AWS Intelligence Digest

On October 21, 2026, the PHP project released emergency fixes for two critical remote code execution (RCE) vulnerabilities in the PHP core runtime, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively named PHP2Shell. Both are rated 9.2 (Critical) under CVSS v4.0, and both allow an unauthenticated attacker to run code on a vulnerable server. The fixed […]

Deploy the latest service software update for OpenSearch Service to incorporate critical security fixes and maintain system integrity.

Deploy the updated amazon-redshift-python-driver version 2.1.14 across all environments to resolve the security issue and maintain the integrity of database connections.

Deploy the patched Amazon Redshift JDBC Driver version 2.2.2 across all environments to enhance security and prevent arbitrary code execution.

Deploy updated trust bundles and SDKs across your AWS infrastructure to address the eMudhra CA key recovery vulnerability (CVE-2026-111943) and maintain secure communication channels for your services.

Deploy the latest DJL version 0.37.0 to ensure the platform is secure from the integer overflow vulnerability affecting tensor buffer validation.

Deploy the SSM Agent version 3.3.4851.0 across all managed nodes to resolve the security vulnerability and ensure the integrity and security of the managed instances.

Integrate the latest OpenSearch Dashboards versions into your deployment pipelines to ensure the Vega expression function is properly validated, reducing the risk of XSS attacks.

Deploy the patched version of the AWS SDK for Go v2 to ensure the EventStream header decoder is secure against malformed response frames, maintaining system integrity and performance.

Deploy the updated Postgres MCP Server version and configure it with minimal-privilege roles to enhance security and reduce the risk of unauthorized data modifications.

Integrate the latest security patches for AWS Security Agent plugin and MCP Server to enhance platform security and prevent unauthorized access to sensitive data.

Deploy the updated AWS Advanced JDBC Wrapper version 4.3.0 to enhance security and prevent potential XXE attacks, ensuring the integrity and confidentiality of sensitive data.

Integrate the latest Corretto versions into your CI/CD pipelines to ensure all Java applications are up-to-date with the necessary security patches and performance improvements.

Discontinue use of Amazon Web Services Multi Model Server and transition to a supported model-serving solution to maintain security and support.

Adopt the reduced EMR on EKS pricing to enhance your platform's cost-efficiency, allowing for greater scalability and performance at a lower operational cost.

Adopt the force rollback feature in AWS CloudFormation to enhance the resilience and efficiency of your deployment pipelines, reducing the time required to return stacks to a deployable state and improving overall platform reliability.

Integrate the updated aws-c-mqtt library (v0.16.2) into your platform to address the security vulnerability and maintain the reliability of MQTT communications.

Adopt the new 5-second default refresh interval in Amazon OpenSearch Serverless to enhance the platform's capability for near real-time data retrieval, reducing latency and improving the relevance of search results and AI-driven recommendations.

Deploy the latest AWS SAM CLI version v1.166.2 to enhance security and reduce the risk of command injection attacks in serverless application builds.

Deploy the security patch for Amazon Athena engine version 3 to maintain the integrity and security of query processing, ensuring compliance with AWS security standards.

Deploy the latest versions of Kiro IDE and CLI to enhance security posture and protect against potential threats from maliciously crafted project directories.

Integrate the updated Amazon SageMaker Python SDK to enhance security by verifying bucket ownership, thus preventing potential unauthorized access and code execution.

Deploy the patched Amazon DocumentDB MCP Server version 1.0.12 to resolve the incorrect authorization vulnerability and maintain secure interactions between AI assistants and DocumentDB databases.

Deploy the latest versions of AWS CLI to incorporate fixes for CVE-2026-18654, enhancing the security posture of EMR clusters by enabling SSH host key verification and protecting against potential man-in-the-middle attacks.

Deploy the updated Athena Federated Query version v2026.30.1 to enhance security and ensure the platform remains compliant with the latest security standards.

Deploy the latest FreeRTOS-Kernel version V11.3.1 to incorporate critical security fixes, enhancing overall platform security and reliability.

Deploy the updated awsdac version (0.24) across all environments to mitigate the Zip Slip vulnerability (CVE-2026-81838), enhancing the security posture of local machines processing architecture diagrams.

Deploy the updated OpenSearch Security Analytics Plugin and service software to enhance security posture and protect against potential SSRF attacks and unauthorized file access.

Deploy the updated ion-java version 1.12.1 across all relevant services to mitigate security risks and maintain system integrity, ensuring all parser configurations are aligned with the new security measures.

Deploy the patched version 0.1.5 of awslabs.aws-transform-mcp-server to ensure secure interaction between AI-powered assistants and AWS Transform.

Deploy the updated AWS FPGA Development Kit to ensure the security of the platform and maintain the trust of users in the service.

Deploy the updated Amazon Ion-C library with the enforced recursion depth limit to enhance application resilience against denial of service attacks.

Deploy the patched awslabs.dynamodb-mcp-server version 2.1.6 to ensure secure interaction between AI coding assistants and DynamoDB, reducing the risk of code injection vulnerabilities.

Deploy the updated Amazon Bedrock AgentCore harness with enhanced input validation to strengthen the security posture and protect against potential vulnerabilities.

Deploy the updated @amazon-codecatalyst/blueprints.blueprint package to ensure the security of project environments and prevent potential command injection attacks.

Deploy updated PHP packages and platform versions to ensure security compliance and protect against remote code execution vulnerabilities identified in CVE-2026-109618 and CVE-2026-109619.

Deploy the updated log4j-cve-2021-44228-hotpatch version to enhance security and prevent potential command injection attacks.

Deploy the updated Amazon EFS CSI Driver v3.4.1 across all Kubernetes environments to enhance security and maintain the integrity of Amazon EFS file systems.

Deploy the latest amazon-ssm-agent version 3.3.4515.0 across all instances to ensure security compliance and protect against the identified path traversal vulnerability.

Deploy the latest OpenSearch SQL Plugin versions and service software updates to ensure the platform remains secure against the CVE-2026-83497 vulnerability, reducing the risk of unauthorized code execution.

Adopt the updated Amazon SageMaker Python SDK to enhance the security of AI/ML pipelines by replacing symmetric HMAC signing with asymmetric ECDSA signing, reducing the risk of unauthorized code execution.

Deploy the patched version of CICD-toolchain-for-serverless-applications to maintain secure and compliant CI/CD pipelines for serverless application development.

Adopt the new AWS Transform features to simplify migration architecture, reduce toil, and align with best practices, resulting in faster and more efficient migrations to AWS.

Deploy the latest Amazon Linux kernel updates and configure module loading restrictions to protect against the 'Dirty Frag' vulnerabilities, enhancing the security posture of your AWS infrastructure.

