May 25, 2026

AWS News May 18 - May 24

Show Notes

This week: Aurora MySQL 8.4 reaches GA with stronger security defaults, ECS deployments gain pause-and-continue controls for approval workflows, and Security Hub now detects unused IAM access across your organization. Plus DocumentDB Serverless gets major performance boosts, SAM CLI supports CloudFormation Language Extensions, and a new Istanbul Local Zone brings single-digit millisecond latency to Türkiye.

Secrets & Identity

Secrets Manager Agent: Pre-fetching for batch caching, IAM role assumption for cross-account
Secrets Manager: Managed rotation for Datadog API keys and Snowflake tokens
Security Hub: Detects unused IAM access across org, generates least-privilege policies

Compute & Containers

ECS: Pause/continue deployment controls with 14-day timeouts, approval workflows
ECS + EBS: Now available in GovCloud regions
Elastic VMware Service: 32 ESXi hosts per environment (2x increase)
Lightsail CDN: IPv6-only instance origins supported

Data & Analytics

Redshift: Direct writes to Iceberg tables, ALTER TABLE for partitioning
DocumentDB Serverless: v8.0 with 7x query latency, 30x faster vector index builds
Aurora MySQL 8.4: GA with TLS 1.2/1.3 enforced, automated upgrade prechecks
CloudWatch Logs Insights: 13 new commands (base64 decode, logfmt parse, geo distance)
Keyspaces: Expanded to new Asia Pacific regions

ML & AI

SageMaker Studio: GPU reservation via Flexible Training Plans, up to 65% savings
SageMaker HyperPod: Inference payload capture to S3 for training/evaluation
SageMaker endpoints: OpenAI-compatible APIs (works with LangChain, Strands)
SageMaker Unified Studio: Glue Data Quality rules, auto connector provisioning, business metadata
Bedrock: Custom tagging for inference calls (team, project, environment)

Infrastructure & Networking