AWS News Jul 06 - Jul 12

This week: Security Hub expands to monitor Microsoft Azure resources alongside AWS with unified posture management, Systems Manager now connects and manages Azure VMs without manual agent installation, and ACM launches a fully managed ACME server for automated TLS certificate issuance. Plus RDS for Oracle 26ai brings Bedrock integration, and Aurora Dsql adds real-time CDC to Kinesis.

Security & Identity

• Secrets Manager: Auto-rotation for Paddle API keys, GitLab tokens
• ACM: Managed ACME server for automated TLS via Certbot/cert-manager
• Security Hub: Blast radius mapping, attack chain graphs
• Security Hub: Azure resource monitoring (VMs, containers, identities)
• Security Hub: Network scanning confirms actual internet reachability
• Organizations: Account departure controls enabled by default
• VPC: Centralized encryption-in-transit via declarative policies

Compute & Containers

• EKS Auto Mode: GPU fees cut 35% (G-series), 60% (P-series) July 2026
• ECS Managed: Same GPU fee reductions as EKS Auto Mode
• EMR Serverless: 2x worker limits (32 vCPUs, 244GB memory)
• EC2: Replace root volume directly from EBS, no snapshot needed

AI/ML

• SageMaker Studio: One-click Hugging Face model import
• SageMaker HyperPod: Disaggregated prefill/decode for LLM inference
• SageMaker HyperPod: AMI-based Slurm config, deep health checks
• SageMaker Unified Studio: MWAA integration, 19 new workflow operators
• SageMaker Unified Studio: OpenLineage data lineage for IAM domains
• SageMaker Unified Studio: Custom asset cataloging (any format)
• SageMaker Feature Store: Batch ops for high-throughput ingestion
• Neuron 2.31: MX FP8, UltraServer Operator, 14 new kernels
• RDS Oracle 26ai: Bedrock integration, AI Vector Search, Select AI

Data & Analytics

• Aurora DSQL: CDC streaming to Kinesis Data Streams
• Redshift: Graviton R8g, 2.4x faster, 30% cheaper
• MSK Replicator: External Kafka to MSK Standard brokers

Management & DevTools

• Systems Manager: Azure VM management without agent install
• CloudWatch App Signals: Auto exception snapshots, latency anomalies
• Config: 191 new managed rules (Bedrock, SageMaker, EKS, etc.)
• AWS MCP Server: OAuth support, DMS Schema Conversion integration
• EMR on EKS: AI Spark troubleshooting agent
• Builder Center: Free 8-hour sandbox environments

AWS News Feed: Whats new at AWS

For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me

For detailed show notes check out awsnewsweekly.com