Last Week In AWS Podcast

AWS Morning Brief for the week of September 8th with Corey Quinn. Links: AWS Lambda now supports SnapStart for container image functions Amazon CloudWatch now supports warm-up periods for alarms Amazon Kinesis Data Streams announces data delivery to general purpose Amazon S3 buckets Amazon Linux 2027 is now available in public preview Amazon CloudFront announces API support for flat-rate pricing plans AAA games on a $35 stick: How Luna removes the hardware barrier with AWS How t54 built a trust layer with Amazon Bedrock AgentCore payments Introducing Claude Fable 5.1 on AWS Tokenomics at scale: How Jamf built real-time spend enforcement for Amazon Bedrock How PGA TOUR automated live profanity detection with AWS using Amazon Transcribe AWS and Microsoft Azure collaborate to expand multicloud networking We invited a direct competitor into Security Hub Extended. Here’s why. Detect stalled Amazon S3 live replication to prevent unexpected storage costs Six AWS security bulletins in five days

AWS Morning Brief for the week of August 31st, with Corey Quinn. Links: AWS Lambda functions now support full IAM resource-based policies AWS Security Agent (now part of AWS Continuum) now supports budget controls and finding revalidation AWS Secrets Manager adds managed external secrets support for Cisco Security Platform and Netskope Automating filtered Cost and Usage Report exports with AWS Data Exports AWS Glue 6.0 now available with 30% lower price and full Apache Iceberg v3 support Happy 20th Birthday, Amazon EC2 I'm an Amazon SVP who hadn't coded in 25 years. Then I wrote 100,000 lines of code with AI. AWS and DuckLabs: Building the future of analytics together State of Kansas modernizes mainframe file transfer using AWS Transfer Family Five AWS security bulletins, zero AWS-side fixes

AWS Morning Brief for the week of August 24th, with Corey Quinn. Links: AWS CloudShell now includes a built-in visual file editor AWS Cost Anomaly Detection supports third-party models on Amazon Bedrock AWS announces a new Availability Zone in the Europe (London) Region AWS Billing and Cost Management Introduces Managed Dashboards for Instant Cloud Financial Visibility In the works: AWS Builder Lofts in Berlin, Hyderabad, and São Paulo Amazon Linux default SSM parameter will now track the latest kernel Introducing public preview runtimes on AWS Lambda, starting with Node.js 26 and Python 3.15 AWS and Amazon WorkSpaces recognized as a Leader in the 2026 Gartner Magic Quadrant for Desktop as a Service Amazon Bedrock AgentCore payments is now generally available: Enabling agents to transact safely and autonomously at scale AWS Network Firewall now supports rule hit count Updates to your AWS Sign-In experience Four AWS Security Bulletins in One August Week

AWS Morning Brief for the week of August 17th, with Corey Quinn. Links: Amazon EC2 introduces application status checks AWS IAM Identity Center supports one-click multi-Region option for new organization instances Amazon S3 adds additional policy details to access denied error messages AWS Secrets Manager adds managed external secrets support for Jenkins and SonarQube Burst to Region: Overflow AWS Outposts workloads to Amazon EC2 Designing for failure: Building resilient systems on AWS Amazon Quick for Microsoft 365: Agentic AI where you work Introducing the next-generation AWS VPN Client with CLI support and admin controls AWS Certificate Manager will discontinue email validation to prove domain validation for certificates How AWS IAM role manager rethinks the starting point for IAM roles How to authenticate customers during chat with Amazon Connect Customer How WeatherBug reduced storage costs by 80% using Amazon S3 Storage Lens and Kiro CLI Introducing the new AWS Cloud Quest: AI-powered practice, hands-on building, and a path to official AWS badges Two bulletins, one CVE, and Base64 bites C++

AWS Morning Brief for the week of August 10th, with Corey Quinn. Links: Amazon ECR now supports image layers up to 200 GB AWS Lambda announces scalable network bandwidth up to 3,000 Mbps for functions outside a VPC AWS Security Hub Extended adds supply chain security as its 10th category OpenAI GPT-5.6 Sol, Terra, and Luna now support 1 million token context windows on Amazon Bedrock How to understand and estimate combined AWS WAF and AWS Shield Advanced costs Amazon DynamoDB now supports real-time vector search at any scale Runtime instances: persistent compute for production AI agents on Amazon Bedrock AgentCore Amazon Connect Service Quota Monitor Enforcing data residency with single-Region Claude Code on Amazon Bedrock Reintroducing Network Firewall Proxy for Secure Egress Connectivity AWS Supports Agent Plugins: An Open Standard for Portable Agent Extensions Introducing Dogwood: runtime verification for AI agents AWS partners with Anthropic and OpenAI to bring AWS Continuum into developer workflows Caching KMS data keys in multi-thread environments: Per-tenant encryption for event-driven systems at scale Access Amazon S3 backup data directly using S3 Access Points in AWS Backup Twelve AWS bulletins, mostly AI tooling From weeks to minutes: How Formula 1® uses agentic AI on AWS to accelerate data operations