Deploy the latest jsii-diff version to incorporate the security fixes and maintain the reliability and security of your AWS environment.

Deploy the updated QnABot on AWS version 7.3.0, which replaces the static-eval dependency with a custom expression evaluator, to enhance the security of your conversational interfaces and protect backend resources from potential exploits.

Deploy the latest version of aws-healthomics-mcp-server to enhance security and maintain compliance, reducing the risk of data breaches and ensuring the integrity of bioinformatics analyses.

Deploy the latest RES version and integrate security patches to enhance the platform's resilience against command injection and privilege escalation attacks, maintaining a secure research environment.

Deploy the updated EFS CSI Driver version v3.0.1 to enhance the security posture of Kubernetes clusters utilizing Amazon EFS, reducing the risk of unauthorized mount option manipulation.

Deploy the latest version of Language Servers for AWS (1.69.0) across all integrated development environments to ensure security compliance and maintain the reliability of AI coding assistance features.

Deploy the updated Amazon Athena ODBC driver version 2.1.0.0 across all environments to enhance security posture and protect against potential exploits, ensuring seamless integration and operation within the platform.

Deploy the latest version of @aws-amplify/codegen-ui-react (2.20.6) across all relevant environments to ensure security compliance and protect against code injection threats.

Deploy the latest strands-agents-tools version 0.7.0 to enhance security and prevent credential exposure, ensuring compliance with updated security standards.

Integrate the updated aws-c-http library (version 0.11.0) into the platform to enhance security and prevent potential memory corruption issues in client applications.

Adopt the latest CU and GDR updates for Amazon RDS Custom for SQL Server to integrate advanced security patches and performance enhancements, reducing operational toil and improving database reliability.

Integrate the latest security patches for AWS Ops Wheel into your deployment pipelines and ensure all forked or derivative code is updated to mitigate potential security risks.

Integrate the latest version of aws-smithy-json (0.62.7) into your platform to enhance security and prevent denial of service vulnerabilities.

Integrate the Global Resiliency page into your Amazon Connect deployment practices to maintain high availability and resiliency, reducing the risk of service interruptions during region switches.

Adopt the latest aws-cdk-lib version 2.260.0 to incorporate the security fixes and ensure the platform's resilience against potential OS command injection attacks.

Integrate the new configuration option for ALB to accumulate HTTP/2 data frames before AWS WAF inspection, ensuring comprehensive security coverage and reducing the risk of partial request body inspection.

Deploy the latest Firecracker versions to incorporate critical security fixes and maintain the stability and security of your virtualization infrastructure.

Deploy the updated awslabs.aws-api-mcp-server version 1.3.47 across the platform to ensure consistent security policy enforcement and reduce the risk of unauthorized AWS operations.

Deploy the updated ECS agent version 1.103.0 across all ECS Windows worker instances to resolve the identified security vulnerability and maintain platform integrity.

Integrate Amazon Connect's persistent chat capability to provide a unified customer experience across regions, enhancing service continuity and operational efficiency.

Adopt Amazon MWAA Provisioned environments in the Mexico (Central) Region to enhance data pipeline orchestration capabilities and meet regional compliance needs.

Integrate the new domain filtering and user location capabilities into your AI workflows on AWS Bedrock to improve the accuracy and relevance of web search results.

Integrate the security enhancements in AWS MCP Server to maintain a robust and secure environment for AI agent operations, leveraging the managed service benefits.

Amazon OpenSearch intelligent ingestion is a fully managed, serverless capability that turns documents and structured data in Amazon S3 into RAG-ready, searchable indexes with no pipelines to manage. Learn how it works and when to use Ingestion Jobs or Ingestion Streams.

Adopt the 100 Gbps Direct Connect expansion in Bangalore to enhance the performance and reliability of your cloud-based applications, reducing latency and improving overall user experience.

Adopt AWS Continuum for code vulnerabilities to streamline your security operations by automating the discovery, validation, prioritization, and remediation of code vulnerabilities, thereby reducing the burden on your security teams and improving overall security posture.

Adopt the new training session APIs in Amazon SageMaker AI to provide your teams with advanced, customizable AI training capabilities, enhancing your platform's AI/ML offerings and reducing operational toil associated with GPU management.

Adopt the new serverless model customization feature in Amazon SageMaker AI to offer your teams the ability to fine-tune models with proprietary data, reducing the need for extensive infrastructure management and lowering operational costs.

Adopt Amazon Cognito's multi-Region replication in AWS GovCloud (US) Regions to simplify architecture and reduce operational toil by ensuring user data resilience and compliance with minimal manual intervention.

Adopt the Beam model on Amazon SageMaker JumpStart to provide your teams with powerful, open-weight AI models that can be integrated into existing workflows and scaled to meet production demands.

Adopt AWS Neuron 2.33 to integrate native PyTorch support and Neuron Observer into your AI platform, reducing debugging time and improving model training efficiency.

Adopt the new agent workspace layouts to provide your teams with optimized screen space and improved workflow management, enhancing overall agent productivity and satisfaction.

Integrate the new CloudWatch Alarms feature to enhance the notification pipeline with tag-based routing, resulting in better organization and reduced manual effort in managing alarm events.

Adopt the new capability to register Databricks tables directly in AWS Clean Rooms, leveraging Delta Sharing to simplify data collaboration and reduce operational toil.

Integrate the upgraded Polly Generative voices into your platform to offer higher-quality, more natural speech synthesis across various use cases.

Adopt Amazon ECS Gateway to centralize ingress networking standards, reduce infrastructure costs by optimizing ALB usage, and enhance operational efficiency through dynamic resource provisioning and management.

Adopt the structured outputs capability for Anthropic's Claude models on Amazon Bedrock to streamline data processing tasks, ensuring consistent and validated results that align with your application's data model, ultimately reducing manual effort and improving data integrity.

Adopt the Program Navigator and Case Study Generator in AWS Partner Central to enhance partner management workflows, leveraging AI for case study creation and achieving quicker specialization reviews.

Adopt TorchNeuron to provide developers with native PyTorch support on AWS Trainium, enabling efficient AI model experimentation and deployment.

Adopt SpaceXAI Grok 4.7 on Amazon Bedrock in AWS GovCloud (US) to enhance AI-driven coding and agentic task automation, reducing operational toil and improving productivity.

Adopt the new high bitrate mode in AWS Elemental MediaConnect Router to enable industry-standard workflows such as VSF TR-07 compliant transport stream distribution, improving the performance and reliability of your media services.

Every July, National Basketball Association (NBA) rookies make their debut at Summer League in Las Vegas. When the basketball universe made its annual pilgrimage to Vegas in 2025, the players weren't the only ones stepping into a new system under pressure.

