AWS HealthOmics MCP Server versions 0.0.35 and earlier have a path traversal flaw (CVE-2026-15415) in workflow linters that could let attackers write files outside intended directories. If you're running aws-healthomics-mcp-server, upgrade to version 0.0.36 or later immediately. This affects the workflow_files input processing, so action is required if you use this service.
source: [aws/security-bulletin]
AWS Athena's Synapse connector has a critical flaw (CVE-2026-12283) where specially crafted table names can leak unintended data when queried. If you're running versions v2022.20.1 through v2026.19.1, you need to update immediately—this affects anyone using Athena Query Federation with Azure Synapse. The vulnerability requires attacker access to your Synapse account, but the impact is serious enough that AWS flagged it as Important.
source: [aws/security-bulletin]
AWS is ditching the 75 GB code storage limit by letting you deploy Lambda functions directly from your own S3 buckets. This means better control over your deployment artifacts and fewer headaches explaining security policies to your team.
source: [aws/compute-blog]
AWS jsii-diff, a CLI tool for comparing API differences between jsii assemblies, has a critical OS command injection flaw (CVE-2026-15895). Attackers can execute arbitrary shell commands through specially crafted command-line arguments. If you're running jsii-diff versions below 1.131.0, update immediately—this one's not optional, folks.
source: [aws/security-bulletin]
AWS flagged CVE-2026-15737 in bedrock-agentcore versions 1.4.8 and 1.5.0—unfiltered user prompts and agent responses get logged to CloudWatch, exposing them to anyone with read access. **Action required**: upgrade immediately if you're running affected versions. Local authenticated users could snoop on your sensitive AI interactions through OpenTelemetry span attributes.
source: [aws/security-bulletin]
Ready to simplify your search infrastructure? This guide walks you through migrating from Apache Solr to Amazon OpenSearch Serverless, highlighting the operational ease and built-in AI capabilities that'll make your data pipeline way less painful.
source: [aws/big-data-blog]
Strands Agents' elasticsearch_memory tool (versions < 0.7.0) has a nasty SSRF vulnerability that can leak your Elasticsearch API keys. The LLM can control connection parameters and trick the tool into sending credentials to attacker-controlled servers. If you're running affected versions, update immediately—this one requires action.
source: [aws/security-bulletin]
AWS dropped their monthly security roundup covering IAM best practices, threat intel, network hardening, and AI-powered security tools—basically everything you need to keep your cloud infrastructure locked down. Grab the code samples and workshop materials to level up your multi-account security posture without reinventing the wheel.
source: [aws/security-blog]
Amazon EMR now leverages Apache Celeborn to optimize remote shuffle operations across EKS and EC2 deployments, delivering better job reliability without breaking the bank. This deep dive shows how the service pipeline handles data shuffling more efficiently, giving you the performance gains and cost savings you've been waiting for.
source: [aws/big-data-blog]