Bartek Chojnacki

AWS CloudFormation's new express mode lets you deploy cloud infrastructure faster by streamlining the provisioning process, whether you're using JSON, YAML templates, CDK, or SAM. This means less waiting around and more time actually building stuff—perfect if you're juggling multiple stacks or running deployments through CI/CD pipelines.

AWS CLI versions 1.44.77 and earlier (v1) or 2.34.28 and earlier (v2) have a nasty security flaw on Unix-like systems. The tool was writing credential and config files with world-readable permissions, letting other local users snag your AWS credentials. If you're running an affected version, you need to update immediately—this one requires action.

AWS CDK (aws-cdk-lib) versions before 2.260.0 have a nasty OS command injection flaw in NodejsFunction Docker bundling. If someone controls your package.json dependency versions, they can execute arbitrary commands on your build machine through shell metacharacters. Action required: upgrade to 2.260.0+ if you use Docker-based bundling with nodeModules.

AWS Advanced JDBC Wrapper versions 3.3.0 through 4.0.0 have a nasty deserialization flaw (CVE-2026-14265) in RemoteQueryCachePlugin. If you've got this plugin enabled, an attacker with cache write access can inject malicious Java objects that execute arbitrary code on your app server. Update immediately if you're running affected versions—this one requires action.

AWS just dropped CloudFormation Express mode, letting you and your AI agents spin up infrastructure in seconds instead of minutes. It's free across all commercial regions, so you can iterate faster without breaking the bank.

Amazon's fresh EC2 C9g and C9gd instances are now live, packing AWS Graviton5 processors that crush their Graviton4 predecessors with 25% better compute performance and 5x larger cache. If you're running compute-heavy workloads, you'll appreciate the fastest memory available in the cloud plus optional local NVMe storage on C9gd models.

AWS Certificate Manager now supports ACME protocol, letting you automate public TLS certificate issuance and renewal across any workload with ACMEv2-compatible clients. You get centralized governance, IAM-based access controls, and domain scoping—perfect for reducing operational overhead as certificate lifetimes keep shrinking.