AWS News May 18 - May 24

About this episode

This week: Aurora MySQL 8.4 reaches GA with stronger security defaults, ECS deployments gain pause-and-continue controls for approval workflows, and Security Hub now detects unused IAM access across your organization. Plus DocumentDB Serverless gets major performance boosts, SAM CLI supports CloudFormation Language Extensions, and a new Istanbul Local Zone brings single-digit millisecond latency to Türkiye.

Secrets & Identity

• Secrets Manager Agent: Pre-fetching for batch caching, IAM role assumption for cross-account
• Secrets Manager: Managed rotation for Datadog API keys and Snowflake tokens
• Security Hub: Detects unused IAM access across org, generates least-privilege policies

Compute & Containers

• ECS: Pause/continue deployment controls with 14-day timeouts, approval workflows
• ECS + EBS: Now available in GovCloud regions
• Elastic VMware Service: 32 ESXi hosts per environment (2x increase)
• Lightsail CDN: IPv6-only instance origins supported

Data & Analytics

• Redshift: Direct writes to Iceberg tables, ALTER TABLE for partitioning
• DocumentDB Serverless: v8.0 with 7x query latency, 30x faster vector index builds
• Aurora MySQL 8.4: GA with TLS 1.2/1.3 enforced, automated upgrade prechecks
• CloudWatch Logs Insights: 13 new commands (base64 decode, logfmt parse, geo distance)
• Keyspaces: Expanded to new Asia Pacific regions

ML & AI

• SageMaker Studio: GPU reservation via Flexible Training Plans, up to 65% savings
• SageMaker HyperPod: Inference payload capture to S3 for training/evaluation
• SageMaker endpoints: OpenAI-compatible APIs (works with LangChain, Strands)
• SageMaker Unified Studio: Glue Data Quality rules, auto connector provisioning, business metadata
• Bedrock: Custom tagging for inference calls (team, project, environment)

Infrastructure & Networking

• Local Zones: Istanbul launch (C7i, M7i, R7i, S3, EKS, ALB)
• Local Zones: Now in console region selector
• Managed Grafana: Dual-stack IPv4/IPv6 connectivity
• Transfer Family: Federated permissions with Identity Center multi-region

Developer Tools

• SAM CLI: CloudFormation Language Extensions support (Fn::ForEach)
• ExtendDB: Open source DynamoDB adapter with PostgreSQL backend

AWS News Feed: Whats new at AWS

For help with your AWS Infrastructure check out flomotlik.me or email [email protected]

For detailed show notes check out awsnewsweekly.com