Bartek Chojnacki

AWS Identity and Access Management rolled out account access manager, letting admins assign IAM roles directly to workforce users through IAM Identity Center—no extra cost, available across all AWS Commercial Regions. This bridges the gap between centralized federation and granular IAM role flexibility, giving you the best of both worlds without the usual trade-offs.

Amazon EC2 just dropped application status checks, letting you monitor whether your apps are actually healthy without building custom solutions. The feature watches for common issues like stopped web servers or broken Docker daemons, works across all AWS regions, and Auto Scaling can automatically replace instances when apps go sideways.

Amazon OpenSearch Serverless just bumped its collection limit from 1,500 to 10,000 per collection group, letting you pack way more multi-tenant workloads into a single shared compute pool. This means better cost efficiency and resource utilization across all AWS Regions where nextgen OpenSearch Serverless is available—perfect for scaling those tenant-per-collection architectures without spinning up extra infrastructure.

Amazon Cognito is now available as a core skill in the Agent Toolkit for AWS, letting AI coding agents set up, configure, and troubleshoot authentication workflows automatically. This means faster implementation of secure sign-in flows for users, AI agents, and microservices—with best-practice patterns baked in, including OAuth 2.0, passkeys, and threat protection.

AWS just dropped runtime instances in Amazon Bedrock AgentCore—managed EC2 infrastructure that keeps your AI agents running smoothly in production with multi-agent collab, GPU power, and sessions up to 14 days. Perfect for teams building serious agentic workflows that need reliability and scale.

Amazon ECS now supports fractional GPU scheduling on EC2 G6f instances, letting you run AI inference and graphics workloads on GPU partitions as small as one-eighth of an NVIDIA L4 GPU (3 GB memory) by setting GPU=0.125, 0.25, or 0.5 in your task definition. This capability is live across all AWS Regions where G6f instances are available, helping you cut infrastructure costs by right-sizing containers instead of provisioning full GPUs.

Strands Agents memory tools (mongodb_memory, elasticsearch_memory, mem0_memory) have a serious IDOR flaw—CVE-2026-19111. Attackers can craft prompts to access, modify, or delete other tenants' memories by exploiting the exposed namespace parameter. Upgrade to version 0.8.3 or later immediately if you're running versions below that.

Amazon DocumentDB MCP Server versions below 1.0.12 have a nasty authorization flaw (CVE-2026-18954). Write-capable aggregation stages like $out and $merge can bypass read-only enforcement, letting authenticated clients sneak write operations past security controls. If you're running this open-source tool, upgrade immediately—this one requires your attention.

AWS just dropped runtime instances for Amazon Bedrock AgentCore, letting you spin up AI agents on your own EC2 instances without the infrastructure headache. You get access to GPU, memory, and compute-optimized hardware with sessions lasting up to 14 days—perfect for heavy-duty workloads. Available now across 9 regions including US, Asia Pacific, and Europe.