Last Week In AWS Podcast

AWS Morning Brief for the week of July 26th, with Corey Quinn. 

Links:

• Amazon ECS now provides Action Logs for deployment and orchestration visibility
• Amazon Managed Service for Prometheus supports 1.5B active metrics and 200K rules per workspace
• Amazon SES introduces pricing plans
• AWS Network Load Balancer now supports Listener Rules for custom traffic routing
• AWS Organizations increases RCP quota to 2,000 per organization
• AWS now supports automatic credit memo application preferences
• AWS Secrets Manager now publishes secret update notifications to Amazon EventBridge
• JVM memory, CPU, and classpath best practices for Java containers on AWS
• Connection pooling strategies in Amazon Aurora DSQL
• Custom OS installation now available on AWS DeepRacer devices
• Thermodynamic sampling of disordered materials with an analog Hamiltonian Rydberg simulator
• Unlocking data residency use cases with Amazon S3 in AWS Local Zones
• AWS Security Bulletins: New Tools, Ancient Failures

AWS Morning Brief for the week of July 20th, with Corey Quinn. 

Links:

• Amazon CloudWatch Logs announces intelligent tiering for storage
• Amazon Cognito now supports importing users with password hashes
• Introducing Amazon GuardDuty AI Protection for AWS AI workloads
• AWS Organizations now applies account departure security controls by default for new organizations created via AWS Organizations console
• AWS Lambda announces self-managed code storage
• Amazon S3 removes 30-day minimum for transitions to S3 Standard-IA and S3 One Zone-IA
• Amazon SQS turns 20: Two decades of reliable messaging at scale
• Announcing Lambda MicroVMs: serverless compute environments with VM-level isolation and near-instant startup
• Eliminating Java cold starts with AWS Lambda Managed Instances
• Introducing open source Bulk Executor for Amazon DynamoDB
• Automating CIDR expansion: Reducing IP exhaustion downtime
• Setting up Layer 2 Networking on Amazon EC2
• Security Hub adds AI workload protection and multicloud support for Microsoft Azure
• Five CVEs and the Agentic AI Security Reckoning

AWS Morning Brief for the week of July 13th with Corey Quinn. 

Links:

• AWS Security Hub extends unified security management to Microsoft Azure
• Amazon EKS Auto Mode reduces GPU management fees by up to 60%
• Amazon RDS for Oracle now supports Oracle Database 26ai
• AWS Builder Center Now Offers Free Sandbox Environments
• AWS Security Hub now offers Network Scanning to identify publicly reachable resources
• Amazon Cognito now supports self-service provisioned API rate limits
• AWS Security Hub adds impact analysis for exposure findings
• Blazing a Trail: How Peloton Rebuilt the SDLC for the Agentic Era with Amazon Bedrock
• How United Airlines solved IP exhaustion with Private NAT Gateway
• Building secure AI agents at scale: Introducing Loom for AWS
• What does it cost to answer one question? Measuring per-request cost in agentic workloads
• Designing for the inevitable: System prompt leakage and mitigations in generative AI applications
• The CISO’s guide to post-quantum mandates and migrations
• Two CVEs on the theme of guarding keys badly

AWS Morning Brief for the week of July, 6th with Corey Quinn. 

Links:

• Announcing general availability of Amazon WorkSpaces for AI agents
• Amazon CloudWatch supports creating alarms from log queries
• ECS Service Connect now supports Zone-Aware routing
• How InterWiz reduced AI costs by 90% with Amazon Bedrock
• Accelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express mode
• Automate public TLS certificate issuance with ACME support in AWS Certificate Manager
• Upgrade Amazon EKS clusters with confidence using Kubernetes version rollbacks
• Safely Releasing Frontier Models to Customers
• Accelerating government FinOps with Amazon Quick
• Four CVEs: AWS reads half your request, leaks the rest

AWS Morning Brief for the week of June 29th, with Corey Quinn. 

Links:

• Amazon CloudWatch launches OTel Container Insights for Amazon EKS
• Amazon GuardDuty AI-powered investigations accelerate threat response (Preview)
• Amazon Route 53 Global Resolver now supports sharing DNS Views between AWS Accounts
• Automate AWS Invoice Retrieval with New Programmatic APIs
• Run isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMs
• Upgrading Lambda function runtimes at scale with AWS Transform custom
• Huntington Bank: Redacting sensitive data from 400M+ documents with AWS
• Open Governance for MySQL: A Step Forward for the Community
• How AWS and a local community organization built a developer engagement model that works
• Modernizing border control with digital arrival cards on AWS Cloud
• Prevent data exfiltration: AWS egress controls for cloud workloads
• Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs
• A new way to keep your AWS Certification current 
• CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins

AWS Morning Brief for the week of June 22nd, with Corey Quinn. 

