Podcast
Last Week In AWS Podcast
Hosted by Corey Quinn · EN
The latest in AWS news, sprinkled with snark. Posts about AWS come out over sixty times a day. We filter through it all to find the hidden gems, the community contributions--the stuff worth hearing about! Then we summarize it with snark and share it with you--minus the nonsense.
38episodes
Episodes
Newest firstAll episodes
United Solved IP Exhaustion, You Won't Believe How
4d ago00:06:29Tap to summarizeAWS Morning Brief for the week of July 13th with Corey Quinn. Links:AWS Security Hub extends unified security management to Microsoft AzureAmazon EKS Auto Mode reduces GPU management fees by up to 60%Amazon RDS for Oracle now supports Oracle Database 26aiAWS Builder Center Now Offers Free Sandbox EnvironmentsAWS Security Hub now offers Network Scanning to identify publicly reachable resourcesAmazon Cognito now supports self-service provisioned API rate limitsAWS Security Hub adds impact analysis for exposure findingsBlazing a Trail: How Peloton Rebuilt the SDLC for the Agentic Era with Amazon BedrockHow United Airlines solved IP exhaustion with Private NAT GatewayBuilding secure AI agents at scale: Introducing Loom for AWSWhat does it cost to answer one question? Measuring per-request cost in agentic workloadsDesigning for the inevitable: System prompt leakage and mitigations in generative AI applicationsThe CISO’s guide to post-quantum mandates and migrationsTwo CVEs on the theme of guarding keys badly
Transcribe →AWS Discovers ACME Isn't Just Roadrunner Stuff
2w ago00:04:39Tap to summarizeAWS Morning Brief for the week of July, 6th with Corey Quinn. Links:Announcing general availability of Amazon WorkSpaces for AI agentsAmazon CloudWatch supports creating alarms from log queriesECS Service Connect now supports Zone-Aware routingHow InterWiz reduced AI costs by 90% with Amazon BedrockAccelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express modeAutomate public TLS certificate issuance with ACME support in AWS Certificate ManagerUpgrade Amazon EKS clusters with confidence using Kubernetes version rollbacksSafely Releasing Frontier Models to CustomersAccelerating government FinOps with Amazon QuickFour CVEs: AWS reads half your request, leaks the rest
Transcribe →Open Governance for MySQL Plot Twist
3w ago00:06:19Tap to summarizeAWS Morning Brief for the week of June 29th, with Corey Quinn. Links:Amazon CloudWatch launches OTel Container Insights for Amazon EKSAmazon GuardDuty AI-powered investigations accelerate threat response (Preview)Amazon Route 53 Global Resolver now supports sharing DNS Views between AWS AccountsAutomate AWS Invoice Retrieval with New Programmatic APIsRun isolated sandboxes with full lifecycle control: AWS Lambda introduces MicroVMsUpgrading Lambda function runtimes at scale with AWS Transform customHuntington Bank: Redacting sensitive data from 400M+ documents with AWSOpen Governance for MySQL: A Step Forward for the CommunityHow AWS and a local community organization built a developer engagement model that worksModernizing border control with digital arrival cards on AWS CloudPrevent data exfiltration: AWS egress controls for cloud workloadsRestrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPsA new way to keep your AWS Certification current CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins
Transcribe →MySQL 5.7 Will Outlive Us All
4w ago00:09:23Tap to summarizeAWS Morning Brief for the week of June 22nd, with Corey Quinn. Links:AWS Marketplace announces AI-assisted product listingAmazon CloudWatch introduces Log Analytics for unified log analysisAmazon EKS now supports customer-routed control plane egressFree Network Bandwidth Amazon GameLift Servers is Here!AWS announces AWS Blocks, an open-source framework for composing application backends on AWS (Preview)AWS Compute Optimizer enhances EBS volume recommendations with additional performance metricsIntroducing AWS Continuum for security at machine speedAWS Management Console Private Access now works without internet connectivityAWS Security Agent announces support for Threat ModelingGrok 4.3 from xAI now available in Amazon BedrockAmazon Aurora and RDS for MySQL expand Extended Support for MySQL 5.7 through June 2029AWS Marketplace reduces listing fee for professional services to 0.5%S3 Vectors: More Results, Cheaper Queries, Fresh FeesAmazon S3 annotations: attach rich, queryable context directly to your objectsAnnouncing Amazon EC2 G7 instances accelerated by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUsAWS DevOps Agent adds release management capabilities to assess code changes before production (preview)AWS WAF adds AI traffic monetization capability to help content owners charge AI bots for content accessSimulating Amazon EC2 EBS burst credits before downsizing an instanceAWS Security Bulletin Quartet: AI Tools Forget Unix 101
Transcribe →27 Security Bulletins and Other Bedtime Reading
Jun 1500:08:37Tap to summarizeAWS Morning Brief for the week of June 15th, with Corey Quinn. Links:AWS announces AWS Workload Credentials ProviderAnnouncing the public preview of AWS FinOps AgentIntroducing AI-Powered Cost Investigations For Cost AnomaliesAmazon CloudWatch Logs Insights adds 23 new query commands and functionsIntroducing Target Coverage in Savings Plans Purchase AnalyzerIntroducing the AWS Credits Detail PageAnthropic Claude Fable 5 on AWS: Mythos-class capabilities with built-in safeguards now availableNow available: Amazon EC2 M9g and M9gd instances powered by new AWS Graviton5 processorsTry the new console experience in Amazon Bedrock, optimized for Anthropic- and OpenAI-compatible APIsAWS Nitro Isolation Engine: Formally verifying the hypervisor in the AWS Nitro SystemIt’s safe to close your laptop now: Hosting coding agents on Amazon Bedrock AgentCore27 AWS Security Bulletins: A Patch Tuesday That Lasted a Year
