AWS Morning Brief for the week of June 29th, with Corey Quinn. 

Links:

• Amazon CloudWatch launches OTel Container Insights for Amazon EKS
• Amazon GuardDuty AI-powered investigations accelerate threat response (Preview)
• Amazon Route 53 Global Resolver now supports sharing DNS Views between AWS Accounts
• Automate AWS Invoice Retrieval with New Programmatic APIs
• Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs
• Upgrading Lambda function runtimes at scale with AWS Transform custom
• Huntington Bank: Redacting sensitive data from 400M+ documents with AWS
• Open Governance for MySQL: A Step Forward for the Community
• How AWS and a local community organization built a developer engagement model that works
• Modernizing border control with digital arrival cards on AWS Cloud
• Prevent data exfiltration: AWS egress controls for cloud workloads
• Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs
• A new way to keep your AWS Certification current 
• CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins

AWS Morning Brief for the week of June 22nd, with Corey Quinn. 

Links:

• AWS Marketplace announces AI-assisted product listing
• Amazon CloudWatch introduces Log Analytics for unified log analysis
• Amazon EKS now supports customer-routed control plane egress
• Free Network Bandwidth Amazon GameLift Servers is Here!
• AWS announces AWS Blocks, an open-source framework for composing application backends on AWS (Preview)
• AWS Compute Optimizer enhances EBS volume recommendations with additional performance metrics
• Introducing AWS Continuum for security at machine speed
• AWS Management Console Private Access now works without internet connectivity
• AWS Security Agent announces support for Threat Modeling
• Grok 4.3 from xAI now available in Amazon Bedrock
• Amazon Aurora and RDS for MySQL expand Extended Support for MySQL 5.7 through June 2029
• AWS Marketplace reduces listing fee for professional services to 0.5%
• S3 Vectors: More Results, Cheaper Queries, Fresh Fees
• Amazon S3 annotations: attach rich, queryable context directly to your objects
• Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs
• AWS DevOps Agent adds release management capabilities to assess code changes before production (preview)
• AWS WAF adds AI traffic monetization capability to help content owners charge AI bots for content access
• Simulating Amazon EC2 EBS burst credits before downsizing an instance
• AWS Security Bulletin Quartet: AI Tools Forget Unix 101

AWS Morning Brief for the week of June 15th, with Corey Quinn. 

Links:

• AWS announces AWS Workload Credentials Provider
• Announcing the public preview of AWS FinOps Agent
• Introducing AI-Powered Cost Investigations For Cost Anomalies
• Amazon CloudWatch Logs Insights adds 23 new query commands and functions
• Introducing Target Coverage in Savings Plans Purchase Analyzer
• Introducing the AWS Credits Detail Page
• Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available
• Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors
• Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs
• AWS Nitro Isolation Engine: Formally verifying the hypervisor in the AWS Nitro System
• It’s safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore
• 27 AWS Security Bulletins: A Patch Tuesday That Lasted a Year

AWS Morning Brief for the week of June 8th, with Corey Quinn. 

Links:

• AWS Interconnect - multicloud now offers a free 500 Mbps tier
• Oracle Database@AWS is now available in twenty AWS Regions
• Amazon Cognito now supports multi-Region replication
• Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.36
• Amazon SES now supports tenant-level suppression lists
• AWS Compute Optimizer now supports 32-day lookback for EBS volume and ECS service rightsizing recommendations
• AWS Cost and Usage Report 2.0 now supports Athena and Redshift integration
• Amazon ElastiCache for Valkey now supports durability
• Understanding how backups work in Amazon Aurora
• OpenAI models and Codex on Amazon Bedrock are now generally available
• How Bedrock Streaming optimizes its AWS costs
• From Monolith to Multi-Account: Pinterest’s AWS Organization Transformation Journey
• Gain visibility into DDoS attacks with flow logs in AWS Shield Advanced
• Identify unused AWS KMS keys and prevent accidental key deletions
• CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
• CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

AWS Morning Brief for the week of June 1st, with Corey Quinn. 

Links:

• Monitor AWS Budgets directly in Billing and Cost Management Dashboards with new Budgets widget
• Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications
• Optimize costs in Amazon Aurora
• How AWS DevOps Agent uses multi-agent reasoning to find root causes
• Claude Opus 4.8 is now available on AWS
• Best Practices for TCP Connection Management on EC2
• Introducing US-based, US citizen, 24/7 technical support for AWS GovCloud (US) customers: Your mission never sleeps, neither do we
• Well-architected best practices for software supply chain security
• Automate Amazon EBS gp2 to gp3 migration at scale with AWS Step Functions and AWS Lambda
• AWS Organizations emits CloudTrail events for account membership changes
• CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI
• CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

AWS Morning Brief for the week of May 25th, with Corey Quinn. 

