Amazon SageMaker HyperPod now supports AMI versioning and auto-patching AWS finally admits SageMaker HyperPod customers had no idea what software was running on their clusters. Now they'll auto-patch your $50K/month GPU farm—but only when idle. Bold of them to assume ML training jobs ever finish.

Amazon SageMaker Unified Studio now supports Terraform for provisioning AWS now lets you use Terraform to provision "SageMaker Unified Studio" because apparently saying "we finally support IaC for our rebrand of what used to be DataZone" doesn't sound enterprise enough.

Amazon EC2 X8i instances are now available in additional regions AWS launches X8i instances with "custom Intel Xeon 6 processors available only on AWS" which is a fancy way of saying Intel made chips and AWS slapped a confusing name on them. 14 sizes because apparently simplicity is for cowards.

Amazon Connect Customer now supports rule based redaction for agent screen recording AWS now lets you redact what Big Brother sees when surveilling your call center workers. Because nothing says "we trust our employees" like screen recording everything, then charging you extra to hide parts of it.

AWS Config now supports 8 new resource types AWS Config now tracks 8 more resource types you didn't know existed, with names like "S3Vectors::VectorBucket" because apparently regular S3 wasn't confusing enough. Auto-enabled if you're recording everything—surprise billing, anyone?

Amazon EC2 Dedicated Hosts now support AMD SEV-SNP AWS: "We'll let you run confidential workloads on servers we pinky-promise are just yours—for only 3x the price! Also we named it SEV-SNP because fuck you, that's why. Available in all regions where we felt like turning it on."

Amazon ECS now provides real-time deployment observability in the AWS Management Console AWS finally adds a deployment progress bar to ECS after a decade. Groundbreaking stuff. Next up: maybe they'll let you see why things broke without opening 47 browser tabs. Free feature presented as innovation.

ECS Service Connect now supports Zone-Aware routing AWS finally admits their architecture tax is real by auto-routing traffic to avoid their own AZ transfer fees. "Feature available at no additional cost" is corporate for "we've been overcharging you this whole time."

Amazon ECS now supports configurable deployment circuit breaker settings AWS just announced you can now configure when their container service admits defeat and gives up. Because nothing says "enterprise ready" like needing a PhD to tune your failure thresholds. At least the rollback is free?

Amazon CloudWatch supports creating alarms from log queries AWS just discovered you can set an alarm threshold without creating a metric filter first. Only took them 15 years to realize adding unnecessary steps was dumb. Can't wait to see the bill for "simplified" monitoring.

Amazon RDS for Db2 now supports self-managed Active Directory AWS finally lets you skip their Managed AD tax to connect RDS Db2 to your own Active Directory. Only took storing creds in Secrets Manager, encrypting with KMS, and presumably 47 new line items on your bill.

Amazon ECS Express Mode now supports custom task definitions ECS Express Mode now supports "custom task definitions" which is AWS-speak for "we finally let you configure the thing we said was simple." Nothing says "streamlined" like needing sidecars, ulimits, and FireLens just to run a container.

Amazon Bedrock AgentCore increases default runtime quota limits AWS raised the quota limits on a product called "Bedrock AgentCore" that nobody knew existed. Now you can run 5,000 concurrent sessions of AI agents you haven't built yet. The pricing? Still a mystery wrapped in an enigma.

AWS Network Firewall now supports container attribute-based inspection for Amazon EKS and Amazon ECS AWS finally lets you write firewall rules using container names instead of IPs. Only took them until 2025 to realize pods restart. "No additional cost" means you're already paying enough.

Amazon GuardDuty adds sensitive file modification threat detections GuardDuty now watches files get modified and charges you extra for the privilege of learning your instance was already compromised. Three new detection types with names only a compliance checkbox could love.

AWS Artifact now includes Assurance Assistant for compliance inquiries AWS built a chatbot to answer compliance questions so you don't have to read their own documentation. They named it "Assurance Assistant" because "ComplianceBot" was too honest. Free now, billable later once you're hooked.