If you are managing a multi-account AWS Organization, you might have noticed that Savings Plan recommendations differ between management account (also known as payer account) and member account (also known as linked account). Consider this scenario: you are reviewing Savings Plan recommendations in the AWS Billing and Cost Management Console. At the management account level, you see a recommended commitment of $100 per hour for a one-year no-upfront Compute Savings Plans. However, when you switc

Organizations with a globally distributed workforce often need to deploy Amazon WorkSpaces Personal across multiple AWS Regions while maintaining centralized identity management with Microsoft Entra ID (formerly Azure Active Directory). Until recently, this required a tradeoff: either a single AWS IAM Identity Center instance with cross-Region calls at runtime, or separate Identity Center instances per […]

Integrate 1:1 NAT support in AWS Transit Gateway and AWS Cloud WAN to simplify network architecture, enhance connectivity between private networks, and reduce the complexity of managing overlapping IP ranges, leading to improved operational efficiency and cost optimization.

Today, supply chain teams are challenged by how long it takes to resolve urgent issues, and disruptions are estimated to cost the industry billions in losses each year. The problem isn’t a lack of trying. Teams are buried in coordination rather than focused on decisions. Legacy tools and processes can’t keep pace with a network […]

Introduction Booking.com is one of the world’s largest online travel platforms. Its customer service organization runs on Amazon Connect Customer, and a voice engineering team supports the contact experience across several lines of business and locales. Booking.com manages Amazon Connect Customer flows as code at scale, and its flow designers still work in the Amazon […]

Adopt Infinity runtime to integrate advanced concurrency management into agent systems, reducing memory footprint and enabling deployment on serverless platforms.

Amazon SageMaker AI training session APIs let you write your own LLM training loop (SFT, RL, or custom objectives) in a Python script while the service runs the GPUs. This post introduces the programming model and three SDK clients, then walks through a GRPO loop on GSM8K and a reinforcement learning workload on competitive programming.

The Amazon Polly Generative engine gets a major upgrade: more expressive, more accurate speech with low latency, plus 14 new voices across 9 locales and general availability of Hindi and Finnish. This drop-in upgrade requires no code changes and is now generally available in production.

Adopt SageMaker AI Serverless Training Sessions to integrate advanced model customization capabilities into your AI development workflow, reducing operational toil and enabling continuous customization with techniques like SFT, DPO, RLVR, RLAIF, or multi-turn RL.

Adopt AWS Continuum to streamline the process of identifying and remediating code vulnerabilities, leveraging its ability to validate exploitability, rank issues by business impact, and propose fixes, thereby enhancing the security and reliability of your applications.

Adopt AWS Transform's agentic AI to streamline your migration workflows, from discovery to cutover, and integrate it into your existing CI/CD pipelines for continuous modernization post-migration.

Overview This post was originally published in Korean on the AWS Korea Tech Blog. Read the Korean version. AMOREPACIFIC’s ERP Platform Planning team brought AI-driven development to ABAP and SAPUI5 on SAP ECC 6.0, using Kiro spec-driven development, an MCP server, and Steering files. Across four projects, the team measured productivity gains of up to […]

U.S. Hunger, a nonprofit addressing food insecurity, uses Amazon Quick to connect organizational data with leadership decisions. Leaders explore applicant data directly, share KPI definitions and financial context in Quick Spaces, and investigate policy questions with Quick Research.

Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability was under embargo, the targeting of a honeypot from an anonymized IP address […]

The most difficult engineering problem when employing AI for gaming isn’t selecting the correct model—it’s selecting the infrastructure that supports the functionality needed to create compelling user experiences. A generative non-player character (NPC) that forgets every conversation, an AI dungeon master that loses narrative context mid-quest, or an agentic loop that drops state across an AWS Lambda cold start all produce sub-par experiences for the same reason: no durable, globally consistent

Integrate Route 53 Resolved IP Validation with your VPC Resolver to extend DNS security and enforce consistent domain-based security policies, simplifying protection and reducing operational toil.

Build a governed semantic layer for agentic AI on AWS with the Denodo Platform and Amazon Bedrock AgentCore. It federates Amazon Aurora, Amazon Redshift, and an on-premises PostgreSQL database into a single customer 360 view an agent queries in VQL, with identity propagation and row- and column-level access control enforced at the semantic layer.

October 20, 2026: This post was republished to reflect the new migration capability from Active Directory to an external identity provider (IdP) or the Identity Center directory, now available in IAM Identity Center. September 2, 2026: This post was republished to include Active Directory migration strategies and automation for permission sets. AWS IAM Identity Center […]

Adopt the new identity source migration feature in IAM Identity Center to centralize identity management and reduce the complexity of changing identity providers, enhancing operational efficiency.

The third post in our semantic-layer series builds a governed customer 360 model on Amazon Redshift with AtScale, then exposes it to a Strands agent on Amazon Bedrock AgentCore through the AtScale MCP server. Identity propagation, RBAC, row security, and full query audit are enforced at the semantic layer, not the prompt.

Six data centers. Eleven AWS Regions. 140 million users. Strengthened incident response protocols. Enterprise SaaS providers on aging infrastructure face compounding pressure: escalating costs, mounting technical debt, and a widening gap between customer expectations and what legacy infrastructure can deliver. The question is no longer whether to migrate to the cloud — it is how […]

No summary available

Amazon Bedrock now supports structured outputs for all Anthropic Claude models on both the bedrock-runtime and bedrock-mantle endpoints. Receive schema-compliant JSON that conforms to a defined structure, without custom parsing, retry logic, or post-processing, using JSON Schema output format and strict tool use.

Integrate the new optional threat detection rules for Runtime Monitoring into your security architecture to enhance threat detection capabilities across Amazon EC2, EKS, and ECS, utilizing the 13 finding types mapped to MITRE ATT&CK tactics.

Adopt Pegasus 1.5 on Amazon Bedrock to enhance your platform's video analysis capabilities, enabling more efficient extraction of structured insights from long-form video content and improving overall platform performance and user experience.

vLLM's prefill-decode disaggregation splits LLM inference across engine instances but must transfer the KV cache between them. This post introduces a push-based NIXL connector that moves transfer coordination off the critical path, delivering up to 3x better TTFT and 30% better TPOT in benchmarks on Amazon EC2 P5en instances with AWS EFA.

Deploy the updated Amazon Redshift JDBC Driver version 2.2.2 across all environments to enhance security posture, protect against remote code execution, and maintain the integrity of database connections.

Deploy the latest version of the amazon-redshift-python-driver (2.1.14) across all environments to resolve the security flaw and maintain the secure operation of Redshift database connections.

