Anthropic's Claude Fable 5.1 is now live on AWS, bringing frontier-level AI smarts to developers tackling complex coding, scientific research, and enterprise projects. This beast handles marathon sessions spanning multiple applications, so you can let it own bigger chunks of your software projects without breaking a sweat.
source: [aws/aws-blog]
Amazon Managed Workflows for Apache Airflow (MWAA) Serverless is now live in AWS GovCloud (US-East) and AWS GovCloud (US-West), letting you ditch the infrastructure headaches. The service auto-scales compute on demand with a pay-as-you-go model—you only pay for actual workflow runtime, no idle costs.
source: [aws/whats-new]
Amazon awslabs.dynamodb-mcp-server versions 2.0.10 through 2.1.5 contain a code injection flaw in the CDK generator component. Attackers could execute arbitrary code by crafting malicious table, index, or attribute names in data model files. If you're using affected versions, update immediately—this requires your action.
source: [aws/security-bulletin]
Amazon awslabs postgres-mcp-server versions before 1.1.7 have a sneaky SQL validation bug (CVE-2026-85787) that lets attackers bypass read-only restrictions and modify data they shouldn't touch. The vulnerability lives in the SQL validation component and can be exploited through crafted SQL in user submissions. **Action required**: upgrade your postgres-mcp-server to version 1.1.7 or later immediately if you're running anything older.
source: [aws/security-bulletin]
Amazon ion-java versions below 1.12.1 have a memory-amplification denial of service vulnerability (CVE-2026-85786) triggered by highly compressed data expansion. The previous fix in 1.12.0 didn't fully patch the issue, so you'll need to upgrade immediately if you're using this Java library. This is a real threat—compressed payloads can balloon into massive memory consumption and crash your service.
source: [aws/security-bulletin]