Bartek Chojnacki

Amazon Athena engine version 3 had missing authorization checks that could've let authenticated users peek at query metadata from other AWS accounts—think account IDs and SQL statements. AWS fixed it on September 1st, and they've confirmed no actual customer data got exposed. Query results, credentials, and S3 data stayed safe. No action needed on your end.

QnABot on AWS versions 7.0.0–7.4.5 have a nasty authorization bypass (CVE-2026-105811) in the optional Amazon Q Business Lambda hook sample that could let authenticated users read arbitrary S3 objects. Good news: you're only affected if you manually deployed this hook—it doesn't ship by default. If you did deploy it, update QnABot to 7.4.6+ and redeploy the hook sample; updating QnABot alone won't cut it.

AWS now offers Claude Haiku 5.5, Anthropic's speediest and cheapest model in the Claude 5.5 family, available through Amazon Bedrock and Claude Platform on AWS. It's built for real-time voice agents, live support, document processing, and running multiple subagents in parallel—with effort controls so you can dial cost versus smarts for each task.

bedrock-agentcore-starter-toolkit versions 0.1.4 through 0.3.13 have two nasty security issues: CVE-2026-105812 allows arbitrary code execution when importing malicious agents, while CVE-2026-106032 can trigger unwanted network requests or file access. If you're using this AWS Python package, update immediately—user action is required.

Forget API keys and shared secrets—they're basically dinosaurs in cloud environments. Learn how to implement short-lived cryptographic workload identities using SPIRE with AWS managed services to secure machine-to-machine communication at scale.

AWS Batch now automatically publishes job metrics to Amazon CloudWatch, giving you real-time insights into queue health, failure rates, and job durations across the entire job lifecycle. Track state transitions (submitted, running, succeeded, failed) and timing data directly from the AWS Batch or CloudWatch consoles—this feature is live in all AWS regions where Batch operates.

AWS just dropped a public preview of Amazon Bedrock Managed Agents powered by OpenAI, letting you build AI agents optimized for OpenAI models that run natively on AWS with full identity and governance controls. Perfect for developers who want enterprise-grade agent orchestration without leaving the AWS ecosystem.

AI is getting better at finding vulnerabilities faster than security teams can handle them manually. AWS Continuum tackles this by automating code security analysis, so you can keep pace with the growing threat surface without drowning your team in investigation work.

AWS IAM Identity Center now lets you lock down access to your Identity Store API and SCIM API by restricting requests to specific VPC endpoints, source VPCs, or IP ranges. This means your user provisioning workflows and external identity providers can only talk to your identity data from networks you explicitly allow—perfect for tightening security in multi-account setups.