Deploy the updated smithy-rs version 0.62.7 across all affected services to ensure security and stability.

Update FreeRTOS-Plus-TCP to version V4.4.2 and configure ipconfigDNS_CHECK_REPLY_SOURCE_IP to address the identified security vulnerabilities, ensuring the security and reliability of your embedded and IoT device deployments.

Deploy the updated aws-smithy-http-server version across your services to incorporate the security fixes and maintain the integrity of your platform.

Deploy the updated awslabs.aws-api-mcp-server version 1.3.47 to maintain robust security policy enforcement and protect against potential security breaches due to the identified vulnerability.

Integrate the latest @aws-amplify/codegen-ui-react version 2.20.6 across all platform deployments to enhance security and prevent potential code injection attacks.

Deploy the patched version of the AWS Bedrock AgentCore Python SDK to ensure the security of AI agent environments and maintain compliance with PyPI naming standards for package installations.

Deploy the updated FreeRTOS-Kernel version V11.3.2 across your microcontroller deployments to resolve security issues and maintain system integrity, reducing the risk of unauthorized memory access.

Deploy the patched Neptune engine versions to your graph database clusters to resolve the security vulnerability and maintain a secure environment.

Adopt the new aggregate and default routes capability in Oracle Database@AWS to streamline network architecture and reduce operational toil associated with managing multiple CIDRs.

Deploy the updated kernel packages to address the security vulnerability in the Linux kernel's virtio-net/TAP networking path, ensuring the stability and security of the platform.

Integrate the new resource criticality feature in AWS Security Hub to streamline security operations, allowing for more effective prioritization and management of security exposures across your infrastructure.

Deploy the new configuration option on ALB to enhance the security posture of your web application firewalls and protect against potential threats.

Deploy the updated QnABot on AWS version 7.3.0 across all relevant environments to ensure the security patch is applied and the custom expression evaluator is in use.

Deploy the patched Amazon S3 Encryption Client for.NET to maintain secure data encryption and protect against potential padding oracle attacks.

Deploy the updated Amazon SageMaker Python SDK to ensure model artifact integrity and prevent security risks, enhancing the platform's security posture and reducing the risk of unauthorized code execution in inference containers.

Deploy the patched version of AWS HealthLake MCP Server (0.0.14) to enhance security and prevent SSRF attacks, ensuring the platform remains secure and compliant with best practices.

Deploy the updated Amazon Athena ODBC driver version 2.1.0.0 across all platforms to enhance security and maintain system integrity.

Integrate the latest security patches for AWS Ops Wheel into your deployment pipelines and IaC templates to maintain secure application environments.

Deploy the updated Kiro CLI version 1.28.0 across development environments to address the security vulnerability and maintain a secure platform for AI-assisted coding.

Deploy the updated AWS Encryption SDK for Python versions 3.3.1 and 4.0.5 to mitigate security risks and maintain data integrity across the platform.

Deploy the latest version of aws-healthomics-mcp-server to enhance security and maintain the integrity of bioinformatics workflows, reducing the risk of unauthorized data access.

Deploy the latest version of the AWS Advanced JDBC Wrapper and configure access controls for the Redis/Valkey cache to enhance security and prevent unauthorized code execution.

Deploy the patched strands-agents-tools version 0.7.0 to ensure secure operation of AI agents utilizing the elasticsearch_memory tool.

Deploy the latest jsii-diff version 1.131.0 to incorporate security fixes and maintain the integrity of API comparison processes.

Adopt the new capability to store SFTP server host keys in AWS Secrets Manager, which enhances the platform's security posture and operational efficiency by allowing better management and retrieval of private key material.

Deploy the updated Athena Query Federation version v2026.21.1 to ensure the platform remains secure and compliant with the latest security standards.

Deploy the latest version of AWS Research and Engineering Studio (2026.03) to incorporate critical security patches and maintain secure cloud-based research environments.

Deploy the latest Amazon Linux kernel updates across your environment to resolve the 'Dirty Frag' vulnerabilities, ensuring that all affected modules are disabled and user namespaces are restricted to enhance overall security posture.

Integrate the updated aws-c-http library (version 0.11.0) into the platform to resolve the security vulnerability and maintain the reliability and security of HTTP client operations.

Deploy the latest EFS CSI Driver version v3.0.1 to enhance the security of your Kubernetes clusters and prevent potential mount option injection attacks.

Adopt the new Ubuntu Pro conversion feature in AWS License Manager to provide extended security and compliance capabilities, reducing operational toil and enhancing the platform's security posture.

Integrate the latest Firecracker versions into your deployment pipelines to enhance security and maintain the integrity of your virtualization infrastructure.

Deploy the updated ECS agent version 1.103.0 across all ECS Windows worker instances to enhance security and prevent unauthorized code execution.

Deploy the latest aws-cdk-lib version 2.260.0 to enhance the security of your infrastructure as code and reduce the risk of command injection attacks.

Deploy the latest version of Language Servers for AWS (1.69.0) across all development environments to integrate the security patches and maintain the integrity of AI coding assistance features within the Amazon Q Developer suite.

Adopt the enhanced resource discovery capabilities in Deadline Cloud to simplify access management, reduce operational toil, and improve the overall user experience for compute-intensive workloads.

Adopt the latest Cumulative Update for Microsoft SQL Server on Amazon RDS to integrate the newest performance improvements and security patches, enhancing the overall stability and security of your database environment.

Adopt the consumption-based pricing for short-term memory in Amazon Bedrock AgentCore to provide users with a more flexible and cost-effective memory management solution, potentially reducing overall platform costs.

Integrate the new guided wizard for RCS registration into your platform to provide a seamless and error-free experience for users, enhancing the overall quality and compliance of RCS agent registrations.

Integrate Brand Profiles into your messaging service architecture to simplify brand management and enhance operational efficiency across different regions and channels.

Adopt Lambda durable functions to integrate reliable, multi-step workflows into your serverless applications, reducing operational toil and enhancing the developer experience with checkpointing and automatic failure recovery.

Adopt the new registration improvements to streamline the submission process, reduce toil, and ensure higher-quality messaging registrations across all supported regions.

Adopt the new support for second-generation AWS Outposts racks in the Mexico (Central) Region to extend your hybrid cloud infrastructure, leveraging consistent AWS services, APIs, and tools for a unified experience.

Integrate the Beam model into Amazon SageMaker JumpStart and AWS Trainium to provide customers with advanced AI functionalities, enhance platform capabilities, and ensure seamless scalability and control over AI deployments.