AWS Morning Brief for the week of August 3rd, with Corey Quinn. \ Links: Amazon CloudWatch Logs now supports Application Load Balancer logs AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in GA AWS announces aws-bench, an open-source benchmark for AI agents on AWS AWS Direct Connect now supports BGP route visibility on Virtual Interfaces AWS IAM Identity Center extends multi-Region support to Identity Center directory AWS announces general availability of Policy-Based Routing on AWS Transit Gateway IAM Policy Simulator moves to the IAM console and adds additional capabilities Amazon Kinesis Data Streams now supports scaling down ingest capacity with warm throughput Accelerate Spark on EMR Serverless with larger workers and shuffle-optimized disks Installing and updating the AWS CLI with single-line commands Deploying Kimi K3 on AWS How Amazon CloudFront delivered traffic for the FIFA World Cup 2026 Amazon identifies North Korean hacker group behind open-source supply chain attacks AWS KMS or AWS CloudHSM: Choose the right key management solution AWS Shield Advanced is embracing the AWS WAF Anti-DDoS managed rule group: What changes and how to prepare Secure your npm and pip package updates in Amazon Linux AWS security bulletins: patching the patch

AWS Morning Brief for the week of July 26th, with Corey Quinn. Links: Amazon ECS now provides Action Logs for deployment and orchestration visibility Amazon Managed Service for Prometheus supports 1.5B active metrics and 200K rules per workspace Amazon SES introduces pricing plans AWS Network Load Balancer now supports Listener Rules for custom traffic routing AWS Organizations increases RCP quota to 2,000 per organization AWS now supports automatic credit memo application preferences AWS Secrets Manager now publishes secret update notifications to Amazon EventBridge JVM memory, CPU, and classpath best practices for Java containers on AWS Connection pooling strategies in Amazon Aurora DSQL Custom OS installation now available on AWS DeepRacer devices Thermodynamic sampling of disordered materials with an analog Hamiltonian Rydberg simulator Unlocking data residency use cases with Amazon S3 in AWS Local Zones AWS Security Bulletins: New Tools, Ancient Failures

AWS Morning Brief for the week of July 20th, with Corey Quinn. Links: Amazon CloudWatch Logs announces intelligent tiering for storage Amazon Cognito now supports importing users with password hashes Introducing Amazon GuardDuty AI Protection for AWS AI workloads AWS Organizations now applies account departure security controls by default for new organizations created via AWS Organizations console AWS Lambda announces self-managed code storage Amazon S3 removes 30-day minimum for transitions to S3 Standard-IA and S3 One Zone-IA Amazon SQS turns 20: Two decades of reliable messaging at scale Announcing Lambda MicroVMs: serverless compute environments with VM-level isolation and near-instant startup Eliminating Java cold starts with AWS Lambda Managed Instances Introducing open source Bulk Executor for Amazon DynamoDB Automating CIDR expansion: Reducing IP exhaustion downtime Setting up Layer 2 Networking on Amazon EC2 Security Hub adds AI workload protection and multicloud support for Microsoft Azure Five CVEs and the Agentic AI Security Reckoning

AWS Morning Brief for the week of July 13th with Corey Quinn. Links: AWS Security Hub extends unified security management to Microsoft Azure Amazon EKS Auto Mode reduces GPU management fees by up to 60% Amazon RDS for Oracle now supports Oracle Database 26ai AWS Builder Center Now Offers Free Sandbox Environments AWS Security Hub now offers Network Scanning to identify publicly reachable resources Amazon Cognito now supports self-service provisioned API rate limits AWS Security Hub adds impact analysis for exposure findings Blazing a Trail: How Peloton Rebuilt the SDLC for the Agentic Era with Amazon Bedrock How United Airlines solved IP exhaustion with Private NAT Gateway Building secure AI agents at scale: Introducing Loom for AWS What does it cost to answer one question? Measuring per-request cost in agentic workloads Designing for the inevitable: System prompt leakage and mitigations in generative AI applications The CISO’s guide to post-quantum mandates and migrations Two CVEs on the theme of guarding keys badly

AWS Morning Brief for the week of July, 6th with Corey Quinn. Links: Announcing general availability of Amazon WorkSpaces for AI agents Amazon CloudWatch supports creating alarms from log queries ECS Service Connect now supports Zone-Aware routing How InterWiz reduced AI costs by 90% with Amazon Bedrock Accelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express mode Automate public TLS certificate issuance with ACME support in AWS Certificate Manager Upgrade Amazon EKS clusters with confidence using Kubernetes version rollbacks Safely Releasing Frontier Models to Customers Accelerating government FinOps with Amazon Quick Four CVEs: AWS reads half your request, leaks the rest

