AWS Private CA Connector for Kubernetes has a nasty authorization bug (CVE-2026-119115) that lets authenticated users grab certificates from cluster-scoped issuers they shouldn't access. If you're running aws-privateca-issuer before v1.10.1 or the EKS add-on before v1.10.1-eksbuild.1, you need to patch ASAP—this is a real privilege escalation risk in your cert management.
source: [aws/security-bulletin]
Amazon RDS for Oracle and SQL Server now let you enable storage autoscaling on additional volumes—no more manual provisioning headaches. Set your max storage limit, and RDS automatically scales capacity as your database grows, available across all commercial AWS Regions and GovCloud.
source: [aws/whats-new]
AWS Step Functions workflows can now act as tools for AI agents through Amazon Bedrock AgentCore Gateway, letting your agents trigger multi-step business processes automatically. This means your customer support or operations agents can execute complex workflows—like refund eligibility checks, approvals, and credits—while maintaining consistent policy enforcement across every run.
source: [aws/whats-new]
CVE-2026-111497 is a nasty remote code execution and memory disclosure bug in the native Brotli decompression library that could let attackers execute code or leak process memory. AWS Lambda, Amplify, App Runner, CloudWatch Synthetics, CodeBuild, Elastic Beanstalk, and Elemental MediaLive are all affected—some require your action. Check AWS's security bulletin for service-specific mitigation steps.
source: [aws/security-bulletin]
Strands Agents Tools versions 0.1.0 through 0.8.5 have a nasty vulnerability (CVE-2026-115415) where crafted prompts can trick the LLM into disabling environment variable masking. This means your cloud credentials and API keys could leak in cleartext—yikes! If you're running affected versions, update to 0.8.6 or later immediately. User action required.
source: [aws/security-bulletin]
AWS SDK for pandas (awswrangler) versions below 3.16.1 have a security issue where unverified S3 bucket ownership could let attackers access your Athena query results and mess with the data. If you're using awswrangler, upgrade to 3.16.1 or later ASAP—this one needs your attention.
source: [aws/security-bulletin]
AWS API MCP Server versions 1.3.0 through 1.5.x have a critical OAuth validation flaw (CVE-2026-115413). The server skips checking the token's audience claim, letting attackers bypass authentication. If you're running the affected versions with OAuth enabled, upgrade to 1.6.0+ immediately—this one needs your attention.
source: [aws/security-bulletin]
Amazon Aurora serverless now supports up to 384 Aurora Capacity Units (ACUs) for PostgreSQL-Compatible Edition—a 50% bump that lets your database scale to 768 GiB of memory. This is perfect for AI agents and bursty workloads since Aurora still scales down to zero when idle, so you pay only for what you actually use.
source: [aws/whats-new]
Amazon SageMaker AI MLflow Apps now runs MLflow 3.16, giving you a redesigned trace explorer with customizable columns and faster metric charts for large experiment histories. The upgrade rolls out automatically to all existing apps across all AWS Regions, making debugging generative AI workflows and agents way smoother.
source: [aws/whats-new]