Links:

• Amazon Bedrock expands support for request-level usage attribution
• Amazon ECS introduces pause and continue controls for service deployments
• AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in preview
• AWS Organizations now supports higher quotas for service control policies (SCPs)
• Amazon Aurora MySQL 8.4 is now generally available
• Introducing ExtendDB: An open source DynamoDB-compatible adapter with pluggable storage backends
• Nine Entertainment’s journey: Achieving 98% cost savings with Amazon ElastiCache Serverless for Valkey
• Announcing updated retry behavior for AWS SDKs and Tools
• Announcing AWS CDK Mixins: Composable Abstractions for AWS Resources
• CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver
• CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin

AWS Morning Brief for the week of May 18th , with Corey Quinn. 

Links:

• Announcing general availability of Amazon EC2 M3 Ultra Mac instances
• Amazon EventBridge Scheduler adds 619 new SDK API actions, including Lambda Managed Instances
• Amazon Redshift launches RG instances powered by AWS Graviton
• Amazon Route 53 Domains adds support for 34 new Top Level Domains including .app, .dev, and .health.
• ENA Express for Amazon EC2 instances now supports traffic between Availability Zones
• Streaming CloudWatch metrics to VPC-based OpenTelemetry collectors using Lambda
• How HotelTrader cut inter-AZ cost 95% and latency by 49% with Valkey GLIDE on Amazon ElastiCache
• Introducing Claude Platform on AWS: Anthropic’s native platform, through your AWS account
• Amazon CloudFront Premium flat-rate pricing plan now supports higher, configurable usage allowances
• Scalable cross-cloud data migration to Amazon S3 with distributed rclone
• Dirty Frag and other issues in Amazon Linux kernels
• CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
• Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel
• Ongoing updates on Copy.fail and variants
• Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &: CVE-2026-8597)

AWS Morning Brief for the week of May 11th , with Corey Quinn. 

Links:

• Announcing Agent Toolkit for AWS — help AI coding agents build effectively on AWS
• Amazon CloudFront Announces WebSocket Support for VPC Origins
• Amazon EventBridge supports data plane logging to AWS CloudTrail
• AWS IAM now provides higher maximum quotas for roles, role trust policies, instance profiles, managed policies, and identity providers
• AWS Marketplace now supports programmatic procurement with Agreements API
• The AWS MCP Server is now generally available
• Announcing Valkey 9.0 for Amazon ElastiCache
• Query billion-scale vectors with SQL: Integrating Amazon S3 Vectors and Aurora PostgreSQL
• You Wanted to Become AI-Native, and All You Got Was a Lousy Foundation
• CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials
• CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent
• CVE-2026-31431

AWS Morning Brief for the week of May 4th, with Corey Quinn. 

Links:

• AWS Management Console now supports settings to control service and Region visibility - AWS
• Amazon CloudWatch adds visual agent configuration to the EC2 console
• AWS Announces Amazon Connect Decisions
• Amazon Connect Talent for AI-powered hiring (now available in Preview)
• Introducing Amazon EC2 R8in and R8ib instances
• Amazon OpenSearch Service now supports index-level encryption
• Amazon Redshift Serverless AI-driven scaling is now the default for new workgroups
• AWS Cost Optimization Hub now supports CSV download
• AWS KMS now tracks last usage of all KMS keys
• AWS Lambda adds support for Ruby 4.0
• AWS Marketplace Management Portal now supports bank account deletion
• Amazon Bedrock now offers OpenAI models, Codex, and Managed Agents (Limited Preview)
• Amazon CloudFront now supports invalidation by cache tag
• Introducing Amazon EC2 C8ine and M8ine instances
• Identifying security risks using AWS Cost and Usage Report data
• Amazon Q Developer end-of-support announcement
• Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912
• Issues in tough library and tuftool CLI utility
• CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS
• Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow
• CVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
• Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues

AWS Morning Brief for the week of April 27th, with Corey Quinn. 

Links:

• Amazon CloudWatch pipelines now supports configuration of processors via AI
• Introducing the Amazon EKS Hybrid Nodes gateway for hybrid Kubernetes networking
• Amazon EKS enhances cluster governance with new IAM condition keys
• Attributed Revenue Dashboard Now Available in AWS Partner Central
• AWS Lambda functions can now mount Amazon S3 buckets as file systems with S3 Files
• Amazon CloudWatch Logs Insights introduces JOIN and sub-query commands
• AWS Lambda Durable Execution SDK for Java GA
• Amazon S3 Express One Zone now supports S3 Inventory
• Amazon S3 now supports five additional checksum algorithms
• AWS Secrets Manager extends managed external secrets to MongoDB Atlas and Confluent Cloud
• Track Amazon Bedrock Costs by Caller Identity with IAM Principal-Based Cost Allocation
• Transforming FinOps with the Latest Amazon Q Cost Capabilities
• Aurora Serverless: Faster performance, enhanced scaling, and still scales down to zero
• From developer desks to the whole organization: Running Claude Cowork in Amazon Bedrock
• Get to your first working agent in minutes: Announcing new features in Amazon Bedrock AgentCore
• Automated network incident response with AWS DevOps Agent
• Accelerate development workflows with Amazon EBS Volume Clones
• Troubleshooting Amazon S3 access denied errors using Kiro CLI
• CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver
• CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python