Bartek Chojnacki

Amazon SageMaker HyperPod now makes running Ray clusters way smoother with interactive development environments, automatic job recovery, and Grafana dashboards—no more kubectl wrestling matches. You can iterate on cluster-scale compute directly from JupyterLab or your local IDE, while HyperPod handles GPU faults and hung jobs automatically, plus accelerates Ray Serve inference with tiered KV caching.

SageMaker MLflow now lets you encrypt your ML data with your own AWS KMS keys, giving you full control over encryption and audit trails through CloudTrail. This feature rolls out across all AWS Regions where MLflow App is available, perfect for teams juggling strict compliance requirements.

AWS Glue 6.0 is here with a 30% price cut, Apache Spark 4.1 optimization, and Apache Iceberg V3 support—making enterprise data integration faster and cheaper. The article walks you through key capabilities and performance gains with practical code examples to get your pipelines running.

OpenSearch Dashboards has a stored XSS flaw (CVE-2026-77811) in the dashboards-observability plugin that lets authenticated users inject malicious scripts. If you're running self-managed versions before 3.4 or 2.19.6, update immediately—AWS managed users are already patched. An attacker with write access can execute JavaScript in other users' browsers and hijack their API calls.

Amazon Athena's Neptune connector (versions ≤v2026.28.1 and ≥v2024.15.1) has a security flaw that could let users access Lambda compute properties. If you're running Athena Federated Query with Neptune, update immediately to patch CVE-2026-77810. This is a serious issue requiring your attention.

AWS Glue 6.0 is here with a modernized runtime featuring Apache Spark 4.1, Python 3.12, and Scala 2.13—plus full Apache Iceberg v3 support. Data engineers get 30% lower costs compared to previous versions, making ETL pipelines more efficient and budget-friendly.

AWS CDK (aws-cdk-lib) versions before 2.245.0 (2.246.0 on Windows) contain a nasty OS command injection flaw in the NodejsFunction bundling pipeline. If someone controls bundling properties like externalModules or esbuildArgs, they can execute arbitrary commands on your build machine—yikes! Update immediately if you're using affected versions and let untrusted code near your CDK configs.

AWS Common Runtime aws-c-http has a nasty heap double-free bug (CVE-2026-12043) that lets remote servers trigger memory corruption and potentially execute arbitrary code on your client. If you're using aws-c-http versions 0.4.22 through 0.10.15, or aws-sdk-cpp/aws-sdk-java-v2 within the affected ranges, you need to update immediately. This one's serious—patch ASAP.

Amazon Bedrock now distributes OpenAI's GPT-5.6 models (Sol, Terra, and Luna) globally with cross-Region inference, letting you route requests through geographic and global profiles for better throughput. You'll learn how to integrate these models using OpenAI and Converse APIs, plus configure IAM, quotas, and monitoring for your ML workloads.