AWS is rolling out public preview runtimes for Lambda, letting you test Node.js 26 and Python 3.15 before they hit general availability. Jump in early, kick the tires, and help AWS iron out any bugs before these versions go live.
source: [aws/compute-blog]
AWS just dropped Managed Dashboards in BCM—five preconfigured, read-only dashboards that show you cost trends, compute/database spending, and reservation utilization without any setup hassle. They're live across all commercial AWS regions at no extra cost, and you can duplicate them to customize or export data as PDF/CSV.
source: [aws/whats-new]
Amazon Quick now lets admins set per-user caps on index storage and agent hours, giving you fine-grained control over subscription costs and preventing surprise overages. You can create limit profiles at user, role, or account level—perfect for scaling across your org while keeping costs predictable.
source: [aws/whats-new]
Amazon Quick now plays nice with Microsoft Purview, letting you enforce data loss prevention policies directly in chat, spaces, and knowledge bases. Security teams can apply sensitivity labels to automatically block, warn, or allow file sharing—no extra tools needed.
source: [aws/whats-new]
OpenSearch SQL Plugin versions 2.13–3.6 have a nasty security gap: the Flint extension doesn't properly validate async queries, letting users slip past the SQL grammar deny list through direct queries. If you're running affected versions, you need to update to 3.7 or 2.19.6 ASAP. AWS managed OpenSearch users get automatic fixes via service updates.
source: [aws/security-bulletin]
OpenSearch Security Analytics Plugin has a critical input validation flaw (CVE-2026-18952) that lets authenticated users perform server-side request forgery and read local files. If you're running plugin version 2.15.0 or later, you need to upgrade to 3.5.0 or newer. AWS managed domains are mostly safe since the vulnerable feature isn't enabled by default, but self-managed instances require immediate patching.
source: [aws/security-bulletin]
AWS Certificate Manager is killing email validation for public certificates by September 2027, so you'll need to migrate to DNS validation before the deadline. This move follows the CA/B Forum's industry push to ditch email-based domain validation, making DNS the standard way to prove you own your domain.
source: [aws/security-blog]