bedrock-agentcore-starter-toolkit versions 0.1.4 through 0.3.13 have two nasty security issues: CVE-2026-105812 allows arbitrary code execution when importing malicious agents, while CVE-2026-106032 can trigger unwanted network requests or file access. If you're using this AWS Python package, update immediately—user action is required.
source: [aws/security-bulletin]
Forget API keys and shared secrets—they're basically dinosaurs in cloud environments. Learn how to implement short-lived cryptographic workload identities using SPIRE with AWS managed services to secure machine-to-machine communication at scale.
source: [aws/security-blog]
AWS Batch now automatically publishes job metrics to Amazon CloudWatch, giving you real-time insights into queue health, failure rates, and job durations across the entire job lifecycle. Track state transitions (submitted, running, succeeded, failed) and timing data directly from the AWS Batch or CloudWatch consoles—this feature is live in all AWS regions where Batch operates.
source: [aws/whats-new]
AWS just dropped a public preview of Amazon Bedrock Managed Agents powered by OpenAI, letting you build AI agents optimized for OpenAI models that run natively on AWS with full identity and governance controls. Perfect for developers who want enterprise-grade agent orchestration without leaving the AWS ecosystem.
source: [aws/aws-blog]
AI is getting better at finding vulnerabilities faster than security teams can handle them manually. AWS Continuum tackles this by automating code security analysis, so you can keep pace with the growing threat surface without drowning your team in investigation work.
source: [aws/security-blog]
AWS IAM Identity Center now lets you lock down access to your Identity Store API and SCIM API by restricting requests to specific VPC endpoints, source VPCs, or IP ranges. This means your user provisioning workflows and external identity providers can only talk to your identity data from networks you explicitly allow—perfect for tightening security in multi-account setups.
source: [aws/whats-new]
Amazon SageMaker Unified Studio has a nasty OS command injection bug (CVE-2026-104019) in the startup script that could let project members execute arbitrary code in other users' Spaces. With Trusted Identity Propagation enabled, attackers could snag temporary credentials and impersonate colleagues. AWS has patched supported versions (2.14.12+, 3.9.12+, 4.0.11+, 4.1.11+, 4.2.8+, 4.3.5+, 4.4.3+), deploying automatically on next Space startup. If you're running older versions, upgrade now—older branches are EOL with no fixes available.
source: [aws/security-bulletin]
Amazon EFS CSI Driver versions 3.1.0 through 3.4.2 have a mount option injection flaw (CVE-2026-103505). Users with PersistentVolume creation privileges can exploit the mounttargetipmap attribute to inject malicious mount options. If you're running affected versions, update immediately—this requires action.
source: [aws/security-bulletin]
Loom for AWS has three nasty vulnerabilities that need your attention. CVE-2026-103956 lets unauthenticated attackers grab full admin access when no identity provider is set up. CVE-2026-103957 and CVE-2026-103958 allow authenticated users to leak OAuth2 tokens and credentials through misconfigured discovery endpoints. Upgrade to version 1.7.0 immediately—this is a must-do, not optional.
source: [aws/security-bulletin]