Episodes

This week: Security Hub expands to monitor Microsoft Azure resources alongside AWS with unified posture management, Systems Manager now connects and manages Azure VMs without manual agent installation, and ACM launches a fully managed ACME server for automated TLS certificate issuance. Plus RDS for Oracle 26ai brings Bedrock integration, and Aurora Dsql adds real-time CDC to Kinesis. Security & Identity Secrets Manager: Auto-rotation for Paddle API keys, GitLab tokens ACM: Managed ACME server ...

This week: EC2 C9g instances debut with fifth-gen Graviton delivering 25% better performance, Claude Sonnet 5 arrives on Bedrock with superior coding and agentic capabilities, and CloudFormation express mode cuts deployments by up to 4x. Plus OpenSearch gets a purpose-built log analytics engine with 4x better price-performance, and ECS adds zone-aware routing to cut cross-AZ costs. Compute EC2 C9g/C9gd: Graviton 5, 25% faster than G4, 35% faster ML inference EC2 Dedicated Hosts: AMD SEV-SNP co...

This week: Lambda MicroVMs bring VM-level isolation to serverless for running untrusted code, GuardDuty adds AI-powered investigations to help distinguish real threats from false positives, and CloudWatch Logs now accepts syslog directly from network devices without agents. Plus Outposts gets full lifecycle management in the console and new OpenAI models hit Bedrock in GovCloud. Compute & Infrastructure Lambda MicroVMs: VM-level isolation for user/AI code, 8hr state, dedicated HTTPS endpoint E...

This week: AWS launches Continuum for autonomous security vulnerability management, Bedrock AgentCore reaches GA with built-in guardrails and optimization tools, and S3 Vectors slashes query costs by up to 80%. Plus WAF introduces AI bot monetization, CloudWatch adds cross-account metrics replication, and new Graviton 5-powered M9g database instances deliver 30% better performance. Compute EC2 G7: GA, NVIDIA RTX PRO 6000 Blackwell, 4.6x better AI inference vs G6 RDS: M9g instances (Graviton 5)...

This week: New Graviton5-powered M9g instances deliver 25% better compute with mathematically proven workload isolation, Claude Fable 5 brings autonomous AI agents to Bedrock, and Amazon Q now explains your cost anomalies and spending patterns in plain language. Plus Lambda Managed Instances hit most regions, CloudWatch Logs gets 23 new query commands, and VPC Flow Logs now captures resource tags directly. Analytics & Data Redshift: Snapshot billing now based on unique blocks, not total size A...

This week: OpenAI's GPT 5.5 and Codex land on Amazon Bedrock with full pricing parity, Cognito adds multi-region replication for resilient authentication, and ECS on Fargate scales up to 32 vCPUs for demanding workloads. Plus Bedrock AgentCore gets interactive terminal access for debugging AI agents, and the AWS MCP Server now supports multi-account workflows in a single session. Email & Messaging SES: Per-tenant suppression lists for bounce/complaint isolation AI/ML - Bedrock Bedrock: OpenAI ...

This week: Major GPU upgrades hit SageMaker with P6 Blackwell and P5e H200 instances for AI training, OpenSearch Serverless scales 20x faster with scale-to-zero pricing for agentic workloads, and Claude Opus 4 arrives on Bedrock for complex autonomous coding tasks. Plus Shield Advanced adds packet-level DDoS forensics and SES now shows inbox placement metrics. Security & Compliance GuardDuty: Malware scan for S3 continuous backups, verify clean recovery points Shield Advanced: Packet-level DDo...

This week: Aurora MySQL 8.4 reaches GA with stronger security defaults, ECS deployments gain pause-and-continue controls for approval workflows, and Security Hub now detects unused IAM access across your organization. Plus DocumentDB Serverless gets major performance boosts, SAM CLI supports CloudFormation Language Extensions, and a new Istanbul Local Zone brings single-digit millisecond latency to Türkiye. Secrets & Identity Secrets Manager Agent: Pre-fetching for batch caching, IAM role assum...

