Bartek Chojnacki

Amazon Bedrock has extended IAM principal cost allocation to the bedrock-mantle endpoint, letting you tag and track inference expenses by users, roles, teams, and projects across all AWS regions. You can now analyze these costs in AWS Cost Explorer or CUR 2.0, making it way easier to attribute generative AI spending to the right teams.

AWS just dropped their Summer 2026 SOC 1 report, covering 185 services with a full 12-month audit period (July 2025–June 2026). If you're managing cloud infrastructure, grab this report to verify AWS's compliance controls and use it as your baseline for security governance decisions.

AWS just dropped an independent assessment report for Landing Zone Accelerator on AWS Artifact, proving it meets Germany's strict C5:2020 cloud security standards. If you're deploying infrastructure in Europe and need to tick compliance boxes without reinventing the wheel, this assessment gives you a solid foundation to build on.

AWS Identity and Access Management rolled out account access manager, letting admins assign IAM roles directly to workforce users through IAM Identity Center—no extra cost, available across all AWS Commercial Regions. This bridges the gap between centralized federation and granular IAM role flexibility, giving you the best of both worlds without the usual trade-offs.

Amazon EC2 just dropped application status checks, letting you monitor whether your apps are actually healthy without building custom solutions. The feature watches for common issues like stopped web servers or broken Docker daemons, works across all AWS regions, and Auto Scaling can automatically replace instances when apps go sideways.

Amazon OpenSearch Serverless just bumped its collection limit from 1,500 to 10,000 per collection group, letting you pack way more multi-tenant workloads into a single shared compute pool. This means better cost efficiency and resource utilization across all AWS Regions where nextgen OpenSearch Serverless is available—perfect for scaling those tenant-per-collection architectures without spinning up extra infrastructure.

Amazon Cognito is now available as a core skill in the Agent Toolkit for AWS, letting AI coding agents set up, configure, and troubleshoot authentication workflows automatically. This means faster implementation of secure sign-in flows for users, AI agents, and microservices—with best-practice patterns baked in, including OAuth 2.0, passkeys, and threat protection.

AWS just dropped runtime instances in Amazon Bedrock AgentCore—managed EC2 infrastructure that keeps your AI agents running smoothly in production with multi-agent collab, GPU power, and sessions up to 14 days. Perfect for teams building serious agentic workflows that need reliability and scale.

Amazon ECS now supports fractional GPU scheduling on EC2 G6f instances, letting you run AI inference and graphics workloads on GPU partitions as small as one-eighth of an NVIDIA L4 GPU (3 GB memory) by setting GPU=0.125, 0.25, or 0.5 in your task definition. This capability is live across all AWS Regions where G6f instances are available, helping you cut infrastructure costs by right-sizing containers instead of provisioning full GPUs.