Tag
Lambda full IAM resource-based policies shipped on 25 August 2026 at no extra charge. The launch adds three APIs on a new 2026-07-09 path, keeps the old 20 KB ceiling, and leaves two AWS pages in conflict.
Manu Shukla 
Cloudflare Access resource lists now work for resource-scoped roles, but the roles page dated 10 August 2026 still calls the feature Beta, and reusable policies stay invisible without a second role.
Manu Shukla 
Bedrock now attributes bedrock-mantle cost by IAM user or role. The user guide says the finest grain is per usage type per day, tags are not retroactive, and existing CUR 2.0 exports must be recreated.
Manu Shukla 
AWS IAM role manager reached general availability on 12 August 2026 across six service consoles. Four of them attach PowerUserAccess by default, and AWS's published lockdown SCP denies an action role reuse needs.
Manu Shukla 
AWS added the denying policy ARN to S3 403 messages on 13 August 2026. It appears only on explicit deny, covers five policy types, and skips bucket policies, VPC endpoint policies and directory buckets.
Manu Shukla 
OAuth 2.1 removes the local proxy from AWS MCP Server setups. It also removes per-call AWS profile switching, which is the one feature consultancies working across client accounts actually rely on.
Manu Shukla 
AWS made Web Search on Amazon Bedrock generally available on 4 August 2026 and told buyers to check the pricing page for costs. The pricing page has no price. Worse, the default IAM policy grants search but not external
Manu Shukla 