Good news for remote agents: Amazon Connect now optimizes audio when you're working from Azure Virtual Desktop or Windows 365 Cloud PC. IT admins just need a one-time setup, then media redirects to your local device for crystal-clear calls. Your agents can jump straight into the Amazon Connect workspace and start taking calls—no extra hassle.
source: [aws/whats-new]
AWS just leveled up Kinesis Data Streams with the ability to scale down ingest capacity using warm throughput. Now you can dial back your stream's write throughput when traffic drops, keeping costs lean while maintaining peak-hour performance. It's like having a thermostat for your data pipeline—set it and forget it. Available free across all AWS regions for On-demand Advantage users.
source: [aws/whats-new]
AWS just dropped a nice quality-of-life update: you can now spin up EC2 Dedicated Host Resource Groups without the Self-Managed License hassle. Perfect for Mac Instance users and anyone needing hardware isolation without BYOL complexity. Still want license tracking? No problem—SMLs are optional now.
source: [aws/whats-new]
AWS just dropped zone-aware routing for ECS Service Connect, and it's a game-changer for cost-conscious DevOps folks. Now your service-to-service traffic automatically stays within the same Availability Zone, slashing cross-AZ data transfer costs and latency without any code changes. The system intelligently redistributes traffic when endpoints get unhealthy, keeping your apps resilient while ditching that old cost-vs-resilience trade-off. It's enabled by default and available everywhere ECS Service Connect runs—no extra infrastructure needed.
source: [aws/whats-new]
AWS Bedrock AgentCore Python SDK versions below 1.18.1 contain CVE-2026-16796, a command injection flaw in the install_packages() method that could let authenticated users execute arbitrary commands in the Code Interpreter sandbox through crafted package names. If you're using bedrock-agentcore, update to version 1.18.1 or later right away—this one needs your attention.
source: [aws/security-bulletin]
aws-smithy-http-server versions 0.66.4 and earlier have a nasty vulnerability (CVE-2026-16756) that lets unauthenticated attackers launch Slowloris denial of service attacks. The issue? Unlimited resource allocation in the default serve() path means attackers can tie up your server without breaking a sweat. If you're running Smithy-RS for the AWS SDK for Rust or custom services, update immediately to patch this.
source: [aws/security-bulletin]
AWS API MCP Server (awslabs.aws-api-mcp-server) versions 0.2.13 through 1.3.46 have a critical flaw: if the security policy fails to load on startup, the server keeps running without enforcing access controls. This means configured policy denials get bypassed for the entire process lifetime. If you're using this tool with a security policy, update to version 1.3.47 or later immediately—especially if fail-closed modes aren't enabled.
source: [aws/security-bulletin]