AWS News Weekly

This week: Security Hub expands to monitor Microsoft Azure resources alongside AWS with unified posture management, Systems Manager now connects and manages Azure VMs without manual agent installation, and ACM launches a fully managed ACME server for automated TLS certificate issuance. Plus RDS for Oracle 26ai brings Bedrock integration, and Aurora Dsql adds real-time CDC to Kinesis. Security & Identity Secrets Manager: Auto-rotation for Paddle API keys, GitLab tokens ACM: Managed ACME server

This week: EC2 C9g instances debut with fifth-gen Graviton delivering 25% better performance, Claude Sonnet 5 arrives on Bedrock with superior coding and agentic capabilities, and CloudFormation express mode cuts deployments by up to 4x. Plus OpenSearch gets a purpose-built log analytics engine with 4x better price-performance, and ECS adds zone-aware routing to cut cross-AZ costs. Compute EC2 C9g/C9gd: Graviton 5, 25% faster than G4, 35% faster ML inference EC2 Dedicated Hosts: AMD SEV-SNP co

This week: Lambda MicroVMs bring VM-level isolation to serverless for running untrusted code, GuardDuty adds AI-powered investigations to help distinguish real threats from false positives, and CloudWatch Logs now accepts syslog directly from network devices without agents. Plus Outposts gets full lifecycle management in the console and new OpenAI models hit Bedrock in GovCloud. Compute & Infrastructure Lambda MicroVMs: VM-level isolation for user/AI code, 8hr state, dedicated HTTPS endpoint E

This week: AWS launches Continuum for autonomous security vulnerability management, Bedrock AgentCore reaches GA with built-in guardrails and optimization tools, and S3 Vectors slashes query costs by up to 80%. Plus WAF introduces AI bot monetization, CloudWatch adds cross-account metrics replication, and new Graviton 5-powered M9g database instances deliver 30% better performance. Compute EC2 G7: GA, NVIDIA RTX PRO 6000 Blackwell, 4.6x better AI inference vs G6 RDS: M9g instances (Graviton 5)

This week: New Graviton5-powered M9g instances deliver 25% better compute with mathematically proven workload isolation, Claude Fable 5 brings autonomous AI agents to Bedrock, and Amazon Q now explains your cost anomalies and spending patterns in plain language. Plus Lambda Managed Instances hit most regions, CloudWatch Logs gets 23 new query commands, and VPC Flow Logs now captures resource tags directly. Analytics & Data Redshift: Snapshot billing now based on unique blocks, not total size A

This week: OpenAI's GPT 5.5 and Codex land on Amazon Bedrock with full pricing parity, Cognito adds multi-region replication for resilient authentication, and ECS on Fargate scales up to 32 vCPUs for demanding workloads. Plus Bedrock AgentCore gets interactive terminal access for debugging AI agents, and the AWS MCP Server now supports multi-account workflows in a single session. Email & Messaging SES: Per-tenant suppression lists for bounce/complaint isolation AI/ML - Bedrock Bedrock: OpenAI