This week: Lambda MicroVMs bring VM-level isolation to serverless for running untrusted code, GuardDuty adds AI-powered investigations to help distinguish real threats from false positives, and CloudWatch Logs now accepts syslog directly from network devices without agents. Plus Outposts gets full lifecycle management in the console and new OpenAI models hit Bedrock in GovCloud.
Compute & Infrastructure
- Lambda MicroVMs: VM-level isolation for user/AI code, 8hr state, dedicated HTTPS endpoint
- EC2 AMI Watermarks: Custom watermarks persist through copies, track provenance
- SageMaker G7e: 8x RTX PRO 6000 Blackwell GPUs, 96GB each for LLM/agentic AI
- SageMaker G6e: 8x L40S GPUs, 2.5x better than G5, 13B param LLMs
- EMR Serverless: Update app configs without stopping running jobs
AI & Machine Learning
- Bedrock GovCloud: OpenAI GPT, NVIDIA Nemotron models, FedRAMP High/IL4-5
- Bedrock Guardrails: Auto-refine policies via iterative improvement workflows
- Bedrock AgentCore: Cross-account memory access via resource-based policies
- GuardDuty AI Investigations: 90-day analysis, MITRE ATT&CK mapping, confidence scoring
- Kiro GovCloud: FedRAMP High/IL4-5 for agentic AI development
- MSK AI Agent Skills: Expert guidance for troubleshooting, sizing, migrations
Networking & Security
- CloudWatch Logs: Direct syslog ingestion via VPC endpoint, auto-parsing
- Network Firewall: Safer default drop action, VisionHeight managed rules
- Route 53 Global Resolver: Share DNS views cross-account via RAM
- Cognito: Customer-managed KMS keys for user pool encryption
Data & Analytics
- S3 Backup: 8x faster cross-account/region copies via change tracking
- Neptune: CloudFormation support for global databases
- OpenSearch: AI-assisted migrations from Solr/Elasticsearch
- MSK Replicator: mTLS auth for external Kafka migrations
Operations & Management
- CloudWatch Container Insights: OTel-based metrics every 30s for EKS
- CloudWatch Dashboards: Tagging support, ABAC via IAM
- IAM Identity Center: Separate quotas for accounts (7K) and apps (7K)
- Outposts: Full lifecycle management via console/CLI/API
Other Updates
- HealthOmics: Nextflow profiles, ephemeral storage up to 3TB
- Connect: Agentic CX designer preview, Live Sync for guided experiences
- Batch: Instance priority control with new allocation strategies
- Swift IoT SDK: Native Apple/Linux support with TLS 1.3
AWS News Feed: Whats new at AWS
For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me
For detailed show notes check out awsnewsweekly.com
