7 articles tagged
Lambda full IAM resource-based policies shipped on 25 August 2026 at no extra charge. The launch adds three APIs on a new 2026-07-09 path, keeps the old 20 KB ceiling, and leaves two AWS pages in conflict.
Cloudflare Access resource lists now work for resource-scoped roles, but the roles page dated 10 August 2026 still calls the feature Beta, and reusable policies stay invisible without a second role.
Bedrock now attributes bedrock-mantle cost by IAM user or role. The user guide says the finest grain is per usage type per day, tags are not retroactive, and existing CUR 2.0 exports must be recreated.
AWS IAM role manager reached general availability on 12 August 2026 across six service consoles. Four of them attach PowerUserAccess by default, and AWS's published lockdown SCP denies an action role reuse needs.
AWS added the denying policy ARN to S3 403 messages on 13 August 2026. It appears only on explicit deny, covers five policy types, and skips bucket policies, VPC endpoint policies and directory buckets.
OAuth 2.1 removes the local proxy from AWS MCP Server setups. It also removes per-call AWS profile switching, which is the one feature consultancies working across client accounts actually rely on.
AWS made Web Search on Amazon Bedrock generally available on 4 August 2026 and told buyers to check the pricing page for costs. The pricing page has no price. Worse, the default IAM policy grants search but not external