Integrate Amazon CloudWatch log centralization into your monitoring architecture to simplify log aggregation and enhance visibility across your AWS environment.

Adopt the new managed OTP verification capability to enhance user verification workflows, reduce operational overhead, and provide a seamless experience for end users across multiple communication channels.

Adopt the Nemotron 3.5 Super VL model on Amazon SageMaker JumpStart to enhance your platform's AI capabilities, enabling more sophisticated multimodal applications and reducing development time.

Adopt the AWS DevOps Agent integration in AWS Resilience Hub to streamline resilience testing and failure mode analysis, enhancing the overall resilience posture of your AWS workloads.

Adopt the expanded regional support for Aurora PostgreSQL cross-region deployment to provide customers with more flexible and resilient database deployment options, improving overall platform capabilities and customer satisfaction.

Adopt T8i instances to enhance your platform's compute capabilities, offering better price performance and higher network and EBS bandwidth for various workloads.

Integrate Amazon MSK Connect and AWS Glue Schema Registry into your platform to provide a more complete set of tools for building, connecting, and governing Apache Kafka applications.

Integrate Amazon Redshift's long-term system table retention with Amazon S3 Tables to simplify architecture, reduce operational toil, and enable cross-warehouse observability and analysis using open Apache Iceberg format.

Adopt Amazon Managed Service for Prometheus Collector in the Asia Pacific (New Zealand) region to integrate Prometheus metrics collection seamlessly, reducing toil and enhancing monitoring capabilities for container workloads.

Adopt the new sign-in options for Amazon SageMaker Studio to simplify onboarding for new AI/ML builders, reducing environment setup time from multiple steps to a single sign-in, which can improve developer productivity and accelerate project timelines.

Adopt S3 Metadata in the expanded regions to provide a comprehensive, queryable view of S3 data, enhancing platform capabilities for data-driven applications.

Adopt the shared VPCs feature in AWS HealthOmics to streamline networking administration across multiple accounts, which can lead to significant time savings and reduced operational complexity.

Adopt PostgreSQL 19 RC1 in the Amazon RDS Database Preview Environment to evaluate new capabilities and provide feedback to improve the platform.

Adopt the AWS Lambda Durable Execution SDK for Go to integrate durable, long-running workflows into your platform, leveraging native Go experience and efficient suspension capabilities to enhance application resilience.

Integrate the new timestamp-based stream processing capability into your data architecture to provide users with flexible and efficient data processing options, enhancing platform capabilities and reducing operational toil.

Integrate the expanded Web Search on Amazon Bedrock AgentCore into your platform to provide AI agents with more accurate and up-to-date web information, improving the performance and reliability of your applications.

Integrate the new ARC Region switch capabilities into your platform architecture to enhance the resilience and reliability of multi-Region applications, reducing the risk of service disruptions and improving overall system availability.

Adopt the new conditional log routing and chained parsers in Amazon CloudWatch to streamline log management processes, enhance log data structure, and improve overall platform observability.

Adopt the resource fallback order for Nextflow workflows to simplify architecture and reduce operational toil by automatically moving through specified alternatives in the fallback without resubmission.

Integrate Blockchain Snapshots into your AWS infrastructure to provide your users with optimized, pre-synced blockchain data, enhancing the performance and reliability of their node operations.

Adopt the social sign-in capability for SageMaker Studio to simplify user onboarding, reduce setup toil, and enable quicker access to AI/ML resources for new builders.

Adopt the enhanced branding capabilities in the Transfer Family console to improve user experience and maintain consistent branding across web applications.

Adopt the new AWS Backup support for Amazon FSx file systems to centralize and automate data protection across your AWS resources in the Asia Pacific (New Zealand) Region.

Adopt the new features of AWS DataSync Enhanced mode to integrate more storage options and protocols, enhancing the platform's data transfer capabilities and reducing operational toil.

Adopt the new Amazon DCV 2026.0 release to integrate enhanced remote display capabilities, including support for modern Linux distributions and a new macOS client, into your platform architecture, improving secure remote access and productivity for your users.

Adopt the custom metadata feature in AWS Agent Registry to simplify resource management and improve discoverability across your organization.

Adopt the Amazon Location Service API Playground to integrate location-based services into applications more efficiently, reducing the need for extensive SDK setup and test scripts.

Adopt the new Premium Domain support in Amazon Route 53 to provide a unified domain management experience for your users, reducing the need for external registrars and simplifying domain operations.

Adopt Lambda Web Functions to simplify architecture and reduce operational toil by handling HTTP requests directly, leading to lower latency and cost savings for your serverless applications.

Adopt G7 instances to integrate advanced GPU capabilities into your architecture, enabling faster AI inference and graphics rendering, and reducing the time required for data-intensive tasks.

Adopt CloudFront's support for AWS Lambda Web Functions to simplify architecture, reduce operational toil, and enable faster, more secure web application delivery.

Integrate the prefill feature into existing Amazon Connect workflows to enhance agent productivity and accuracy in after contact work processes.

FinOps practitioners used to spend hours on manual cost analysis and reporting. Today, tooling such as the AWS FinOps Agent, AI-powered cost investigations, and Amazon Q Developer cost capabilities can trace costs to a specific resource and surface opportunities in minutes. But without someone providing business context, they’re just numbers. As AI increases both speed […]

Organizations in regulated industries run container workloads in air-gapped AWS environments, which means migrating hundreds of Helm charts and images into private Amazon ECR with consistent security controls. This post uses Amazon ECR repository creation templates, Terraform, and a migration tool to make secure-by-default the path of least resistance.

Adopt dual-stack VPC origins to integrate IPv6 support into your CloudFront distributions, enhancing network architecture and compliance with minimal operational impact.

Adopt AWS Transform and Kiro for comprehensive modernization of .NET and SQL Server workloads, leveraging agentic AI to streamline migration and reduce licensing costs.

In alignment with our AWS SDKs and Tools maintenance policy, the AWS IoT Device SDKs MQTT 3.1.1 and V1 service clients will enter maintenance mode in April 2027. There is no planned end-of-support date, and we will announce any change to that separately. We recommend that you adopt the MQTT 5 client and V2 service […]

Integrate the CRI Profile v2.2 into your Security Hub CSPM deployment to enhance your organization's cybersecurity posture, leveraging automated checks that align with financial sector regulations.

Integrate Meta’s Muse Spark Open into your AWS environment using Amazon SageMaker JumpStart to provide your development teams with a powerful coding-optimized model, enhancing their productivity and enabling sophisticated agentic workflows.

