AWS Morning Brief for the week of June 15th, with Corey Quinn. 

Links:

• AWS announces AWS Workload Credentials Provider
• Announcing the public preview of AWS FinOps Agent
• Introducing AI-Powered Cost Investigations For Cost Anomalies
• Amazon CloudWatch Logs Insights adds 23 new query commands and functions
• Introducing Target Coverage in Savings Plans Purchase Analyzer
• Introducing the AWS Credits Detail Page
• Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available
• Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors
• Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs
• AWS Nitro Isolation Engine: Formally verifying the hypervisor in the AWS Nitro System
• It’s safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore
• 27 AWS Security Bulletins: A Patch Tuesday That Lasted a Year

AWS Morning Brief for the week of June 8th, with Corey Quinn. 

Links:

• AWS Interconnect - multicloud now offers a free 500 Mbps tier
• Oracle Database@AWS is now available in twenty AWS Regions
• Amazon Cognito now supports multi-Region replication
• Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.36
• Amazon SES now supports tenant-level suppression lists
• AWS Compute Optimizer now supports 32-day lookback for EBS volume and ECS service rightsizing recommendations
• AWS Cost and Usage Report 2.0 now supports Athena and Redshift integration
• Amazon ElastiCache for Valkey now supports durability
• Understanding how backups work in Amazon Aurora
• OpenAI models and Codex on Amazon Bedrock are now generally available
• How Bedrock Streaming optimizes its AWS costs
• From Monolith to Multi-Account: Pinterest’s AWS Organization Transformation Journey
• Gain visibility into DDoS attacks with flow logs in AWS Shield Advanced
• Identify unused AWS KMS keys and prevent accidental key deletions
• CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
• CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

AWS Morning Brief for the week of June 1st, with Corey Quinn. 

Links:

• Monitor AWS Budgets directly in Billing and Cost Management Dashboards with new Budgets widget
• Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications
• Optimize costs in Amazon Aurora
• How AWS DevOps Agent uses multi-agent reasoning to find root causes
• Claude Opus 4.8 is now available on AWS
• Best Practices for TCP Connection Management on EC2
• Introducing US-based, US citizen, 24/7 technical support for AWS GovCloud (US) customers: Your mission never sleeps, neither do we
• Well-architected best practices for software supply chain security
• Automate Amazon EBS gp2 to gp3 migration at scale with AWS Step Functions and AWS Lambda
• AWS Organizations emits CloudTrail events for account membership changes
• CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI
• CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

AWS Morning Brief for the week of May 25th, with Corey Quinn. 

Links:

• Amazon Bedrock expands support for request-level usage attribution
• Amazon ECS introduces pause and continue controls for service deployments
• AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in preview
• AWS Organizations now supports higher quotas for service control policies (SCPs)
• Amazon Aurora MySQL 8.4 is now generally available
• Introducing ExtendDB: An open source DynamoDB-compatible adapter with pluggable storage backends
• Nine Entertainment’s journey: Achieving 98% cost savings with Amazon ElastiCache Serverless for Valkey
• Announcing updated retry behavior for AWS SDKs and Tools
• Announcing AWS CDK Mixins: Composable Abstractions for AWS Resources
• CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver
• CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin

AWS Morning Brief for the week of May 18th , with Corey Quinn. 

Links:

• Announcing general availability of Amazon EC2 M3 Ultra Mac instances
• Amazon EventBridge Scheduler adds 619 new SDK API actions, including Lambda Managed Instances
• Amazon Redshift launches RG instances powered by AWS Graviton
• Amazon Route 53 Domains adds support for 34 new Top Level Domains including .app, .dev, and .health.
• ENA Express for Amazon EC2 instances now supports traffic between Availability Zones
• Streaming CloudWatch metrics to VPC-based OpenTelemetry collectors using Lambda
• How HotelTrader cut inter-AZ cost 95% and latency by 49% with Valkey GLIDE on Amazon ElastiCache
• Introducing Claude Platform on AWS: Anthropic’s native platform, through your AWS account
• Amazon CloudFront Premium flat-rate pricing plan now supports higher, configurable usage allowances
• Scalable cross-cloud data migration to Amazon S3 with distributed rclone
• Dirty Frag and other issues in Amazon Linux kernels
• CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
• Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel
• Ongoing updates on Copy.fail and variants
• Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &: CVE-2026-8597)

AWS Morning Brief for the week of May 11th , with Corey Quinn. 

