Bartek Chojnacki

AWS Load Balancer Controller versions 3.4.1+ have a rule priority ordering bug that lets namespace-scoped users intercept traffic across namespaces. When HTTPRoute and GRPCRoute share an ALB HTTPS listener with the same hostname, the controller prioritizes HTTPRoute rules first regardless of specificity—allowing attackers to create catch-all HTTPRoutes that hijack traffic meant for more-specific GRPCRoutes. If you're running affected versions with shared Gateways, you need to upgrade immediately to patch this.

AWS HealthLake MCP Server versions before 0.0.14 have a critical SSRF flaw (CVE-2026-15643) in pagination handling. Attackers can exploit unvalidated next_token parameters to redirect requests and steal AWS credentials. **Action required**: upgrade to version 0.0.14 or later immediately if you're running this service.

Security Hub now covers AI workloads and Microsoft Azure environments, giving cloud engineers a unified platform to manage security across multiple clouds without juggling separate tools. The update lets your team focus on actual threats instead of wasting time integrating disparate security solutions.

Java Lambda functions suffer from brutal cold starts that can tank your p99 SLAs—AWS Lambda Managed Instances fix this by keeping the JVM warm and letting the JIT compiler do its thing. Learn when to ditch standard serverless for this pattern and keep your Java workloads snappy.

Amazon SQS just celebrated two decades of keeping your microservices from talking past each other. Learn how this OG AWS service became the backbone for decoupled, reliable messaging at scale—perfect if you're building systems that actually need to survive when things go sideways.

AWS Builder Center just celebrated its first anniversary with some serious upgrades—sandbox environments, workshops, and a brand new Builders' Library are now live for developers looking to level up their skills. If you're building on AWS, this expanded ecosystem gives you everything from community vibes to hands-on learning in one place.

Learn how to configure EC2 instances on AWS Outposts to hit your IOPS and throughput targets for latency-sensitive workloads running on-premises. This guide walks you through the performance tuning specifics so your local infrastructure doesn't become the bottleneck.

AWS just dropped Lambda MicroVMs, giving you VM-level isolation and near-instant startup for serverless workloads—perfect for running untrusted code or AI-generated scripts without managing infrastructure. Learn when to pick MicroVMs over traditional Lambda, containers, or EC2 instances.

Learn how to let your AI coding agents generate and execute code without breaking governance or risking your production systems. The article breaks down the secure sandbox approach using AWS Lambda MicroVMs, showing you the three key components needed to keep agent-generated code isolated and under control.