The new SAP Generative AI on AWS course on AWS Skill Builder helps SAP organizations bridge the gap between SAP business data and AI services. Often, there aren’t enough skilled professionals who understand both domains resulting in delayed AI initiatives and missed competitive advantages. If you’re an SAP architect, cloud engineer, or technical leader navigating […]

Most security tooling that fits into a CI/CD pipeline—static analysis (SAST), software composition analysis (SCA), and dynamic scanners (DAST)—flags potential issues from patterns and signatures. A flagged pattern shows you where to look; penetration testing is what confirms whether something is actually exploitable. That confirmation has traditionally come from a periodic, out-of-band engagement that runs […]

Integrate Amazon S3 with Vercel to provide developers with a seamless storage solution, enhancing the platform's capabilities with durable, scalable, and performant storage options.

Run a standard Node.js web server on AWS Lambda with Lambda Web Functions, a new type of Lambda function. Deploy it with one command or AWS CloudFormation and get a public HTTPS endpoint with no adapter layer and no servers to manage. See how one execution environment handles many concurrent requests and how active-CPU billing keeps the cost of waiting low.

The next generation of AWS Resilience Hub adds three capabilities to keep workload scope and resilience requirements aligned with your running environment: Amazon EKS label support for service input sources, generative AI-powered Dependency Insights, and resilience policy sharing through AWS Organizations.

Manufacturers are facing a workforce shortage that is reshaping how intralogistics operations run for the next decade. According to Deloitte’s 2025 Manufacturing Industry Outlook, 1.9 million manufacturing jobs could go unfilled over the next ten years if talent challenges aren’t addressed. To close that gap, manufacturers are reshaping floor operations around faster, more automated material […]

Amazon Redshift now automatically resolves many concurrent writes to Apache Iceberg tables that don't actually overlap, committing changes that previously failed and had to retry. Learn why these writes conflict, how the engine rebases non-overlapping ones across operation, partition, and file checks, and the throughput gains it delivers.

AWS engineers share kernel optimizations for fused Mixture-of-Experts (MoE) models on Amazon SageMaker AI: Swap-AB for WGMMA utilization, Triton backend routing for FP8 quantization, and eliminating Triton JIT recompilation. Together they deliver up to 10% higher throughput and up to 9% faster Time to First Token on H200 GPUs.

AWS Glue Data Quality is now available natively on Amazon EMR, bundled in AWS runtime for Apache Spark (emr-spark-8.1.0). Write the same DQDL rulesets you use in AWS Glue directly in your Amazon EMR Spark jobs. This post walks through two patterns: lightweight inline validation and an Apache Iceberg Write-Audit-Publish workflow with managed rulesets.

You want to set a cryptographic algorithm policy and stop non-compliant choices from being made in your Amazon Web Services (AWS) environment. This post shows you how. As you adopt post-quantum cryptography, one of the first decisions you face is which algorithms and parameter sets fit your business needs, balancing security against signature size, key […]

F1 worked with AWS to migrate petabytes of footage from ageing tape robots, in multiple formats and proxy files, into Amazon Simple Storage Service (Amazon S3) alongside the live footage from every new race. That gave the sport one durable home for its heritage: the F1 Video Archive. In April 2026, F1 upgraded the archive with a new Media Archive Discovery system. Working with Amazon Web Services (AWS), the team added Amazon Bedrock in a deliberately narrow role: a layer that reads a request in

Integrate Lambda Web Functions into your serverless architecture to leverage HTTP-native programming models, reducing operational toil and enabling faster iteration cycles for web applications.

Deploy patched containerd versions across your infrastructure to resolve identified security issues and maintain the security posture of your containerized environments.

Integrate the updated aws-c-http library (version 0.11.0) into the platform to resolve the security vulnerability and ensure that all dependent services are patched to maintain system integrity and security.

Integrate the new configuration option on ALB for AWS WAF to accumulate HTTP/2 data frames, ensuring comprehensive inspection of multi-frame request bodies and bolstering the security of web applications.

Deploy the updated versions of @aws-amplify/graphql-index-transformer, @aws-amplify/graphql-api-construct, and @aws-amplify/data-construct to ensure proper authorization in query resolvers.

Deploy the updated AWS CLI versions across environments to enhance security posture and protect sensitive information from unauthorized access.

Adopt the latest version of AWS Tools for PowerShell to enhance security posture and prevent potential exposure of IAM user credentials in log files.

Adopt the latest aws-cdk-lib version 2.260.0 to enhance the security of your cloud infrastructure and reduce the risk of OS command injection vulnerabilities.

Deploy the updated Language Servers for AWS version 1.69.0 across your development environments to enhance security and maintain the trust boundary enforcement and symlink validation in AI coding assistance tools.

Adopt the new metadata pre-filtering capability in Amazon S3 Vectors to improve the efficiency and accuracy of vector searches, reducing the operational toil associated with managing large-scale vector data.

Adopt the new precheck capabilities and RDS event to enhance the reliability and efficiency of database patching processes, leading to reduced operational toil and improved service uptime.

Deploy the updated Amazon Agent Plugins for AWS across all environments to resolve the security vulnerability and maintain the integrity of your database workflows.

Adopt the updated AWS Toolkit for Visual Studio Code to incorporate secure token caching and reduce the risk of unauthorized access to sensitive credentials.

Integrate the new resource types into your AWS Config setup to leverage enhanced discovery and assessment capabilities, improving your platform's governance and compliance posture.

Deploy the updated QnABot on AWS stack and redeploy the Amazon Q Business Lambda hook sample to ensure the security patch is applied, reducing the risk of unauthorized access to S3 objects.

Adopt the new device posture assessment feature in Client VPN to strengthen security governance, ensuring only compliant devices access your AWS resources.

Adopt EKS access entry authentication for AWS Batch to streamline cluster authentication processes, reducing operational toil and enhancing security.

Adopt the new Anthropic models to integrate advanced AI capabilities into your development workflows, reducing operational toil with fewer tool calls and faster outputs, and enhancing overall platform performance.

Integrate the new findings export feature of AWS Security Hub to simplify security data management and improve overall security posture.

Adopt Amazon EC2 R8gd instances to integrate high-speed, low latency local storage and enhanced performance capabilities into your architecture, reducing operational toil and improving overall platform efficiency.

Integrate brand templates into Amazon Quick workflows to streamline the creation of on-brand assets and reduce manual effort in maintaining visual consistency.

Integrate Amazon Connect Customer's automated checks into performance evaluation workflows to enhance form accuracy and reduce manual refinement efforts.

Adopt Amazon EC2 R8g instances to leverage the performance benefits of AWS Graviton4 processors, reducing operational toil and enhancing the platform's compute capabilities.

Integrate OAuth authentication for Kafka ESM to simplify architecture and reduce operational toil by applying consistent identity and access policies across Kafka clusters and Lambda consumers.

