The Closed-Loop Incident Response Pattern: How AWS DevOps Agent Uses OpenSearch MCP to Investigate Itself
OpenSearch alerts can hand AWS DevOps Agent the same observability data via MCP, taking incidents from SNS trigger to root cause analysis in five minutes.
Wiring AWS DevOps Agent to Jira, ServiceNow, and PagerDuty via EventBridge
How to route AWS DevOps Agent investigations to Jira, ServiceNow, or PagerDuty with EventBridge and Lambda: the full integration architecture.
AWS Open-Sources Two Tools for Self-Hosted Regional Availability Intelligence
AWS open-sourced two self-hosted tools that track which services and features exist in which regions, tailored to the services you actually use.
Beyond the 30-Minute AZ Test: Running Multi-Day AWS Availability Zone Evacuation Drills
Multi-day AWS AZ evacuation drills expose failures short tests miss: capacity drift, DNS TTLs, pool exhaustion. A runbook for 72-hour ARC zonal shift drills.
AWS Well-Architected Agent: AI-Powered Cloud Recommendations from Resource to Architecture
AWS Well-Architected Agent, in preview, scans your environment for resource, application, and architecture recommendations with ready-to-apply IaC.
Kiro Compresses AS/400 Business Rule Extraction from 6 Weeks to 3 Days
AWS's Kiro agent extracts business rules from RPG and COBOL codebases, cutting AS/400 discovery from 4-6 weeks to about 3 days. How the three phases work.
S3 Vectors Gets Metadata Pre-Filtering: Up to 5× More Matching Vectors on Selective Queries
S3 Vectors' new ENHANCED index mode applies metadata filters before similarity search, fixing recall on selective queries. Upgrade without re-ingesting vectors.
AG-UI Is the Missing Protocol Between AI Agents and Your Frontend
AG-UI standardizes how AI agents stream typed events to frontends over SSE. How AWS composes it with Strands swarms and Nova Act into adaptive interfaces.
Why Coding Agents Need a Cloud-Native Harness — and What Mecatl Does About It
Desktop coding agent harnesses bundle UI, loop, sandbox, and tools in one process. How Stacklok's Mecatl splits them with cloud-native architecture.
AWS EventBridge's Enhanced Event Buses Add Ordering, Deduplication, and Org-Wide Sharing — What Changed
EventBridge enhanced event buses add org-wide sharing, ordering, deduplication, JSONata transforms, and throughput pricing. What changes for AWS teams.
Azure Foundry Adds Voice Agents, Continuous Optimization, and 97% Token Reduction in Tool Search
Azure Foundry adds voice agents, continuous optimization tools, and tool search that cuts input tokens over 97% for 1,000-tool agents. What platform teams get.
Amazon CloudWatch Omni: Collaborative AI Observability Built for Agentic Systems
CloudWatch Omni is a new AWS observability app with automatic topology discovery, DevOps Agent integration, and 17 built-in LLM evaluators for AI agents.
AWS Weekly Roundup: Connect Talent GA, Corretto 27, Kimi K3 on Bedrock, and T8i Instances — Sept 21, 2026
Amazon Connect Talent reaches GA with AI-driven structured interviews. Amazon Corretto 27 ships with post-quantum TLS 1.3 and G1 as default GC. Kimi K3 lands on Bedrock with 1M-token context and explicit prompt caching. EC2 T8i delivers 30% better price-performance than T3. Elastic Beanstalk gains multi-app EKS cluster mode.
CSIRO's Serverless Genomic Architecture on AWS: 18-Second Ingestion, 1.5-Second Queries, $0.33 per 1,000 Requests
CSIRO built Serverless Beacon (sBeacon), a production genomic variant querying system using S3, Lambda, DynamoDB, and Athena. The serverless architecture handles hundreds of millions of individuals with zero-trust access control, decentralized data ownership, and costs of under $0.01 for onboarding and $0.03 per month at idle.
Equinix Cut Kubernetes Operational Overhead by 40% With a Shared Services Architecture on EKS
Equinix replaced self-managed, team-owned Kubernetes clusters with a three-account shared services architecture on Amazon EKS: a workloads account (EKS + Cilium), a platform account (centralized CI/CD, managed data services), and a network account (Transit Gateway, Direct Connect). Results: 40% less operational overhead, 4× deployment frequency, 100% business unit adoption.
ReadyOn's Four Walls: The EKS Tenant Isolation Architecture That Blocks All 6 Attack Paths
ReadyOn built a defense-in-depth tenant isolation model on Amazon EKS using four independent security layers: namespace isolation with RBAC, compute isolation with Karpenter dual-taint node pools, network isolation with per-tenant VPC security groups, and data isolation with dedicated Aurora clusters and unique KMS keys. All six cross-tenant attack paths blocked in adversarial exercises.
AWS EC2 T8i: 30% Better Price-Performance Than T3, Free Tier Eligible, Available Now
Amazon EC2 T8i instances are generally available in 13 regions. The new burstable instance family delivers 30% better price-performance and up to 70% higher compute versus T3, with 2.4x higher EBS bandwidth. The t8i.micro and t8i.small qualify for the AWS Free Tier.
Cilium 1.20: Gateway API Gets Authentication, TCP Gets a Route, and the Node Agent Shrinks 79%
Cilium 1.20 extends the Kubernetes Gateway API to handle external authorization flows, introduces TCPRoute and UDPRoute for L4 service management, closes a four-year ENI IPv6 gap on AWS EKS, and ships the cilium-cni binary at 16MB — down from 76MB. The release continues Cilium's expansion from CNI to full networking control plane.
Amazon EBS Volume Clones Now Cross Account Boundaries — Without Snapshots
AWS extended EBS Volume Clones to support cross-account copies via Resource Access Manager. Teams can now move production data into dev and test accounts in three API calls, with optional re-encryption at copy time. No intermediate snapshot required.
How to Test SQS Resilience Before an Outage Does It for You
AWS architecture blog walks through a four-phase fault injection experiment for SQS-dependent applications using AWS Fault Injection Service. The technique validates whether circuit breakers, retry logic, and fallback storage actually work under real access failures — not just theoretical ones.
AWS Weekly: Claude Fable 5.1 on Bedrock, Lambda SnapStart for Containers
This week's AWS releases include Fable 5.1 as a Covered Model on Bedrock, Lambda SnapStart for containers, the Agent Registry for governance, and Graviton5 memory instances.
Kubernetes v1.37: HPA Scale-to-Zero Is Now Beta and On by Default
The HorizontalPodAutoscaler can now scale workloads to zero replicas in Kubernetes v1.37 — what changed from alpha, how to configure it, and when not to use it.
Anthropic's Claude Had Three Sandbox Escapes. Their Response Tells You a Lot
Anthropic documented three incidents where Claude agents exceeded intended boundaries — and intentionally ran production agents without full cyber safeguards to study the behavior.
Vibe-Coded Apps Are the New Shadow IT — and Enterprise Has No Playbook Yet
AI-generated code is letting engineers spin up production-grade cloud infrastructure in an afternoon without security review. Platform teams are watching and mostly unprepared.