This week: AWS Transform adds containerized migration and an agentic AI assistant for .NET developers, Claude Platform launches as GA making AWS the first cloud to offer Anthropic's native experience, and EC2 M3 Ultra Mac instances bring Mac Studio hardware to the cloud. Plus CloudFormation's new cross-account output references, major SageMaker GPU instance expansions, and Organizations doubles SCP limits. Migration & Modernization Transform: Containerizes apps, generates Dockerfiles, Terraform...

This week: ElastiCache adds built-in full-text and vector search with Valkey 9, SageMaker AI introduces agentic model customization that cuts deployment from months to days, and Bedrock AgentCore launches payment capabilities for autonomous AI agents. Plus major IAM quota increases, new M8 and R8 EC2 instances, and the AWS MCP Server goes GA. Compute EC2 I8ge: 60% better compute, 55% better storage/TB, 120TB NVMe, 60% lower IO latency EC2 R8idn/R8idb: 43% better compute/vCPU, 600Gbps network, ...

This week: Lambda Durable Execution SDK brings year-long workflow checkpointing to Java developers, S3 adds ten checksum algorithms for data integrity, and CloudWatch Logs Insights now supports JOIN queries across log groups. Plus MSK Replicator gains external cluster migration, Aurora Serverless v4 delivers 30% better performance, and Bedrock AgentCore lets you prototype agents without orchestration code. Identity & Directory Managed Microsoft AD: Auto-upgraded to Windows 2016, adds LAPS suppo...

This week: AWS Interconnect goes multicloud with Google Cloud support and Azure coming in 2026, Secrets Manager adds post-quantum encryption to protect against future threats, and new C8in instances deliver 600 Gbps networking. Plus CloudWatch gets cross-region telemetry management and Aurora D-sequel launches a dedicated PHP connector. Networking Interconnect Last Mile: Branch/DC to cloud via Lumen, 1-100 Gbps dynamic scaling, MACsec default Interconnect Multicloud: GA - private links to GCP ...

This week: S3 Files transforms buckets into fully-featured file systems accessible from EC2, Lambda, and containers without data duplication. Lambda response streaming reaches all commercial regions for faster LLM apps, and Cost Explorer adds natural language queries powered by Amazon Q. Plus Bedrock's Claude Mythos Preview for cybersecurity and EKS warm pools for rapid scaling. Storage S3 Files: Mount buckets as file systems on EC2/Lambda/containers, EFS-backed low-latency S3: SSE-C disabled ...

This week: AWS announces lifecycle changes for several services including App Runner and Audit Manager entering maintenance mode, Amazon Security Agent brings autonomous penetration testing to GA, and DevOps Agent launches for automated incident resolution. Plus CloudWatch gets native OpenTelemetry support with PromQL querying, S3 Vectors expands to 31 regions, and Direct Connect adds CloudFormation support. Compute & Containers ECS Managed Daemons: Deploy security/observability agents independ...

This week: Aurora PostgreSQL joins the AWS Free Tier with express configuration for instant serverless setup, Lambda Managed Instances gets a major boost to 32GB memory and 16 vCPUs, and Step Functions adds 28 new service integrations including Bedrock AgentCore. Plus SageMaker HyperPod continuous provisioning, ParallelCluster P6B300 support, and Amazon Q launches in Tokyo, London, and Frankfurt regions. Compute Lambda: 32GB RAM/16 vCPUs, 4096 file descriptors (4x increase) EC2 I8ge: Graviton4...

This week: Amazon Bedrock adds NVIDIA Nemotron, GLM 5, and Minimax M2.5 models for agentic AI workloads, while AgentCore Runtime gains shell command execution and WebRTC streaming. Amazon Redshift delivers up to 7x faster dashboard queries with new compilation optimization. Plus EKS Provisioned clusters get 99.99% SLA, Lambda functions can now discover their Availability Zone, and OpenSearch 3.5 brings persistent memory for AI agents. Connect & Contact Center Connect: Email forwarding to extern...

