by Ajinkya Patil on November 6, 2026 at 9:08 pm

Protocols like Android Debug Bridge (ADB) and Web Real-Time Communication (WebRTC), by default, use unencrypted channels for network communications and don’t support enterprise authentication mechanisms like JSON Web Tokens (JWTs). In a multi-tenant Kubernetes cluster—including Amazon Elastic Kubernetes Service (Amazon EKS)—pods can reach other tenants’ open ports by default unless you configure network policies to

by Brian Beach on November 6, 2026 at 6:20 pm

AWS re:Invent 2026 is almost here, and if you’re a developer, the Developer Tools (DVT) track is where you’ll want to spend your week. This year is all about agentic development, from multi-agent workflows to autonomous agents that keep working while you sleep. And CI/CD, Infrastructure as Code, and full-stack development are still well represented.

by Ronald Teijeira Fernandez on November 6, 2026 at 6:13 pm

Learn how ManoMano runs Maestro mobile UI tests on real Android devices using the AWS Device Farm custom test environment. This post covers packaging your YAML flows, configuring the test spec, installing the Maestro CLI, handling manufacturer-specific device restrictions, and automating the workflow in your CI/CD pipeline.

by Lee Hannigan on November 5, 2026 at 7:23 pm

Bulk put items is a fully managed feature that loads data from Amazon S3 directly into your existing Amazon DynamoDB tables, with no impact to your table’s read and write performance and at a lower price point than per-request writes. This post introduces the feature, walks through running an import end to end, and shares best practices for production.

by Moumita Saha on November 5, 2026 at 7:21 pm

AWS Identity and Access Management (IAM) is introducing account access manager, a flexible new way to manage workforce access to your Amazon Web Services (AWS) accounts. This combines the IAM role flexibility your teams already rely on, delivered through the centralized federation of AWS IAM Identity Center, with user-level visibility built-in. Account access manager streamlines

by Bruce Pinsky on November 5, 2026 at 4:48 pm

AWS Client VPN now offers device posture assessment: make device health a condition of tunnel access. Register a device trust provider (CrowdStrike, Jamf, or JumpCloud), write a Cedar policy, and Client VPN evaluates every connection at connect time and throughout the session. Use shadow mode and connection logs to test a policy before you enforce it.

by Bruce Pinsky on November 5, 2026 at 4:48 pm

Tunnel endpoints are a new VPC endpoint type, powered by AWS PrivateLink, that gives an application in one VPC private access to an entire range of IP addresses in another VPC. The network owner shares a CIDR block once, and every resource inside it becomes reachable, including resources created later.

by Channy Yun (윤석찬) on November 4, 2026 at 11:34 pm

You can now migrate existing Apache Hive datasets in Amazon S3 to fully managed Apache Iceberg tables in Amazon S3 Tables, with no pipelines to build or compute to provision, while production workloads keep running.

by Bhargav Talluri on November 3, 2026 at 11:09 pm

Amazon Route 53 now uses change-based throttling and has doubled its default API request rate from 5 to 10 requests per second. Learn how the new per-account model works, with separate request-rate and change-throughput limits, and best practices for automating DNS management at scale.

by Gonzalo Escarrá on November 3, 2026 at 7:38 pm

SaaS providers can use Bring Your Own ASN (BYOASN) on AWS Direct Connect public VIFs to assign a distinct ASN per Region, giving end customers a standard BGP AS_PATH signal to enforce data sovereignty without relying on fragile per-Region prefix lists.

by Priya Huddar on November 3, 2026 at 6:09 pm

Learn how to architect end-to-end mutual TLS (mTLS) authentication over QUIC using AWS Network Load Balancer passthrough mode. This post shows how to route QUIC traffic to quic-go server pods on Amazon EKS through the AWS Load Balancer Controller, with per-device certificate authentication for latency-sensitive fleet workloads such as autonomous drones.

by Sam Mukherjee on November 3, 2026 at 4:38 pm

Deletion protection on an Amazon RDS database is a single setting that anyone can switch off, and across hundreds of accounts there is no single place to see which databases still run without it. This post shows how to track Amazon RDS posture organization-wide with one Amazon CloudWatch dashboard, built and verified with Kiro.

by Sai Kumar Samala on November 3, 2026 at 4:37 pm

Amazon ECS now publishes high-resolution 20-second CPU and memory utilization metrics for target tracking, so service auto scaling detects and responds to load changes faster. This post shares AWS benchmarking results across AWS Fargate and ECS Managed Instances and shows how to turn the feature on.

by Michael Araba on November 2, 2026 at 6:06 pm

As the email administrator for your organization’s domain, you receive a Domain-based Message Authentication, Reporting, and Conformance (DMARC) aggregate report showing email passing DomainKeys Identified Mail (DKIM) verification as though it came from your domain, sent from IP addresses you don’t recognize to recipients you didn’t contact. To clear the issue, you rotate your DKIM

by Xueting Wu on November 2, 2026 at 4:57 pm

When MySQL commits a large transaction, writing it to the binary log can freeze every other commit on the server for minutes. This post introduces Binary Log Optimization for Large Transactions (BOLT), an AWS contribution to community MySQL that makes commit latency independent of transaction size, speeds crash recovery, and improves throughput.

by Daniel Abib on November 2, 2026 at 4:45 pm

The agentic launches that stayed with me last week had nothing to do with how capable a model is. They were about reach. AWS Step Functions, which already orchestrates over 220 AWS services, can now be handed to an agent as a tool, so workflows teams already trust became callable without a rewrite. In the

by Stéphane Israël on November 2, 2026 at 3:37 am

On Saturday, October 24, 2026 we conducted a successful exercise demonstrating that the AWS European Sovereign Cloud can operate without depending on any infrastructure outside the European Union (EU). This was the first public technical exercise demonstrating the independence of a sovereign cloud Region. The AWS European Sovereign Cloud is a new, independent cloud partition

by Marcelo Corazim on October 29, 2026 at 9:51 pm

Learn a repeatable, evidence-based method to cut petabyte-scale Amazon S3 storage costs. Use S3 Storage Lens to find untiered buckets with near-zero retrieval, prove the cold access pattern with S3 Storage Class Analysis, and move the data to S3 Glacier Instant Retrieval with a lifecycle rule while keeping millisecond access.

by Abhishek Kumar on October 29, 2026 at 4:06 pm

Design an AWS Cloud WAN network that keeps regional traffic in-region for data residency while running centralized security inspection across geographies. This deployable four-segment, multi-Region reference architecture combines geo-restricted segments with Network Function Groups, covering dual-hop versus single-hop trade-offs and the key NFG constraints.

by Lawton Pittenger on October 27, 2026 at 11:46 pm

Your workloads reach most destinations by domain name, but a firewall can only act on what it sees in the traffic. For HTTP and HTTPS, AWS Network Firewall domain rules match the name that the client puts in the request, and the client chooses that name. The connections for protocols such as SSH and SSH