Links:

• Announcing Agent Toolkit for AWS — help AI coding agents build effectively on AWS
• Amazon CloudFront Announces WebSocket Support for VPC Origins
• Amazon EventBridge supports data plane logging to AWS CloudTrail
• AWS IAM now provides higher maximum quotas for roles, role trust policies, instance profiles, managed policies, and identity providers
• AWS Marketplace now supports programmatic procurement with Agreements API
• The AWS MCP Server is now generally available
• Announcing Valkey 9.0 for Amazon ElastiCache
• Query billion-scale vectors with SQL: Integrating Amazon S3 Vectors and Aurora PostgreSQL
• You Wanted to Become AI-Native, and All You Got Was a Lousy Foundation
• CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials
• CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent
• CVE-2026-31431

AWS Morning Brief for the week of May 4th, with Corey Quinn. 

Links:

• AWS Management Console now supports settings to control service and Region visibility - AWS
• Amazon CloudWatch adds visual agent configuration to the EC2 console
• AWS Announces Amazon Connect Decisions
• Amazon Connect Talent for AI-powered hiring (now available in Preview)
• Introducing Amazon EC2 R8in and R8ib instances
• Amazon OpenSearch Service now supports index-level encryption
• Amazon Redshift Serverless AI-driven scaling is now the default for new workgroups
• AWS Cost Optimization Hub now supports CSV download
• AWS KMS now tracks last usage of all KMS keys
• AWS Lambda adds support for Ruby 4.0
• AWS Marketplace Management Portal now supports bank account deletion
• Amazon Bedrock now offers OpenAI models, Codex, and Managed Agents (Limited Preview)
• Amazon CloudFront now supports invalidation by cache tag
• Introducing Amazon EC2 C8ine and M8ine instances
• Identifying security risks using AWS Cost and Usage Report data
• Amazon Q Developer end-of-support announcement
• Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912
• Issues in tough library and tuftool CLI utility
• CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS
• Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow
• CVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
• Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues

AWS Morning Brief for the week of April 27th, with Corey Quinn. 

Links:

• Amazon CloudWatch pipelines now supports configuration of processors via AI
• Introducing the Amazon EKS Hybrid Nodes gateway for hybrid Kubernetes networking
• Amazon EKS enhances cluster governance with new IAM condition keys
• Attributed Revenue Dashboard Now Available in AWS Partner Central
• AWS Lambda functions can now mount Amazon S3 buckets as file systems with S3 Files
• Amazon CloudWatch Logs Insights introduces JOIN and sub-query commands
• AWS Lambda Durable Execution SDK for Java GA
• Amazon S3 Express One Zone now supports S3 Inventory
• Amazon S3 now supports five additional checksum algorithms
• AWS Secrets Manager extends managed external secrets to MongoDB Atlas and Confluent Cloud
• Track Amazon Bedrock Costs by Caller Identity with IAM Principal-Based Cost Allocation
• Transforming FinOps with the Latest Amazon Q Cost Capabilities
• Aurora Serverless: Faster performance, enhanced scaling, and still scales down to zero
• From developer desks to the whole organization: Running Claude Cowork in Amazon Bedrock
• Get to your first working agent in minutes: Announcing new features in Amazon Bedrock AgentCore
• Automated network incident response with AWS DevOps Agent
• Accelerate development workflows with Amazon EBS Volume Clones
• Troubleshooting Amazon S3 access denied errors using Kiro CLI
• CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver
• CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python

AWS Morning Brief for the week of April 20th, with Corey Quinn. 

Links:

• Amazon CloudWatch now supports cross-region telemetry auditing and enablement rules
• Introducing Amazon EC2 C8in and C8ib instances
• Amazon Quick now supports multi-account sign-in within the same browser
• Amazon WorkSpaces Personal and Amazon WorkSpaces Core are now available in two additional AWS Regions
• AWS announces general availability of AWS Interconnect - multicloud
• Automate AWS Cost Reporting with Scheduled Dashboard Email Delivery
• Introducing Anthropic’s Claude Opus 4.7 model in Amazon Bedrock
• Introducing Amazon Bio Discovery
• CVE-2026-5429 - Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme
• Issues with Amazon Athena ODBC Driver
• Issues with AWS Research and Engineering Studio (RES)
• CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport

AWS Morning Brief for the week of April, 13th with Corey Quinn. 

Links:

• AWS Certificate Manager now supports native certificate search
• Amazon S3 Lifecycle pauses actions on objects that are unable to replicate
• Amazon Bedrock now offers Claude Mythos Preview (Gated Research Preview)
• Amazon OpenSearch Serverless now supports Zstandard (zstd) codec for index compression
• AWS Secrets Manager console now supports custom input for AWS KMS keys
• Amazon Bedrock now supports cost allocation by IAM user and role
• Amazon S3 starts rolling out new security best practice to new and existing buckets by default
• Introducing AI-Powered Cost Analysis in AWS Cost Explorer
• Launching S3 Files, making S3 buckets accessible as file systems
• The future of managing agents at scale: AWS Agent Registry now in preview
• Understanding Amazon Bedrock model lifecycle
• Introducing OpenTelemetry & PromQL support in Amazon CloudWatch