DynamoDB Streams ABAC shipped 19 August 2026 with a 7-day opt-out and a policy trap
DynamoDB Streams ABAC went live 19 August 2026: 50 tags per stream, a 10 KB cap, existing accounts disabled by default, and a seven-calendar-day opt-out window.
Founder of eCorpIT. Hands-on engineer leading senior-only delivery for AI apps, custom software, and cloud systems for global clients.
1193 articles, newest first — page 12 of 50
EC2 Auto Scaling batch termination raised the blast radius to 100 on 18 August 2026 — scale-in protection still ignores
One call can now terminate 100 instances. AWS pitches it at container orchestrators - the workload whose main safety control, instance scale-in protection, explicitly does not apply to this API.
EC2 create-image on Outposts now fails without --snapshot-location: 2 values, 0 copies back to the Region
AWS enabled AMI creation with local snapshots on Outposts on 19 August 2026. The docs add a required --snapshot-location flag, so unchanged create-image automation now returns InvalidParameterValue.
AI support agent pricing 2026: the same D2C ticket costs $0.20 or $2.00
Salesforce's own pricing page bills an order-status ticket at $0.20 under Flex Credits and $2.00 under Conversations, and one org cannot use both. A build-versus-buy guide for D2C support in 2026.
Android developer verification: the five-week plan we set 39 days before the 30 September 2026 deadline
Enforcement began on 30 September 2026. This is the five-week plan we set on 22 August, with 39 days to go, when the 28-day D-U-N-S wait meant the paperwork gate shut on 2 September.
AWS shipped 1 of 3 promised Argo CD settings on 21 August 2026 — and ignores the rest silently
The 21 August 2026 AWS announcement names custom health checks, UI banners and watch/compare tuning. The EKS user guide lists exactly one supported argocd-cm field, and says unsupported keys are ignored without an error.
EKS CA rotation shipped 20 August 2026 with a 10-year clock and auto-activation you cannot decline
Amazon EKS clusters built since 2018 carry a 10-year certificate authority. AWS now appends a successor 2 years out and activates it 6 months before expiry, ready or not.
EKS control plane tuning shipped 12 August 2026 with four parameters and a $1.65/hr paywall
Amazon EKS now lets you tune the scheduler, controller manager and API server. Four parameters shipped on 12 August 2026, and the headline autoscaling one needs a control plane tier costing $1.65 an hour.
AWS IAM role manager shipped on 12 August 2026 attaching PowerUserAccess to four of six consoles
AWS IAM role manager reached general availability on 12 August 2026 across six service consoles. Four of them attach PowerUserAccess by default, and AWS's published lockdown SCP denies an action role reuse needs.
LFM2.5-DSpark ships 3.2x on an H100 and 1.18x on a MacBook: the 20 August 2026 numbers mobile teams should read
Liquid AI released LFM2.5-DSpark speculative-decoding drafters on 20 August 2026. The headline 3.2x is a single H100 cell. On an M4 Max the 2.6B mean is 2.27x and the 8B MoE mean is 1.18x.
MSK custom domain names shipped 17 August 2026, and the NLB behind them does not scale with your brokers
MSK shipped cluster-level custom domain names on 17 August 2026 at no extra charge. The docs add what the announcement omits: every new broker needs its own NLB listener and DNS record.
MWAA Serverless added PythonOperator on 18 August 2026: 250 MB cap, 60-minute ceiling, no internet
MWAA Serverless can finally run your own Python and shell code, but the 250 MB package cap, 60-minute task timeout, fixed 1 vCPU worker and no-internet default decide whether your DAGs can actually move.
AWS Network Firewall rule hit counts shipped 17 August 2026 and cannot see the pass rule that shadows your policy
AWS Network Firewall added stateful rule hit counts on 17 August 2026. The visualization reads alert logs, and alert logs never record a pass rule, which is the rule most likely to be shadowing your policy.
OpenAI added per-request region switching on 21 August 2026, but only 3 of 10 regions actually run inference locally
OpenAI now lets one API key target us., eu. or in.api.openai.com per request. Only the US, EU and UAE support regional inference. India, the UK and Japan are storage-only.
OpenSearch semantic enrichment reached VPC domains on 17 August 2026 with an authorization step AWS did not announce
AWS said no VPC changes were required. The OpenSearch guide says every semantic enrichment index call on a VPC domain returns AccessDeniedException until you run AuthorizeVpcEndpointAccess first.
RDS PostgreSQL 19 Beta 3 landed 18 August 2026 without PostGIS or pg_hint_plan
Amazon RDS added PostgreSQL 19 Beta 3 to its Database Preview Environment on 18 August 2026. The extension table marks PostGIS and pg_hint_plan N/A on all three betas, and pg_plan_advice 1.0 ships instead.
S3 403 errors named the denying policy ARN from 13 August 2026, but bucket and VPC endpoint policies are excluded
AWS added the denying policy ARN to S3 403 messages on 13 August 2026. It appears only on explicit deny, covers five policy types, and skips bucket policies, VPC endpoint policies and directory buckets.
SageMaker notebook TIP covers 2 of 5 engines, 3 flag names and a 23 July 2025 project cliff
AWS shipped trusted identity propagation for SageMaker notebooks on 19 August 2026. The admin guide names five engines, the user guide two, the flag has three spellings, and pre-23 July 2025 projects are out.
Secrets Manager's Jenkins and SonarQube rotation, 11 August 2026, needs a publicly reachable controller
AWS Secrets Manager now rotates Jenkins and SonarQube tokens with no Lambda code. The user guide adds a condition the 11 August 2026 announcement omits: the controller must answer on the public internet.
Storage Gateway FIPS PrivateLink shipped in software 3.2.7 on 30 June 2026, seven weeks before AWS announced it
The FIPS endpoint type is baked into the Storage Gateway activation key, so an existing Tape or Volume Gateway cannot be switched over. Eight Regions, six TCP ports, and private DNS must stay off.
Vercel now bills Deployment Storage at $0.10 per GB-month, and the default keeps production a year
Vercel started metering Deployment Storage and Functions Storage at $0.10 per GB-month on 21 August 2026. The Pro retention default keeps production deployments for one year, and nobody set it.
WorkSpaces nested virtualization turns off Credential Guard — the 18 August 2026 announcement never says so
The AWS announcement lists three exclusions. The admin guide lists five, plus an automatic Credential Guard shutdown and an AutoStop hibernation failure that costs real money to work around.
SES tracking overrides land, but the bulk-send API can't do per-recipient consent
SES added per-request open and click tracking overrides on 21 Aug 2026. But the API reference says an override applies to every message in a SendBulkEmail call, so mixed-consent lists still need split sends.
AI agent unit economics in 2026: a cost model that survives audit
Agentic models burn 5 to 30 times the tokens of a chatbot, and Gartner expects cost per agentic workflow to rise more than fivefold through 2028. The human comparator, meanwhile, is unsourceable.