AWS news

AWS has launched Dogwood, a new open-source tool for AI agents. It prevents them from taking individually valid actions that become dangerous in sequence, giving developers more control over agent safety and reliability.

Vercel's AI Gateway is now on the AWS Marketplace, letting teams buy and manage access to hundreds of AI models directly through their AWS account. This simplifies billing and cost control for companies using multiple AI services.

The popular PostgreSQL backup tool pgBackRest now supports AWS S3 Outposts, making it easier to manage backups in hybrid cloud environments. The update also adds support for the upcoming PostgreSQL 19, helping teams prepare for the future.

AWS Lambda no longer enforces its 75 GB per-region code storage quota for functions stored in your own S3 bucket. This change helps large organizations scale their serverless applications without hitting a previously restrictive account-wide limit.

A new architectural approach uses Clean Architecture to make serverless applications portable. This lets developers write business logic once and deploy it across multiple clouds like AWS and Azure, avoiding expensive vendor lock-in.

AWS has launched a new managed service called FinOps Agent. It automatically investigates cost spikes, finds the cause, and sends alerts to the right teams through tools like Slack and Jira to help control cloud spending.

Slack shared its four-phase journey from a single-cloud AI setup to a multi-cloud platform using both AWS Bedrock and Google Vertex AI. The move offers a valuable roadmap for companies seeking more flexible and resilient AI infrastructure.

AWS is now the first cloud provider to offer servers with PCIe 6.0, beating rivals like Intel and AMD to the milestone. The new Graviton5 instances provide significantly faster data transfer for demanding workloads.

Amazon Cognito now automatically copies user data to a backup region. This means if one AWS region fails, your application can still authenticate users from another, improving reliability and simplifying disaster recovery for developers.

Amazon ECS can now adjust application capacity much faster, thanks to new high-resolution metrics. This allows services to react to traffic spikes in seconds instead of minutes, improving performance and potentially lowering cloud costs.

AWS WAF has a new feature that lets website owners charge AI bots for accessing their content. This allows publishers to create new revenue streams from AI traffic directly at the network edge, without any code changes.

A threat actor called PCPJack has hijacked over 230 servers on AWS, Google Cloud, and Azure. The compromised servers are being used to create a covert email relay network, turning them into proxies for sending mail.

AWS has announced the general availability of its managed Model Context Protocol (MCP) server. The new service provides a secure, standardized interface for AI agents to interact with AWS APIs, documentation, and workflows, using IAM for governance without exposing broad credentials. It enhances security and auditability.

A security researcher discovered that adding a trailing slash to AWS HTTP API paths could bypass Lambda authorizer authentication entirely. This critical vulnerability, caused by a path normalization mismatch, enabled unauthorized actions, including wire transfers at a fintech company, highlighting a significant security risk.

Redis has launched its Data Integration service on AWS. The fully-managed tool helps developers move data from other databases into Redis in near real-time, simplifying the process of building responsive applications without complex data pipelines.

AWS has released ExtendDB, an open-source tool that lets developers use the popular DynamoDB API with other databases, starting with PostgreSQL. This offers more flexibility and helps avoid being locked into a single cloud vendor.

AWS is replacing its standard data center network design with a new architecture based on random graph theory. This new flat, mesh-like structure uses fewer routers and passive optical connections, resulting in significantly higher throughput, lower power consumption, and reduced hardware complexity.

AWS has launched a new version of its Resilience Hub, a service for managing application availability. The update introduces generative AI to analyze potential system failures, along with new tools for dependency discovery, modular policies, and organization-wide reporting to help teams improve system reliability.

AWS is enhancing its AI-powered service, AWS Transform, which helps modernize legacy applications. A new feature, AWS Transform custom, now allows organizations to create their own rules to automate code upgrades, framework migrations, and performance optimizations at scale, tailored to their specific needs.

A CISA contractor exposed highly sensitive credentials on a public GitHub repository. The leak included access keys to AWS GovCloud accounts and internal CISA systems, along with details on the agency's internal software development and deployment processes, marking a significant government data breach.

A government contractor's public GitHub repository accidentally exposed credentials for US government AWS accounts and internal CISA systems. The leak, discovered by a security researcher, included sensitive access keys found within the repository's commit history and developer notes, highlighting significant security risks.

A contractor's public GitHub repository accidentally exposed sensitive credentials. The leak included access keys for US government AWS accounts and internal systems for the Cybersecurity and Infrastructure Security Agency (CISA). A researcher from GitGuardian discovered the exposure, which was then reported by security journalist Brian Krebs.

A standard, cached AWS access key on a single machine, without any misconfiguration, can provide an attacker with extensive access to a company's cloud environment. This highlights how normal operational behavior can inadvertently create significant security vulnerabilities in cloud infrastructure.

Generative AI media platform fal has named AWS its preferred cloud provider. The partnership aims to address the significant infrastructure and compute demands required for real-time AI media generation, supporting fal's 2.5 million developer users and simplifying GPU management.

A CISA contractor exposed highly privileged AWS GovCloud credentials and internal system details in a public GitHub repository. Security experts call it a major government data leak, revealing sensitive information about how the agency builds, tests, and deploys its internal software systems, posing a significant security risk.