Amazon OpenSearch Service optimized for log analytics AWS announces "optimized" OpenSearch engine for logs with "up to 4x better price-performance*" *on our internal benchmarks we'll never share, in 12 regions, terms subject to change when we realize people actually use it

AWS AppConfig launches managed experimentation tools for A/B testing AWS just reinvented A/B testing but made it "AI-driven" so they can charge you per experiment. Because why use free tools when you can pay Amazon to tell you which button color works better?

AWS Partner Central now supports AWS Marketplace listings for co-selling AWS just announced partners can now link Marketplace listings to co-sell opportunities instead of maintaining duplicate catalogs. Revolutionary! Only took them how many years to add a dropdown menu?

AWS announces AWS Interconnect - last mile new partner with AT&T in gated preview AWS launches "Interconnect - last mile" because apparently Direct Connect wasn't confusing enough. Now with mandatory AT&T partnership and a "gated preview" that requires begging for access. Innovation!

Amazon RDS announces Cross-Region Automated Backups in four additional AWS Regions AWS adds 4 more region pairs for RDS backup replication. Because nothing says "just a few clicks" like choosing between 12 different cross-region combinations and getting billed twice for storage.

Amazon EKS now supports Kubernetes version rollback AWS just discovered the "undo" button exists. EKS now lets you rollback K8s upgrades within 7 days—because nothing says "enterprise ready" like "oops, maybe test that first." Free feature! (The therapy for your production outage costs extra.)

Amazon Bedrock AgentCore now available in four additional AWS Regions AWS launches "AgentCore" in 4 more regions because apparently "Bedrock Agent Runtime" wasn't confusing enough. Now you can overpay for AI middleware in Milan AND Bangkok! Pricing page has more footnotes than features.

AWS Security Agent now available in Asia Pacific (Mumbai), Asia Pacific (Singapore), and South America (São Paulo) AWS renamed their security thing again, now it's "Continuum" because apparently "Security Agent" wasn't confusing enough already.

Amazon Managed Service for Prometheus achieves FedRAMP High and DoD IL-4/5 authorization in AWS GovCloud (US) AWS just got FedRAMP High for "Amazon Managed Service for Prometheus" because apparently calling it "Managed Prometheus" would've saved taxpayers money on acronyms alone.

Amazon CloudWatch pipelines now supports processing and enriching OpenTelemetry metrics "We'll let you transform metrics before we charge you for storing them" is certainly a take. Also love "no additional cost" followed immediately by "standard pricing applies."

Amazon EC2 C9g and C9gd compute optimized instances are now available AWS launches C9g instances with Graviton5, now with "mathematically proven" isolation—because apparently trust requires a PhD thesis. Still can't explain their pricing without calculus though.

AWS Clean Rooms now supports intermediate tables for SQL AWS Clean Rooms adds temp tables so you can pay to store intermediate query results you'll pay to query again later. It's like a database, but with extra steps and marketing jargon about "privacy boundaries." Revolutionary stuff from 1970.

Amazon GameLift Servers announces DDoS Protection client SDKs for C# and Unity AWS announces they'll now protect your game servers from DDoS attacks "at no additional cost"—which really means "we already priced it in, you've been paying for it, we just finally built it."

Amazon EC2 Auto Scaling now supports reservations then balanced Availability Zone distribution AWS invented "reservations-then-balanced" so you can use the capacity you already paid for. Revolutionary! Next up: a feature that lets you actually turn on instances you're being billed for.

AWS CloudFormation and CDK express mode speeds up infrastructure deployments by up to 4x AWS finally admits CloudFormation was waiting around doing nothing for 10 minutes per deploy. "Express mode" is just them stopping the theatrical pause. It's not faster—it's just less slow.

AWS CloudFormation and CDK accelerate development feedback loops with pre-deployment validation on all stack operations CloudFormation now validates templates BEFORE wasting your time and money on doomed deployments. Only took them 17 years to add "check if this will work first."

Amazon CloudWatch Logs enriches log events with AWS resource tags AWS finally lets you tag logs without rewriting your app—only took them 18 years. "Available at no additional cost" really means "we'll just charge you more for log ingestion, queries, and storage." Also lol at excluding 3 regions.

Amazon Neptune announces dual stack support with IPv6 Neptune now does IPv6! Only took them until 2025 to add a protocol from 1998. But hey, at least they invented TWO ways to charge you for it: "private dual-stack" and "public dual-stack." Because one networking mode would be too simple.