Transcribe →OpenAI on Bedrock and Other Strange Bedfellows
Jun 800:07:25Tap to summarizeAWS Morning Brief for the week of June 8th, with Corey Quinn. Links:AWS Interconnect - multicloud now offers a free 500 Mbps tierOracle Database@AWS is now available in twenty AWS RegionsAmazon Cognito now supports multi-Region replicationAmazon EKS and Amazon EKS Distro now supports Kubernetes version 1.36Amazon SES now supports tenant-level suppression listsAWS Compute Optimizer now supports 32-day lookback for EBS volume and ECS service rightsizing recommendationsAWS Cost and Usage Report 2.0 now supports Athena and Redshift integrationAmazon ElastiCache for Valkey now supports durabilityUnderstanding how backups work in Amazon AuroraOpenAI models and Codex on Amazon Bedrock are now generally availableHow Bedrock Streaming optimizes its AWS costsFrom Monolith to Multi-Account: Pinterest’s AWS Organization Transformation JourneyGain visibility into DDoS attacks with flow logs in AWS Shield AdvancedIdentify unused AWS KMS keys and prevent accidental key deletionsCVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive PathsCVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer
Transcribe →The Week AWS Remembered GovCloud Exists
Jun 100:06:28Tap to summarizeAWS Morning Brief for the week of June 1st, with Corey Quinn. Links:Monitor AWS Budgets directly in Billing and Cost Management Dashboards with new Budgets widgetIntroducing the next generation of Amazon OpenSearch Serverless for building your agentic AI applicationsOptimize costs in Amazon AuroraHow AWS DevOps Agent uses multi-agent reasoning to find root causesClaude Opus 4.8 is now available on AWSBest Practices for TCP Connection Management on EC2Introducing US-based, US citizen, 24/7 technical support for AWS GovCloud (US) customers: Your mission never sleeps, neither do weWell-architected best practices for software supply chain securityAutomate Amazon EBS gp2 to gp3 migration at scale with AWS Step Functions and AWS LambdaAWS Organizations emits CloudTrail events for account membership changesCVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLICVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing
Transcribe →AWS and Oracle Together at Last, Apparently
May 2600:05:41Tap to summarizeAWS Morning Brief for the week of May 25th, with Corey Quinn. Links:Amazon Bedrock expands support for request-level usage attributionAmazon ECS introduces pause and continue controls for service deploymentsAWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in previewAWS Organizations now supports higher quotas for service control policies (SCPs)Amazon Aurora MySQL 8.4 is now generally availableIntroducing ExtendDB: An open source DynamoDB-compatible adapter with pluggable storage backendsNine Entertainment’s journey: Achieving 98% cost savings with Amazon ElastiCache Serverless for ValkeyAnnouncing updated retry behavior for AWS SDKs and ToolsAnnouncing AWS CDK Mixins: Composable Abstractions for AWS ResourcesCVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driverCVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin
Transcribe →M3 Ultra Macs, Claude Platform, and 619 New APIs Walk Into a Bar
May 1800:07:06Tap to summarizeAWS Morning Brief for the week of May 18th , with Corey Quinn. Links:Announcing general availability of Amazon EC2 M3 Ultra Mac instancesAmazon EventBridge Scheduler adds 619 new SDK API actions, including Lambda Managed InstancesAmazon Redshift launches RG instances powered by AWS GravitonAmazon Route 53 Domains adds support for 34 new Top Level Domains including .app, .dev, and .health.ENA Express for Amazon EC2 instances now supports traffic between Availability ZonesStreaming CloudWatch metrics to VPC-based OpenTelemetry collectors using LambdaHow HotelTrader cut inter-AZ cost 95% and latency by 49% with Valkey GLIDE on Amazon ElastiCacheIntroducing Claude Platform on AWS: Anthropic’s native platform, through your AWS accountAmazon CloudFront Premium flat-rate pricing plan now supports higher, configurable usage allowancesScalable cross-cloud data migration to Amazon S3 with distributed rcloneDirty Frag and other issues in Amazon Linux kernelsCVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC DriverFragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux KernelOngoing updates on Copy.fail and variantsIssue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &amp: CVE-2026-8597)
Transcribe →AI-Native Foundations and the CVEs That Love Them
May 1100:06:45Tap to summarizeAWS Morning Brief for the week of May 11th , with Corey Quinn. Links:Announcing Agent Toolkit for AWS — help AI coding agents build effectively on AWSAmazon CloudFront Announces WebSocket Support for VPC OriginsAmazon EventBridge supports data plane logging to AWS CloudTrailAWS IAM now provides higher maximum quotas for roles, role trust policies, instance profiles, managed policies, and identity providersAWS Marketplace now supports programmatic procurement with Agreements APIThe AWS MCP Server is now generally availableAnnouncing Valkey 9.0 for Amazon ElastiCacheQuery billion-scale vectors with SQL: Integrating Amazon S3 Vectors and Aurora PostgreSQLYou Wanted to Become AI-Native, and All You Got Was a Lousy FoundationCVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume CredentialsCVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight AgentCVE-2026-31431
Transcribe →