly.com