Amazon RDS Enhances IAM Database Authentication with Connection Rate Scaling AWS: "We fixed IAM auth so it doesn't fall over under load anymore. Also please reuse your tokens because we still can't handle the traffic. Available everywhere we forgot to make it work before."

AWS Security Hub CSPM launches AI Security Best Practices standard with 31 automated controls AWS just launched 31 ways to tell you your AI is misconfigured—after you've already deployed it. Free for 30 days, then they'll charge you to scold you about the insecure infrastructure they sold you.

Amazon ElastiCache T4g nodes now available in additional AWS Regions AWS finally brings T4g nodes to regions you forgot existed. "Baseline CPU with burst capability" is marketing speak for "we'll throttle you unless you pay more." ElastiCache pricing page has more footnotes than a PhD thesis.

AWS Parallel Computing Service supports in-place Slurm major version upgrades AWS finally figured out how to upgrade Slurm without breaking everything. Only took them creating an entirely new service with another acronym (PCS) to do what open-source Slurm already does. Innovation!

Claude Sonnet 5 now available on AWS AWS now sells you Anthropic's AI in two flavors because one way to access a thing wasn't confusing enough. "Sonnet pricing" means they won't tell you the actual price until the bill arrives.

capability-insights-aws AWS just open-sourced a tool to tell you which services work in which regions—because apparently their own docs are so bad they'd rather you host the answer yourself in your VPC. It's like if a restaurant made you bring your own menu, then charged you for the table.

AWS End User Messaging RCS now supports rich media and interactive messaging AWS renamed SMS "End User Messaging" and now wants credit for discovering RCS exists. New API: SendRcsMessage. Because SendMessage was too simple. Pricing: "flat rate for 24hrs" which definitely won't have hidden gotchas.

Amazon SageMaker AI now supports serverless model customization for Gemma 4 models AWS now lets you fine-tune Google's models on their platform using acronyms (SFT! DPO! RFT!) they promise you'll never need to understand. "Serverless" means you still pay, you just can't see the bill coming.

IAM Identity Center now enables programmatic AWS account access for customer managed applications AWS finally lets apps use the credentials you already have without making you log in twice. Revolutionary stuff here, folks. Only took them *checks notes* several decades to figure out SSO.

Amazon SageMaker AI cuts generative AI inference scale-out time by up to half with automatic container image caching AWS finally discovered Docker image caching exists. Charging you extra to not wait 10 minutes for what every other platform does by default. Revolutionary!

Announcing general availability of Amazon WorkSpaces for AI agents AWS now charges AI agents rent to use a virtual desktop because apparently teaching bots to click through your legacy ERP like a depressed intern is easier than fixing your actual infrastructure.

Amazon Time Sync Service adds support for Microsecond accurate time on 26 additional EC2 instance types in all commercial regions AWS now lets you know *exactly* when they're overcharging you, down to the microsecond. Just create a PTPG in your CPG for your PHC. Easy!

AWS Service Availability Updates AWS just sent 20+ services to the glue factory, including "Bedrock Agents Classic" (launched 2023, already legacy!). Also killing Q Business, Kendra, and half of SageMaker. Nothing says "AI leader" like sunsetting your AI products faster than you can name them.

Claude Opus 4.8 is now available in AWS GovCloud (US) AWS GovCloud now has Claude Opus 4.8, because nothing says "cutting-edge AI" like a region designed for compliance theater. It "reads codebases like an engineer"—so it'll also ignore documentation and break prod on Fridays?

OpenAI GPT-5.4 and NVIDIA Nemotron 3 Super 120B now available on Kiro in AWS GovCloud (US-West) Region AWS launches "Kiro" (because naming things is hard) with GPT-5.4 at 1.2x credit multiplier in GovCloud. Translation: it costs more and they won't tell you the actual price upfront. Shocking.

AWS WAF adds support for Amazon Bedrock AgentCore Gateway AWS WAF now protects "AgentCore Gateway" because apparently we needed another service name that sounds like a rejected sci-fi villain. Nothing says "production ready AI" like bolting on basic web security as an afterthought.