Amazon EMR on EC2 just got smarter with Advanced Managed Scaling—pick your strategy based on what matters most: squeeze costs with conservative scaling, balance both worlds, or go aggressive for SLA-critical jobs. The post walks you through real scenarios so you can dial in the perfect scaling config for your data pipeline.
source: [aws/big-data-blog]
aws-smithy-json has a nasty uncontrolled recursion bug in its unknown-key skip path that lets unauthenticated attackers crash smithy-rs generated servers with a denial of service attack. This affects all servers built with the vulnerable library. You should patch immediately—no user interaction needed to trigger the exploit. Check AWS Security Bulletin for detailed mitigation steps and patched versions.
source: [aws/security-bulletin]
OpenSearch Dashboards TSVB Plugin has a nasty remote code execution flaw (CVE-2026-18420) via prototype pollution. This is a serious one—you'll want to patch ASAP if you're running this. Check AWS Security Bulletin 2026-068 for the full details and fix.
source: [aws/security-bulletin]
Strands Agents http_request tool has a critical authorization flaw affecting versions below 0.8.2. An attacker can inject prompts to redirect requests through a malicious proxy, exposing credentials in cleartext despite hostname allowlists. Update immediately to 0.8.2 or later—this requires your action.
source: [aws/security-bulletin]
Great news for developers! Amazon Bedrock is cutting prices for OpenAI's GPT-5.6 models starting July 30, 2026. GPT-5.6 Luna gets an 80% discount, perfect for high-volume content processing and automation, while GPT-5.6 Terra drops 20% for balanced production workloads. Best part: pricing updates automatically with zero effort needed.
source: [aws/whats-new]
Amazon MSK Express brokers can now deliver Apache Kafka data straight to S3 buckets with zero manual connector management. This fully managed feature automatically scales to 10 GB/s throughput, handles retries and backpressure on its own, and cuts costs by up to 60% compared to self-managed solutions. Perfect for log archival, compliance, and ML training pipelines.
source: [aws/whats-new]
AWS has upgraded IAM Policy Simulator with a major refresh—it's now built right into the IAM console instead of running separately. The tool can now test service control policies (SCPs) and lets you simulate "what if" scenarios by excluding specific policies. You'll get better insights into cross-account permissions and how conditions like regions and tags affect access decisions.
source: [aws/whats-new]