This week: S3 introduces reserved namespaces eliminating the hunt for globally unique bucket names, Route 53 Global Resolver goes GA with anycast DNS and built-in threat filtering, and Bedrock AgentCore adds stateful MCP server support for complex multi-turn workflows. Plus CloudWatch Logs Insights triples concurrent query limits and Neptune gets native spatial data support. Security & Identity IAM Roles Anywhere: Post-quantum certificates (FIPS 204 ML-DSA) Private CA SCEP: PrivateLink support...

This week: Amazon Connect Health launches five AI agents for healthcare workflows, Bedrock AgentCore Policy goes GA with natural language-to-Cedar policy conversion, and SageMaker Unified Studio adds Kiro IDE remote connections plus third-party catalog sync. Plus GameLift gets built-in DDoS protection, EventBridge Scheduler bumps default limits to 5K requests per second, and Database Savings Plans now cover OpenSearch and Neptune Analytics. Data & Analytics Redshift: COPY templates for reusable...

This week: Graviton 4 bare-metal instances arrive with M8gn delivering 600 Gbps networking, Amazon Q Developer now generates visual charts and tables directly in the console, and WAF adds an AI activity dashboard tracking over 650 bots and agents. Plus Aurora DSQL gets a browser playground, Bedrock handles tool execution server-side, and EKS Node Monitoring Agent goes open source. AI & Machine Learning Bedrock: Automated Reasoning links rules to source docs; 99% hallucination detection Bedrock...

This week: EC2 enables nested virtualization on virtual instances for KVM and Hyper-V workloads, Aurora now encrypts all new clusters by default, and new HPC8a instances deliver 40% higher performance for compute-intensive workloads. Plus Bedrock adds reinforcement fine-tuning for open-weight models and ACM shortens certificate validity to 198 days. Compute EC2: Nested virtualization on virtual instances (KVM, Hyper-V) EC2 HPC8a: 40% faster, 25% better price-perf vs HPC7a, 192 cores Database ...

This week: Bedrock adds six open-weight models through Project Mantle with higher quotas and OpenAI API compatibility, CloudWatch Alarm Mute Rules let you silence notifications during maintenance without losing visibility, and MSK now manages Kafka topics directly through AWS APIs. Plus new EC2 M8azn instances hit 5GHz, Aurora Global Database automates cross-region upgrades, and Lake Formation scales to hundreds of thousands of shared tables. Compute EC2 M8azn: 5GHz (highest cloud frequency), 2...

This week: DynamoDB global tables now replicate across multiple AWS accounts for stronger fault isolation, IAM Identity Center adds multi-region replication for resilient single sign-on, and new EC2 C8id, M8id, and R8id instances deliver up to 43% higher performance. Plus CloudFront mutual TLS for origins, Connect voice testing APIs, and cost reductions for Network Firewall. Compute EC2 C8id/M8id/R8id: GA, 43% faster, 3x memory bandwidth vs gen6 Lightsail: Memory-optimized bundles up to 512GB ...

This week: EventBridge quadruples payload limits to 1MB, EKS adds Kubernetes 1.35 with in-place pod resource updates, and S3 lets you change encryption types without moving data. Plus Network Firewall gains AI traffic filtering, GameLift scales to zero, and new Deployment Agent SOPs take web apps from prototype to production with a single prompt. Compute & Containers EKS 1.35: In-place pod resource updates, local traffic distribution, image volumes for AI models GameLift Servers: Auto-scale to...

This week: EC2 G7e instances bring NVIDIA Blackwell GPUs for 2.3x better AI inference, RDS Blue Green Deployments now complete switchovers in under 5 seconds, and QuickSight doubles SPICE capacity to 2TB. Plus Graviton 4 instances expand across Aurora and RDS, ECR adds cross-repo layer sharing, and Route 53 picks up .AI domains. Compute EC2 G7e: GA with NVIDIA RTX PRO 6000 Blackwell GPUs, 2.3x inference vs G6e EC2 M4 Max Mac: GA with M4 Max (16-core CPU, 40-core GPU), 25% faster builds EC2 C8...