Integrate the new reasoning summaries capability into your AI/ML workflows to provide developers with better insights into model behavior, reducing debugging time and improving application performance.

Adopt GPT-6.1 Sol Ultrafast mode to integrate faster inference capabilities into your AI-driven applications, reducing latency and improving user experiences for latency-sensitive use cases.

Integrate the new Amazon Bedrock product attributes into your cost management workflows to provide platform teams with deeper insights into AI spend, facilitating better resource allocation and financial planning.

Adopt the new wildcard support for container attribute filters in AWS Network Firewall to streamline firewall rule management, reduce operational toil, and enhance security coverage for containerized workloads across your platform.

Adopt Claude Haiku 5.5 to enhance your AI platform with its superior efficiency and capabilities, enabling faster, cost-effective AI solutions and reducing the overall cost of AI operations.

Adopt the advanced filters and feature-level availability notifications in AWS Capabilities by Region to provide your teams with better insights and automation capabilities, resulting in more efficient resource management and quicker responses to new service availability.

Adopt the new AWS Batch metrics in Amazon CloudWatch to provide enhanced observability for batch workloads, enabling better performance monitoring and operational insights.

Adopt the Continuum for Penetration Testing integration to streamline security validation within your CI/CD pipeline, reducing toil and ensuring consistent security practices across deployments.

Adopt GLM 5.3 on Amazon Bedrock to integrate advanced AI capabilities into your platform, improving software engineering workflows and reducing operational toil through efficient context reuse.

Adopt the Advanced Ruby Driver Wrapper to integrate enhanced database connectivity and failover capabilities into your platform, improving application resilience and security with minimal toil.

Adopt the new capability of creating and refreshing Apache Iceberg materialized views in Amazon Redshift to streamline data analytics workflows, reduce operational toil, and enhance the performance of analytics applications.

AWS Lambda now exposes Availability Zone metadata through an endpoint in the execution environment, so your function can discover its AZ ID with an HTTP request. Use it to prefer same-AZ endpoints for services like ElastiCache, Amazon RDS, and MemoryDB, reduce cross-AZ latency and data transfer costs, and build AZ-aware resilience patterns.

Onboarding agents into Amazon Connect Customer becomes a manual task when organizations standardize on AWS IAM Identity Center as the federation hub for their AWS environment, synchronizing their corporate identity provider (IdP) into a central Identity Store and using it for single sign-on across AWS applications. If you run Amazon Connect Customer this way, and […]

From the halls of the RAI to local gatherings in Amsterdam, conversations around this year’s International Broadcasting Convention (IBC Show) centered on AI and collaboration. A reported 41,225 attendees from 170 countries and 1,300 exhibitors attended the event, held September 11-14, 2026. Amazon Web Services (AWS) hosted hands-on demos of new services, in-depth sessions, and events that reflected the rapidly changing industry landscape.

Introduction For organizations running Microsoft Hyper-V on premises, migrating workloads to AWS offers a path to reduce infrastructure costs, eliminate licensing complexity, and unlock cloud-native capabilities. Yet the first weeks of a migration effort are rarely spent migrating. In any environment that has grown over years, whatever the platform, systems inventory and architectural documentation lags […]

Modernizing a monolith into microservices may require placing each new service in its own AWS account for isolation, independent scaling, and clear ownership. During that migration you hit a hard question: how do you shift a small, precise slice of live traffic from the monolith to a new service in a different account? You need […]

Adopt Strands Box to integrate fine-grained policy enforcement with OS-level isolation, simplifying the management of AI agent permissions and actions.

Integrate the security improvements from the Athena engine version 3 patch into your platform's data querying architecture to enhance overall security posture.

Enterprise RAG unlocks insights from knowledge sources like SharePoint, Google Drive, and Confluence, but those sources carry complex permissions. Learn how Amazon Quick and Amazon Bedrock Knowledge Bases enforce document-level access controls in real time, verifying permissions directly with authoritative sources at query time.

Introduction Before an AWS DevOps Agent investigation runs its first billable query, you can see what it will cost and decide whether to proceed. The Investigation Cost Guardrail skill brings cost awareness to AWS DevOps Agent, giving your team visibility and control over scope before the investigation begins. This post introduces the Investigation Cost Guardrail, […]

Healthcare organizations are being asked to widen access, protect increasingly thin margins, and keep clinicians from burning out. Telehealth is one of the most effective levers on all three, and it’s no longer a pandemic stopgap: 71.4 percent of physicians now use it weekly, nearly triple the pre-pandemic rate, and 72 percent of hospitals offer at least one telemedicine service (AMA, 2024). Adoption varies widely by specialty, from 68 percent of psychiatrists conducting more than a fifth of vis

Integrate ACM’s ACME PrivateLink support into your VPC architecture to enhance security posture and simplify certificate management across your AWS environment.

In cloud-centered environments, establishing trust between workloads is fundamental to securing machine-to-machine communication. Traditional approaches such as API keys, shared secrets, and static service account credentials weren’t designed for the scale and ephemeral nature of cloud workloads. This drives an organizational need to shift from long-term, static credentials to short-lived cryptographic workload identities. Organizations are […]

In a traditional on-premises network, predictable costs have always been central to network connectivity budgets. Organizations relied on leased lines, Multiprotocol Label Switching (MPLS) links, and dedicated cross-connects. No matter how much data they moved, the bill stayed the same. As they rebuilt their architecture in the cloud, they gained the flexibility of pay-as-you-go pricing. […]

Today, Amazon Web Services (AWS) announces the recipients of the 2026 AWS Imagine Grant Children's Health Innovation Award (CHIA). Whether a child is battling a rare cancer, managing a chronic condition, or growing up downstream from a contaminated waterway, this year's 10 recipients share a common ambition: using technology to help every child get access to the best possible care.

Texas Capital Bank is a full-service financial services firm headquartered in Dallas, Texas, serving commercial, consumer, and institutional clients. Its technology organization builds internal platforms across several areas, including document intelligence for lending. Processing a commercial loan package is slow, manual work: an analyst reads a 200-plus-page package and extracts financial obligations, servicing requirements, and covenant terms by hand, a task that can take hours per package an

At Snap Inc., the company behind Snapchat, cost is an important factor in every infrastructure decision. With research scientists and machine learning (ML) engineers working across a wide gamut of projects, from large language models to computer vision to video generation, the AI/ML platform team faces a constant balancing act: deliver the high-performance storage that […]

Adopt the Digital Sovereignty Lens to align your architecture with sovereignty controls and best practices, ensuring continuous compliance and auditability.