AWS Morning Brief for the week of June 29th, with Corey Quinn. Links: Amazon CloudWatch launches OTel Container Insights for Amazon EKS Amazon GuardDuty AI-powered investigations accelerate threat response (Preview) Amazon Route 53 Global Resolver now supports sharing DNS Views between AWS Accounts Automate AWS Invoice Retrieval with New Programmatic APIs Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs Upgrading Lambda function runtimes at scale with AWS Transform custom Huntington Bank: Redacting sensitive data from 400M+ documents with AWS Open Governance for MySQL: A Step Forward for the Community How AWS and a local community organization built a developer engagement model that works Modernizing border control with digital arrival cards on AWS Cloud Prevent data exfiltration: AWS egress controls for cloud workloads Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs A new way to keep your AWS Certification current CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins

AWS Morning Brief for the week of June 22nd, with Corey Quinn. Links: AWS Marketplace announces AI-assisted product listing Amazon CloudWatch introduces Log Analytics for unified log analysis Amazon EKS now supports customer-routed control plane egress Free Network Bandwidth Amazon GameLift Servers is Here! AWS announces AWS Blocks, an open-source framework for composing application backends on AWS (Preview) AWS Compute Optimizer enhances EBS volume recommendations with additional performance metrics Introducing AWS Continuum for security at machine speed AWS Management Console Private Access now works without internet connectivity AWS Security Agent announces support for Threat Modeling Grok 4.3 from xAI now available in Amazon Bedrock Amazon Aurora and RDS for MySQL expand Extended Support for MySQL 5.7 through June 2029 AWS Marketplace reduces listing fee for professional services to 0.5% S3 Vectors: More Results, Cheaper Queries, Fresh Fees Amazon S3 annotations: attach rich, queryable context directly to your objects Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs AWS DevOps Agent adds release management capabilities to assess code changes before production (preview) AWS WAF adds AI traffic monetization capability to help content owners charge AI bots for content access Simulating Amazon EC2 EBS burst credits before downsizing an instance AWS Security Bulletin Quartet: AI Tools Forget Unix 101

AWS Morning Brief for the week of June 15th, with Corey Quinn. Links: AWS announces AWS Workload Credentials Provider Announcing the public preview of AWS FinOps Agent Introducing AI-Powered Cost Investigations For Cost Anomalies Amazon CloudWatch Logs Insights adds 23 new query commands and functions Introducing Target Coverage in Savings Plans Purchase Analyzer Introducing the AWS Credits Detail Page Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs AWS Nitro Isolation Engine: Formally verifying the hypervisor in the AWS Nitro System It’s safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore 27 AWS Security Bulletins: A Patch Tuesday That Lasted a Year

AWS Morning Brief for the week of June 8th, with Corey Quinn. Links: AWS Interconnect - multicloud now offers a free 500 Mbps tier Oracle Database@AWS is now available in twenty AWS Regions Amazon Cognito now supports multi-Region replication Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.36 Amazon SES now supports tenant-level suppression lists AWS Compute Optimizer now supports 32-day lookback for EBS volume and ECS service rightsizing recommendations AWS Cost and Usage Report 2.0 now supports Athena and Redshift integration Amazon ElastiCache for Valkey now supports durability Understanding how backups work in Amazon Aurora OpenAI models and Codex on Amazon Bedrock are now generally available How Bedrock Streaming optimizes its AWS costs From Monolith to Multi-Account: Pinterest’s AWS Organization Transformation Journey Gain visibility into DDoS attacks with flow logs in AWS Shield Advanced Identify unused AWS KMS keys and prevent accidental key deletions CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

AWS Morning Brief for the week of June 1st, with Corey Quinn. Links: Monitor AWS Budgets directly in Billing and Cost Management Dashboards with new Budgets widget Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications Optimize costs in Amazon Aurora How AWS DevOps Agent uses multi-agent reasoning to find root causes Claude Opus 4.8 is now available on AWS Best Practices for TCP Connection Management on EC2 Introducing US-based, US citizen, 24/7 technical support for AWS GovCloud (US) customers: Your mission never sleeps, neither do we Well-architected best practices for software supply chain security Automate Amazon EBS gp2 to gp3 migration at scale with AWS Step Functions and AWS Lambda AWS Organizations emits CloudTrail events for account membership changes CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

