AWS News Jun 22 - Jun 28

This week: Lambda MicroVMs bring VM-level isolation to serverless for running untrusted code, GuardDuty adds AI-powered investigations to help distinguish real threats from false positives, and CloudWatch Logs now accepts syslog directly from network devices without agents. Plus Outposts gets full lifecycle management in the console and new OpenAI models hit Bedrock in GovCloud.

Compute & Infrastructure

Lambda MicroVMs: VM-level isolation for user/AI code, 8hr state, dedicated HTTPS endpoint EC2 AMI Watermarks: Custom watermarks persist through copies, track provenance SageMaker G7e: 8x RTX PRO 6000 Blackwell GPUs, 96GB each for LLM/agentic AI SageMaker G6e: 8x L40S GPUs, 2.5x better than G5, 13B param LLMs EMR Serverless: Update app configs without stopping running jobs AI & Machine Learning

Bedrock GovCloud: OpenAI GPT, NVIDIA Nemotron models, FedRAMP High/IL4-5 Bedrock Guardrails: Auto-refine policies via iterative improvement workflows Bedrock AgentCore: Cross-account memory access via resource-based policies GuardDuty AI Investigations: 90-day analysis, MITRE ATT&CK mapping, confidence scoring Kiro GovCloud: FedRAMP High/IL4-5 for agentic AI development MSK AI Agent Skills: Expert guidance for troubleshooting, sizing, migrations Networking & Security

CloudWatch Logs: Direct syslog ingestion via VPC endpoint, auto-parsing Network Firewall: Safer default drop action, VisionHeight managed rules Route 53 Global Resolver: Share DNS views cross-account via RAM Cognito: Customer-managed KMS keys for user pool encryption Data & Analytics

S3 Backup: 8x faster cross-account/region copies via change tracking Neptune: CloudFormation support for global databases OpenSearch: AI-assisted migrations from Solr/Elasticsearch MSK Replicator: mTLS auth for external Kafka migrations Operations & Management

CloudWatch Container Insights: OTel-based metrics every 30s for EKS CloudWatch Dashboards: Tagging support, ABAC via IAM IAM Identity Center: Separate quotas for accounts (7K) and apps (7K) Outposts: Full lifecycle management via console/CLI/API Other Updates

HealthOmics: Nextflow profiles, ephemeral storage up to 3TB Connect: Agentic CX designer preview, Live Sync for guided experiences Batch: Instance priority control with new allocation strategies Swift IoT SDK: Native Apple/Linux support with TLS 1.3 AWS News Feed: Whats new at AWS

For help with your AWS Infrastructure check out flomotlik.me or email flo@flomotlik.me

For detailed show notes check out awsnewsweekly.com