327: AWS Finally Admits Kubernetes is Hard, Makes Robots Do It Instead
Description
Welcome to episode 327 of The Cloud Pod, where the forecast is always cloudy! Justin, Matt, and Ryan are here to bring you all the latest news (and a few rants) in the worlds of Cloud and AI. I’m sure all our readers are aware of the AWS outage last week, as it was in all the news everywhere. But we’ve also got some new AI models (including Sora in case you’re low on really crappy videos the youths might like), plus EKS, Kubernetes, Vertex AI, and more. Let’s get started!
Titles we almost went with this week
- Oracle and Azure Walk Into a Cloud Bar: Nobody Gets ETL’d
- When DNS Goes Down, So Does Your Monday: AWS Takes Half the Internet on a Coffee Break
- 404 Cloud Not Found: AWS Proves Even the Internet’s Phone Book Can Get Lost
- DNS: Definitely Not Staffed – How AWS Lost Its Way When It Lost Its People
- When Larry Met Satya: A Cloud Love Story
- Azure Finally Answers ‘Dude, Where’s My Data?’ with Storage Discovery
- Breaking: Microsoft Discovers AI Training Uses More Power Than a Small Country
- 404 Engineers Not Found – AWS Learns the Hard Way That People Are Its Most Critical Infrastructure
- Azure Storage Discovery: Finding Your Data Needles in the Cloud Haystack
- EKS Auto Mode: Because Even Your Clusters Deserve Cruise Control
- Azure Gets Reel: Microsoft Adds Video Generation to AI Foundry
- The Great Token Heist: Vertex AI Steals 90% Off Your Gemini Bills
- Cache Me If You Can: Vertex AI’s Token-Saving Feature
- IaC Just Got a Manager – And It’s Not Your Boss
- From Musk to Microsoft: Grok 4 Makes the Great Cloud Migration
- No Harness.. You are not going to make IACM happen
- Microsoft Drafts a Solution to Container Creation Chaos
- PowerShell to the People: Azure Simplifies the Great Gateway Migration
- IP There Yet? Azure’s Scripts Keep Your Address While You Upgrade
Follow Up
00:53 Glacier Deprecation Email
- Standalone Amazon Glacier service (vault-based with separate APIs) will stop accepting new customers as of December 15, 2025.
- S3 Glacier storage classes (Instant Retrieval, Flexible Retrieval, Deep Archive) are completely unaffected and continue normally
- Existing Glacier customers can keep using it forever – no forced migration required.
- AWS is essentially consolidating around S3 as the unified storage platform, rather than maintaining two separate archival services.
- The standalone service will enter maintenance mode, meaning there will be no new features, but the service will remain operational.
- Migration to S3 Glacier is optional but recommended for better integration, lower costs, and more features. (Justin assures us it is actually slightly cheaper, so there’s that.)
General News
02:24 F5 discloses major security breach linked to nation-state hackers – GeekWire
- F5 disclosed that nation-state hackers maintained persistent access to their internal systems over the summer of 2024, stealing portions of BIG-IP source code and vulnerability details before containment in August.
- The breach compromised product development and engineering systems, but did not affect customer CRM data, financial systems, or F5’s software supply chain, according to independent security audits.
- F5 has released security patches for BIG-IP, F5OS, and BIG-IP Next products and is providing threat-hunting guides to help customers monitor for suspicious activity.
- This represents the first publicly disclosed breach of F5’s internal systems, notable given that F5 handles traffic for 80% of Fortune Global 500 companies through its load-balancing and security services.
- The incident highlights supply chain security concerns, as attackers targeted source code and vulnerability information, rather than customer data, potentially seeking ways to exploit F5 products deployed across enterprise networks.
03:12 Justin – “A little concerning on this one, mostly because F5 is EVERYWHERE.”
AI is Going Great – Or How ML Makes Money
04:55 Claude Code gets a web version—but it’s the new sandboxing that really matters – Ars Technica
- Anthropic launched web and mobile interfaces for Claude Code, their CLI-based AI coding assistant, with the web version supporting direct access to GitHub repositories and the ability to process general instructions, such as “add real-time inventory tracking to the dashboard.”
- The web interface introduces multi-session support, allowing developers to run and switch between multiple coding sessions simultaneously through a left-side panel, plus the ability to provide mid-task corrections without canceling and restarting
- A new sandboxing runtime has been implemented to improve security and reduce friction, moving away from the previous approach where Claude Code required permission for most changes and steps during execution
- The mobile version is currently limited to iOS and is in an earlier development stage compared to the web interface, indicating a phased rollout approach
- This positions Claude Code as a more accessible alternative to traditional CLI-only AI coding tools, potentially expanding its reach to developers who prefer web-based interfaces over command-line environments
05:51 Ryan – “I haven’t had a chance to play with the web version, but I am interested in it just because I found the terminal interface limiting, but I also feel like a lot of the value is in that local sort of execution and not in the sandbox. A lot of the tasks I do are internal and require access to either company resources or private networks, or the kind of thing where you’re not going to get that from a publicly hosted sandbox environment.”
08:36 Open Source: Containerization Assist MCP Server
- Containerization Assist automates the tedious process of creating Dockerfiles and Kubernetes manifests, eliminating manual errors that plague developers during the containerization process
- Built on AKS Draft’s proven foundation, this open-source tool goes beyond basic AI coding assistants by providing a complete containerization platform rather than just code suggestions.
- The tool addresses a critical pain point where developers waste hours writing boilerplate container configurations and debugging deployment issues caused by manual mistakes. (Listener beware, Justin mini rant here.)
- As an open-source MCP (Model Context Protocol) server, it integrates seamlessly with existing development workflows while leveraging Microsoft’s containerization expertise from Azure Kubernetes Service. (Expertise is a stretch.)
- This launch signals Microsoft’s commitment to simplifying Kubernetes adoption by removing the steep learning curve associated with container orchestration and manifest creation – or you could just use a pass.
09:47 Matt – “The piece I did like about this is that it integrated in as an optional feature, kind of the trivia and the security thing. So it’s not just setting it up, but they integrated the next steps of security code scanning. It’s not Microsoft saying, you know, hey, it’s standard … they are building security in, hopefully.”
Cloud Tools
3






