AWS Morning Brief for the week of May 25th, with Corey Quinn. Links: Amazon Bedrock expands support for request-level usage attribution Amazon ECS introduces pause and continue controls for service deployments AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in preview AWS Organizations now supports higher quotas for service control policies (SCPs) Amazon Aurora MySQL 8.4 is now generally available Introducing ExtendDB: An open source DynamoDB-compatible adapter with pluggable storage backends Nine Entertainment’s journey: Achieving 98% cost savings with Amazon ElastiCache Serverless for Valkey Announcing updated retry behavior for AWS SDKs and Tools Announcing AWS CDK Mixins: Composable Abstractions for AWS Resources CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin

AWS Morning Brief for the week of May 18th , with Corey Quinn. Links: Announcing general availability of Amazon EC2 M3 Ultra Mac instances Amazon EventBridge Scheduler adds 619 new SDK API actions, including Lambda Managed Instances Amazon Redshift launches RG instances powered by AWS Graviton Amazon Route 53 Domains adds support for 34 new Top Level Domains including .app, .dev, and .health. ENA Express for Amazon EC2 instances now supports traffic between Availability Zones Streaming CloudWatch metrics to VPC-based OpenTelemetry collectors using Lambda How HotelTrader cut inter-AZ cost 95% and latency by 49% with Valkey GLIDE on Amazon ElastiCache Introducing Claude Platform on AWS: Anthropic’s native platform, through your AWS account Amazon CloudFront Premium flat-rate pricing plan now supports higher, configurable usage allowances Scalable cross-cloud data migration to Amazon S3 with distributed rclone Dirty Frag and other issues in Amazon Linux kernels CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel Ongoing updates on Copy.fail and variants Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &amp: CVE-2026-8597)

AWS Morning Brief for the week of May 11th , with Corey Quinn. Links: Announcing Agent Toolkit for AWS — help AI coding agents build effectively on AWS Amazon CloudFront Announces WebSocket Support for VPC Origins Amazon EventBridge supports data plane logging to AWS CloudTrail AWS IAM now provides higher maximum quotas for roles, role trust policies, instance profiles, managed policies, and identity providers AWS Marketplace now supports programmatic procurement with Agreements API The AWS MCP Server is now generally available Announcing Valkey 9.0 for Amazon ElastiCache Query billion-scale vectors with SQL: Integrating Amazon S3 Vectors and Aurora PostgreSQL You Wanted to Become AI-Native, and All You Got Was a Lousy Foundation CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent CVE-2026-31431

AWS Morning Brief for the week of May 4th, with Corey Quinn. Links: AWS Management Console now supports settings to control service and Region visibility - AWS Amazon CloudWatch adds visual agent configuration to the EC2 console AWS Announces Amazon Connect Decisions Amazon Connect Talent for AI-powered hiring (now available in Preview) Introducing Amazon EC2 R8in and R8ib instances Amazon OpenSearch Service now supports index-level encryption Amazon Redshift Serverless AI-driven scaling is now the default for new workgroups AWS Cost Optimization Hub now supports CSV download AWS KMS now tracks last usage of all KMS keys AWS Lambda adds support for Ruby 4.0 AWS Marketplace Management Portal now supports bank account deletion Amazon Bedrock now offers OpenAI models, Codex, and Managed Agents (Limited Preview) Amazon CloudFront now supports invalidation by cache tag Introducing Amazon EC2 C8ine and M8ine instances Identifying security risks using AWS Cost and Usage Report data Amazon Q Developer end-of-support announcement Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912 Issues in tough library and tuftool CLI utility CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow CVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues

AWS Morning Brief for the week of April 27th, with Corey Quinn. Links: Amazon CloudWatch pipelines now supports configuration of processors via AI Introducing the Amazon EKS Hybrid Nodes gateway for hybrid Kubernetes networking Amazon EKS enhances cluster governance with new IAM condition keys Attributed Revenue Dashboard Now Available in AWS Partner Central AWS Lambda functions can now mount Amazon S3 buckets as file systems with S3 Files Amazon CloudWatch Logs Insights introduces JOIN and sub-query commands AWS Lambda Durable Execution SDK for Java GA Amazon S3 Express One Zone now supports S3 Inventory Amazon S3 now supports five additional checksum algorithms AWS Secrets Manager extends managed external secrets to MongoDB Atlas and Confluent Cloud Track Amazon Bedrock Costs by Caller Identity with IAM Principal-Based Cost Allocation Transforming FinOps with the Latest Amazon Q Cost Capabilities Aurora Serverless: Faster performance, enhanced scaling, and still scales down to zero From developer desks to the whole organization: Running Claude Cowork in Amazon Bedrock Get to your first working agent in minutes: Announcing new features in Amazon Bedrock AgentCore Automated network incident response with AWS DevOps Agent Accelerate development workflows with Amazon EBS Volume Clones Troubleshooting Amazon S3 access denied errors using Kiro CLI CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python