Bartek Chojnacki

AWS Lambda durable functions now let you encrypt execution data with your own AWS KMS keys instead of relying on AWS-owned ones. Perfect for regulated industries like finance and healthcare where data governance demands customer-controlled encryption. You'll get full control over key rotation and access to execution history, while keeping this separate from function-level encryption. No extra Lambda charges—just standard KMS pricing applies.

AWS just dropped listener rules for Network Load Balancer, and it's a game-changer for dual-stack setups. Now you can route IPv6 traffic to IPv6 targets and IPv4 to IPv4 targets from a single NLB without losing the original client IP—no protocol translation shenanigans needed. Say goodbye to running two separate load balancers or DNS juggling; listener rules handle Layer 3 conditional routing like a boss. Available now across all AWS regions at no extra cost.

Amazon SageMaker AI inference now supports G7 instances powered by NVIDIA RTX PRO 4500 Blackwell GPUs, delivering up to 4.6x faster performance than previous G6 models. These beasts pack 32 GB of GPU memory per GPU, 7x better networking, and massive NVMe storage—perfect for running those chunky 7B–30B parameter models without breaking a sweat. No more painful over-provisioning or model quantizing just to fit in memory. Deploy via SageMaker console, API, or SDK and start serving generative AI models like a pro.

s2n-tls (AWS's open-source TLS/SSL library) has two security issues requiring immediate attention. CVE-2026-16317 lets attackers silently drop TLS 1.3 encrypted records without detection due to missing content_type validation. CVE-2026-16318 causes memory leaks in QUIC-enabled deployments during HelloRetryRequest handshakes. Update to v1.7.6 or later—all TLS 1.3 users are affected by the first flaw.

AWS smithy-rs has a nasty recursion vulnerability (CVE-2026-15957) in its JSON, CBOR, and XML deserializers that lets attackers crash your service with deeply nested payloads. If you're running aws-sdk-rust versions before release-2026-06-0, you need to patch immediately – this is a remote DoS that requires zero authentication. The fix is straightforward: upgrade your crates and you're golden.

AWS WAF now lets you squeeze more power from labels using dynamic label interpolation—think of it as conditional logic for your security rules. Learn how to combine metadata from Bot Control and ATP to build smarter, more granular traffic policies without drowning in complexity.

AWS rolled out a one-click Lambda setup prompt and made OpenAI's GPT-5.6 models available on Bedrock, making serverless development and AI integration smoother for developers. The team also connected with AWSKRUG, Korea's largest cloud community, to gather feedback on what developers actually need.

AWS just dropped an AI-powered investigation agent for GuardDuty that automatically analyzes security findings across your environment—think of it as having a tireless security analyst on your team. As a cloud engineer, you should integrate this into your threat response workflow to slash investigation time and focus on actual remediation instead of manual log digging.

Learn how to govern Amazon Redshift data warehouses across AWS accounts using Amazon SageMaker Unified Studio with data mesh principles. This guide walks you through building a scalable architecture that keeps your data sharing secure, auditable, and operationally lean.