As AI models become more capable, they uncover more security vulnerabilities and identify increasingly sophisticated paths to exploit them, raising the bar for how quickly defenders must respond. Security teams now face more potential vulnerabilities than their existing processes were designed to handle — each requiring investigation, reproduction, and a repair that must be tested […]

Integrate the new detailed certificate issuance logs from AWS Private CA into your certificate management and auditing workflows to improve security posture and compliance tracking.

Amazon SageMaker optimized generative AI inference introduces the aws-ai-ml skill through the Agent Toolkit for AWS, giving coding agents like Kiro, Claude Code, and Codex deep expertise in inference optimization and benchmarking. Describe what you want, and your agent generates executable SageMaker Python SDK v3 code to benchmark, recommend, and compare deployments.

Adopt network access controls for Identity Store to integrate enhanced security measures into user and group management workflows, reducing the risk of unauthorized access and improving overall platform security.

Adopt the streamlined pricing model for GuardDuty Runtime Monitoring within Security Hub to simplify cost management and enhance security posture across EC2, EKS, and ECS on Fargate.

Deploy Loom version 1.7.0 to incorporate security fixes and maintain the integrity of your AI agent orchestration platform.

Integrate VPC Lattice with ECS services to adopt advanced deployment strategies, reducing operational toil by automating traffic shifting and rollbacks, and improving the overall deployment process efficiency.

Deploy the latest version of the Amazon EFS CSI Driver (v3.5.0) to incorporate the security fixes and maintain the integrity of your Kubernetes storage solutions.

Adopt Kubernetes version 1.37 on Amazon EKS to integrate advanced cluster management features, reducing toil and enhancing performance for your containerized applications.

Deploy the latest patched images for Amazon SageMaker Distribution to all Studio Spaces to sanitize connection details during startup and prevent potential security breaches due to OS command injection.

Deploy the patched version of Powertools for AWS Lambda (Python) to ensure data masking errors raise exceptions instead of returning original values, enhancing security posture.

Adopt the Well-Architected Agent to integrate AI-driven, context-aware optimization into your cloud architecture, reducing toil and enhancing overall cloud performance and security.

Adopt the latest version of Amazon Ion Python to incorporate security fixes and maintain application stability, reducing the risk of service disruptions due to uncontrolled recursion.

Adopt AWS Well-Architected Agent to simplify architecture and reduce operational toil by automating the correlation of key metrics, application topology, and IaC templates with Well-Architected best practices, delivering measurable improvements in cost, security, performance, and reliability.

Deploy the patched security-agent-mcp-server version 0.2.0 to maintain the integrity of AI-driven security scans and prevent unauthorized file manipulation on the host.

Integrate the Corretto 8u504 patch into your Java deployment pipelines to maintain security standards and time zone data integrity, reducing the risk of vulnerabilities and ensuring consistent application behavior.

Adopt the new automated distribution workflow for non-Brazilian software licenses in Brazil to streamline operations, reduce manual intervention, and ensure accurate tax calculations and invoicing.

Adopt the expanded availability of the AWS MCP Server to provide developers with a single interface to AWS APIs, reducing the need for per-service integrations and operational toil.

Adopt the use of partial indexes in Amazon Aurora DSQL to enhance query performance, reduce storage costs, and simplify database architecture by indexing only relevant data subsets.

Adopt the new feature to integrate custom log groups with AWS Transfer Family workflows, simplifying log management and enabling more effective monitoring and troubleshooting.

Adopt the expanded availability of DynamoDB Accelerator (DAX) in 17 additional regions to simplify architecture, reduce operational toil, and enable low-latency performance for read-intensive workloads while meeting local data residency requirements.

Integrate Amazon S3 Object Lock variable retention with event holds into your data governance framework to provide precise WORM protection for objects, ensuring compliance with regulatory requirements.

Integrate Amazon Redshift's cross-Region query engine into your data architecture to simplify global analytics, reduce data movement, and enhance security compliance for your data lake.

Amazon Quick Sight is a fully managed, cloud-native business intelligence (BI) capability for building and publishing interactive dashboards. The new hierarchy filter gives dashboard authors rich, multi-level filtering in a single compact control, reducing clutter and guiding readers to the data they need in fewer steps.

Connect AWS DevOps Agent to your Amazon OpenSearch Service observability data using the Model Context Protocol (MCP), so an alert that fires at 2 AM triggers autonomous root cause investigation. Covers three MCP server hosting paths (self-managed on Amazon ECS, Amazon Bedrock AgentCore, or built-in OpenSearch 3.3+), plus alert routing and FGAC role mapping.

Fine-tuning teaches a small search agent your tools and environment, giving it the reliability of a frontier model at lower latency and cost. In this post, we fine-tune an LLM-powered search agent with multi-turn reinforcement learning (MTRL) on Amazon SageMaker AI and share the gains we measured in retrieval quality and reliability.

Deploy AWS Regional availability data as infrastructure you own. Capability Insights for AWS runs a self-hosted dashboard in your VPC that auto-refreshes daily, and Workload Analysis narrows the catalog to the services your account actually runs, so your Regional expansion gap analysis focuses only on what you deploy.

Adopt the new private TLS certificate support in AgentCore Gateway to simplify secure connectivity to VPC endpoints, improving architecture efficiency and reducing operational toil.

Claude Desktop on Amazon Bedrock is limited to the model's knowledge cutoff without web search. In this post, we walk through connecting Claude Desktop to Web Search using Amazon Bedrock AgentCore Gateway, with JWT-based inbound authentication through AWS IAM Identity Center and Amazon Cognito.

Introduction If you operate AWS Systems Manager (SSM) documents, such as Automation runbooks and Run Command documents, across an AWS Organization, you must decide which accounts can run them. Until now, that meant sharing each document with a list of individual account IDs through the ModifyDocumentPermission API, which accepts up to 1,000 account IDs per […]

See how uniopen, a retail platform from Taiwan's Uni-President Enterprises Group, adapted Amazon Nova 2 Lite to its content-moderation policies using supervised fine-tuning in Amazon SageMaker AI and prompt optimization. Business-relevant evaluation and release gates kept quality in check.

Adopt AWS Security Hub's remediation plans to streamline security operations, reduce toil, and ensure consistent security practices across your environment.

F5 AI Guardrails and F5 AI Red Team deliver continuous adaptive security for AI applications on AWS Bedrock. This post introduces three capabilities for enterprise AI security: pre-deployment model evaluation, adversarial testing at scale, and adaptive runtime protection. Learn how these capabilities compress the gap between threat discovery and defense deployment from weeks to minutes.

Adopt GuardDuty centralized management policies to simplify security configuration across your AWS organization, reducing toil and ensuring consistent threat detection coverage.