Links:

• AWS Marketplace announces AI-assisted product listing
• Amazon CloudWatch introduces Log Analytics for unified log analysis
• Amazon EKS now supports customer-routed control plane egress
• Free Network Bandwidth Amazon GameLift Servers is Here!
• AWS announces AWS Blocks, an open-source framework for composing application backends on AWS (Preview)
• AWS Compute Optimizer enhances EBS volume recommendations with additional performance metrics
• Introducing AWS Continuum for security at machine speed
• AWS Management Console Private Access now works without internet connectivity
• AWS Security Agent announces support for Threat Modeling
• Grok 4.3 from xAI now available in Amazon Bedrock
• Amazon Aurora and RDS for MySQL expand Extended Support for MySQL 5.7 through June 2029
• AWS Marketplace reduces listing fee for professional services to 0.5%
• S3 Vectors: More Results, Cheaper Queries, Fresh Fees
• Amazon S3 annotations: attach rich, queryable context directly to your objects
• Announcing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs
• AWS DevOps Agent adds release management capabilities to assess code changes before production (preview)
• AWS WAF adds AI traffic monetization capability to help content owners charge AI bots for content access
• Simulating Amazon EC2 EBS burst credits before downsizing an instance
• AWS Security Bulletin Quartet: AI Tools Forget Unix 101

AWS Morning Brief for the week of June 15th, with Corey Quinn. 

Links:

• AWS announces AWS Workload Credentials Provider
• Announcing the public preview of AWS FinOps Agent
• Introducing AI-Powered Cost Investigations For Cost Anomalies
• Amazon CloudWatch Logs Insights adds 23 new query commands and functions
• Introducing Target Coverage in Savings Plans Purchase Analyzer
• Introducing the AWS Credits Detail Page
• Anthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now available
• Now available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processors
• Try the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIs
• AWS Nitro Isolation Engine: Formally verifying the hypervisor in the AWS Nitro System
• It’s safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore
• 27 AWS Security Bulletins: A Patch Tuesday That Lasted a Year

AWS Morning Brief for the week of June 8th, with Corey Quinn. 

Links:

• AWS Interconnect - multicloud now offers a free 500 Mbps tier
• Oracle Database@AWS is now available in twenty AWS Regions
• Amazon Cognito now supports multi-Region replication
• Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.36
• Amazon SES now supports tenant-level suppression lists
• AWS Compute Optimizer now supports 32-day lookback for EBS volume and ECS service rightsizing recommendations
• AWS Cost and Usage Report 2.0 now supports Athena and Redshift integration
• Amazon ElastiCache for Valkey now supports durability
• Understanding how backups work in Amazon Aurora
• OpenAI models and Codex on Amazon Bedrock are now generally available
• How Bedrock Streaming optimizes its AWS costs
• From Monolith to Multi-Account: Pinterest’s AWS Organization Transformation Journey
• Gain visibility into DDoS attacks with flow logs in AWS Shield Advanced
• Identify unused AWS KMS keys and prevent accidental key deletions
• CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
• CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

AWS Morning Brief for the week of June 1st, with Corey Quinn. 

Links:

• Monitor AWS Budgets directly in Billing and Cost Management Dashboards with new Budgets widget
• Introducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applications
• Optimize costs in Amazon Aurora
• How AWS DevOps Agent uses multi-agent reasoning to find root causes
• Claude Opus 4.8 is now available on AWS
• Best Practices for TCP Connection Management on EC2
• Introducing US-based, US citizen, 24/7 technical support for AWS GovCloud (US) customers: Your mission never sleeps, neither do we
• Well-architected best practices for software supply chain security
• Automate Amazon EBS gp2 to gp3 migration at scale with AWS Step Functions and AWS Lambda
• AWS Organizations emits CloudTrail events for account membership changes
• CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI
• CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

AWS Morning Brief for the week of May 25th, with Corey Quinn. 

Links:

• Amazon Bedrock expands support for request-level usage attribution
• Amazon ECS introduces pause and continue controls for service deployments
• AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in preview
• AWS Organizations now supports higher quotas for service control policies (SCPs)
• Amazon Aurora MySQL 8.4 is now generally available
• Introducing ExtendDB: An open source DynamoDB-compatible adapter with pluggable storage backends
• Nine Entertainment’s journey: Achieving 98% cost savings with Amazon ElastiCache Serverless for Valkey
• Announcing updated retry behavior for AWS SDKs and Tools
• Announcing AWS CDK Mixins: Composable Abstractions for AWS Resources
• CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver
• CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin