Bartek Chojnacki

AWS IoT Device SDK for Python versions 1.5.3–1.6.0 on Python 3.7+ have a critical certificate validation bug (CVE-2026-92943). An attacker on your network could intercept MQTT connections to AWS IoT Core, steal device telemetry, and inject fake messages. Both X.509 and WebSocket authentication paths are affected. Action required: upgrade to the patched version immediately if you're running vulnerable versions.

AWS Elastic Beanstalk just dropped Cluster Mode, letting you run your apps without sweating over compute infrastructure. Just throw your container image or source code at it, and Elastic Beanstalk handles the rest—provisioning, operating, the whole deal.

You can now customize NVIDIA Nemotron 3.5 Lightning directly in Amazon SageMaker AI using supervised fine-tuning, preference optimization, and reinforcement learning—all serverless, so you skip the infrastructure headaches and pay only for what you use. The feature rolls out across US East (N. Virginia), US West (Oregon), Asia Pacific (Tokyo), and Europe (Ireland), letting you adapt this efficient 3B-parameter model to your specific domains and workflows without breaking the bank.

aws-network-policy-agent versions before v1.4.0 have a nasty cross-namespace NetworkPolicy bypass. The vulnerability stems from how pod identifiers are built—concatenating pod names and namespaces with hyphens, which are legal characters in both. This creates ambiguous identifiers that can match pods across different namespaces, potentially letting attackers bypass network policies. If you're running Amazon EKS with Network Policy Agent < v1.4.0 or Amazon VPC CNI < 1.22.3, you need to update immediately.

AWS just revamped their onboarding experience with sensible defaults and $100 in Free Tier credits, so new developers can spin up projects without drowning in configuration. If your workload grows, you can unlock advanced features seamlessly—no migration headaches needed.

Amazon WorkSpaces now supports Graphics G7 bundles powered by NVIDIA RTX PRO 4500 Blackwell GPUs, delivering 2.1x better performance for graphics-heavy tasks like CAD, 3D rendering, and video editing. The new bundles are available in US East (N. Virginia), US East (Ohio), and US West (Oregon), with four configuration options ranging from single to dual GPU setups.

Learn how to architect a bulletproof CIAM system using Amazon Cognito's multi-Region replication—no more building complex custom solutions to keep your auth layer available across geographies. This guide shows cloud engineers the practical patterns for scaling authentication without the operational nightmare.

AWS Step Functions just got a major upgrade: new AWS service integrations now roll out automatically within weeks of release, starting with Lambda MicroVMs and Lambda Core. This means you can orchestrate cutting-edge AWS services in your workflows without waiting for manual updates—perfect for building agentic workflows with isolated execution environments and built-in retry logic.

Granting overly broad AWS permissions is tempting when deploying fast, but those "temporary" permissions rarely get tightened later. This article shows you how to bake IAM remediation directly into your CI/CD pipeline, catching and fixing permission creep automatically before it becomes a security headache.