Fix CVE-2026-83497: OpenSearch SQL Plugin Deserialization RCE via Cursor Pagination If you run OpenSearch — self-managed or Amazon OpenSearch Service — and have the SQL plugin enabled, a user with nothing more than basic read/search rights can get arbitrary code execution on your cluster right now. CVE-2026-83497, …

Copy an EBS Volume to Another AWS Account: Cross-Account Volume Clones Setup Guide Refreshing a dev or test account with real production data has always meant snapshot the volume, copy the snapshot cross-account, share it, wait, then restore a new volume from it — four separate operations before anyone can attach a …

AWS Lambda SnapStart for Container Images: Setup Guide and Cost Tradeoffs If you package a Lambda function as a container image and it runs Java, Python, or .NET, you have probably eaten cold starts of several seconds every time traffic scaled up. SnapStart was the fix for that on .zip functions since 2022, but until …

Find Source IP Addresses Connecting to AWS Transfer Family SFTP with CloudWatch Logs Insights If your AWS Transfer Family SFTP server has CloudWatch logging turned on, every connection, login attempt, and file operation is already sitting in a log group — you just need the right query to pull the source IPs out of it. …

Amazon EC2 Application Status Checks: Setup Guide and Auto Scaling Integration On August 12, 2026, AWS shipped a status check type EC2 has never had: one that actually asks your application whether it's healthy, instead of asking the VM. The existing system and instance status checks only tell you the hypervisor is …

Web Search on Amazon Bedrock: Grounding OpenAI Models Without Building a RAG Pipeline AWS shipped Web Search on Amazon Bedrock this month — a built-in tool that lets supported OpenAI models pull current information from the web mid-request and cite their sources, without you standing up a retrieval pipeline, a search …

CloudWatch Managed Prometheus Collectors: Setup Guide for EC2 and ECS If you've been running your own OpenTelemetry Collector just to get Prometheus metrics into CloudWatch, AWS shipped the fix in late July 2026: managed Prometheus collectors. You hand CloudWatch a scrape config and a VPC connection, and it provisions, …

AWS App Mesh Is Being Discontinued September 30, 2026: What to Migrate To (and What Breaks) On September 30, 2026, AWS discontinues AWS App Mesh entirely. This isn't a maintenance-mode freeze like Bedrock Agents Classic — after that date you lose console access and API access to your App Mesh resources completely. If …

Amazon Bedrock Agents Classic Enters Maintenance Mode: What to Do Before July 30, 2026 On July 30, 2026, AWS closes new-customer access to Amazon Bedrock Agents — the managed agent orchestration service that launched in November 2023. AWS has renamed it Bedrock Agents Classic and put it into maintenance mode. If you …

AWS CloudFormation Express Mode: 4x Faster Deploys and What It Actually Changes If you've ever sat through a create-stack that takes two minutes to provision an SQS queue with a dead-letter queue, or watched a delete-stack hang for 20+ minutes because a Lambda function still has an ENI attached, you already know …