AWS Morning Brief for the week of June 29th, with Corey Quinn.

Links:

• Amazon CloudWatch launches OTel Container Insights for Amazon EKS
• Amazon GuardDuty AI-powered investigations accelerate threat response (Preview)
• Amazon Route 53 Global Resolver now supports sharing DNS Views between AWS Accounts
• Automate AWS Invoice Retrieval with New Programmatic APIs
• Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs
• Upgrading Lambda function runtimes at scale with AWS Transform custom
• Huntington Bank: Redacting sensitive data from 400M+ documents with AWS
• Open Governance for MySQL: A Step Forward for the Community
• How AWS and a local community organization built a developer engagement model that works
• Modernizing border control with digital arrival cards on AWS Cloud
• Prevent data exfiltration: AWS egress controls for cloud workloads
• Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs
• A new way to keep your AWS Certification current
• CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins

AWS Morning Brief for the week of June 22nd, with Corey Quinn.

Links:

• AWS Marketplace announces AI-assisted product listing
• Amazon CloudWatch introduces Log Analytics for unified log analysis
• Amazon EKS now supports customer-routed control plane egress
• Free Network Bandwidth Amazon GameLift Servers is Here!
• AWS announces AWS Blocks, an open-source framework for composing application backends on AWS (Preview)
• AWS Compute Optimizer enhances EBS volume recommendations with additional performance metrics
• Introducing AWS Continuum for security at machine speed
• AWS Management Console Private Access now works without internet connectivity
• AWS Security Agent announces support for Threat Modeling
• Grok 4.3 from xAI now available in Amazon Bedrock
• Amazon Aurora and RDS for MySQL expand Extended Support for MySQL 5.7 through June 2029
• AWS Marketplace reduces listing fee for professional services to 0.5%
• S3 Vectors: More Results, Cheaper Queries, Fresh Fees
• Amazon S3 annotations: attach rich, queryable context directly to your objects
• Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs
• AWS DevOps Agent adds release management capabilities to assess code changes before production (preview)
• AWS WAF adds AI traffic monetization capability to help content owners charge AI bots for content access
• Simulating Amazon EC2 EBS burst credits before downsizing an instance
• AWS Security Bulletin Quartet: AI Tools Forget Unix 101

AWS Morning Brief for the week of June 15th, with Corey Quinn.

Links:

• AWS announces AWS Workload Credentials Provider
• Announcing the public preview of AWS FinOps Agent
• Introducing AI-Powered Cost Investigations For Cost Anomalies
• Amazon CloudWatch Logs Insights adds 23 new query commands and functions
• Introducing Target Coverage in Savings Plans Purchase Analyzer
• Introducing the AWS Credits Detail Page
• Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available
• Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors
• Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs
• AWS Nitro Isolation Engine: Formally verifying the hypervisor in the AWS Nitro System
• It’s safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore
• 27 AWS Security Bulletins: A Patch Tuesday That Lasted a Year

AWS Morning Brief for the week of June 8th, with Corey Quinn.

Links:

• AWS Interconnect - multicloud now offers a free 500 Mbps tier
• Oracle Database@AWS is now available in twenty AWS Regions
• Amazon Cognito now supports multi-Region replication
• Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.36
• Amazon SES now supports tenant-level suppression lists
• AWS Compute Optimizer now supports 32-day lookback for EBS volume and ECS service rightsizing recommendations
• AWS Cost and Usage Report 2.0 now supports Athena and Redshift integration
• Amazon ElastiCache for Valkey now supports durability
• Understanding how backups work in Amazon Aurora
• OpenAI models and Codex on Amazon Bedrock are now generally available
• How Bedrock Streaming optimizes its AWS costs
• From Monolith to Multi-Account: Pinterest’s AWS Organization Transformation Journey
• Gain visibility into DDoS attacks with flow logs in AWS Shield Advanced
• Identify unused AWS KMS keys and prevent accidental key deletions
• CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
• CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

AWS Morning Brief for the week of June 1st, with Corey Quinn.

Links:

• Monitor AWS Budgets directly in Billing and Cost Management Dashboards with new Budgets widget
• Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications
• Optimize costs in Amazon Aurora
• How AWS DevOps Agent uses multi-agent reasoning to find root causes
• Claude Opus 4.8 is now available on AWS
• Best Practices for TCP Connection Management on EC2
• Introducing US-based, US citizen, 24/7 technical support for AWS GovCloud (US) customers: Your mission never sleeps, neither do we
• Well-architected best practices for software supply chain security
• Automate Amazon EBS gp2 to gp3 migration at scale with AWS Step Functions and AWS Lambda
• AWS Organizations emits CloudTrail events for account membership changes
• CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI
• CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

AWS Morning Brief for the week of May 25th, with Corey Quinn.

Links:

• Amazon Bedrock expands support for request-level usage attribution
• Amazon ECS introduces pause and continue controls for service deployments
• AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in preview
• AWS Organizations now supports higher quotas for service control policies (SCPs)
• Amazon Aurora MySQL 8.4 is now generally available
• Introducing ExtendDB: An open source DynamoDB-compatible adapter with pluggable storage backends
• Nine Entertainment’s journey: Achieving 98% cost savings with Amazon ElastiCache Serverless for Valkey
• Announcing updated retry behavior for AWS SDKs and Tools
• Announcing AWS CDK Mixins: Composable Abstractions for AWS Resources
• CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver
• CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin

AWS Morning Brief for the week of May 18th , with Corey Quinn.

Links:

• Announcing general availability of Amazon EC2 M3 Ultra Mac instances
• Amazon EventBridge Scheduler adds 619 new SDK API actions, including Lambda Managed Instances
• Amazon Redshift launches RG instances powered by AWS Graviton
• Amazon Route 53 Domains adds support for 34 new Top Level Domains including .app, .dev, and .health.
• ENA Express for Amazon EC2 instances now supports traffic between Availability Zones
• Streaming CloudWatch metrics to VPC-based OpenTelemetry collectors using Lambda
• How HotelTrader cut inter-AZ cost 95% and latency by 49% with Valkey GLIDE on Amazon ElastiCache
• Introducing Claude Platform on AWS: Anthropic’s native platform, through your AWS account
• Amazon CloudFront Premium flat-rate pricing plan now supports higher, configurable usage allowances
• Scalable cross-cloud data migration to Amazon S3 with distributed rclone
• Dirty Frag and other issues in Amazon Linux kernels
• CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
• Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel
• Ongoing updates on Copy.fail and variants
• Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &: CVE-2026-8597)

AWS Morning Brief for the week of May 11th , with Corey Quinn.

Links:

• Announcing Agent Toolkit for AWS — help AI coding agents build effectively on AWS
• Amazon CloudFront Announces WebSocket Support for VPC Origins
• Amazon EventBridge supports data plane logging to AWS CloudTrail
• AWS IAM now provides higher maximum quotas for roles, role trust policies, instance profiles, managed policies, and identity providers
• AWS Marketplace now supports programmatic procurement with Agreements API
• The AWS MCP Server is now generally available
• Announcing Valkey 9.0 for Amazon ElastiCache
• Query billion-scale vectors with SQL: Integrating Amazon S3 Vectors and Aurora PostgreSQL
• You Wanted to Become AI-Native, and All You Got Was a Lousy Foundation
• CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials
• CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent
• CVE-2026-31431