Tag

#aws

Tagged “aws”

19 articles

EKS clusters lag on an AWS auth deprecation, per The New Stack

The New Stack reports that 81% of Amazon EKS clusters still run an AWS EKS authentication method the vendor has deprecated. For platform teams whose deploy pipelines target EKS, the number reads as a migration flag against the auth path baked into kubeconfigs, CI service accounts and IaC modules.

Aug 20, 2026 · Maya Okonkwo Incident response

AWS wires DevOps Agent into CodePipeline failures via CloudWatch and Lambda

AWS published an integration pattern that routes CodePipeline failures to its DevOps Agent through a CloudWatch alarm and a small Lambda webhook, aimed at trimming the manual sweep across services, logs and pipeline stages when a GitHub-hosted deploy breaks.

Aug 18, 2026 · Maya Okonkwo Runners & infrastructure

Multi-gigabyte image pulls are now the EKS cold-start problem

The New Stack walks through why container image pull time has become a first-class bottleneck on Amazon EKS, driven by machine-learning workloads that ship in much larger images than a typical application. Pull latency is now something CI/CD and platform teams have to design for, not wait out.

Aug 12, 2026 · Maya Okonkwo AI in CI/CD

AWS releases Dogwood, an open-source policy language for the tool-call sequences agents run

AWS has published Dogwood, an open-source policy language and reference interpreter that governs sequences of AI-agent tool calls. The pitch is catching actions that are individually valid but wrong in context, and for pipelines that hand agents commit or deploy rights that is a new place to hang guardrails.

Aug 11, 2026 · Maya Okonkwo Incident response

AWS DevOps Agent talks to ServiceNow over MCP, reads incidents and writes findings back

AWS published a walkthrough showing its DevOps Agent connecting to ServiceNow as an MCP client and using the ServiceNow MCP Server to pull incident, CMDB and change context, then writing correlated analysis back into the incident record. The same wire lets the agent open change requests through ServiceNow's Action Fabric under OAuth 2.0.

Aug 7, 2026 · Maya Okonkwo Infrastructure as code

AWS's new IaC MCP server lets your AI assistant lint CloudFormation and correlate CloudTrail

AWS has published a walkthrough of an Infrastructure as Code MCP Server that exposes four tools to any MCP-compatible AI assistant: CloudFormation docs search, cfn-lint validation, cfn-guard compliance checks, and CloudTrail-correlated troubleshooting. Kiro is the assistant AWS uses in the demo.

Aug 7, 2026 · Priya Nair Platform engineering

Four hyperscaler agent sandboxes, four different isolation primitives

A New Stack survey argues AWS, Google Cloud, Microsoft Azure and Cloudflare have each shipped an agent-sandbox service, built on four different isolation foundations. Google Cloud's Cloud Run sandboxes public preview, announced at the WeAreDevelopers World Congress, is the news peg.

Jul 25, 2026 · Maya Okonkwo Security & supply chain

Auditors, OIDC and the trust policy most teams get wrong

A DevOps.com walkthrough by Artur Yolchyan lays out a SOC 2-shaped CI/CD pipeline on GitHub Actions and AWS: multi-account isolation, OIDC federation locked to one repo and branch, and the same container image retagged all the way to production. The interesting part is not the account topology; it is the one line in the trust policy that decides who can talk to your ECR.

Jul 24, 2026 · Tomás Vega Runners & infrastructure

GPUs keep falling off the PCIe bus, and standard node health does not notice

AWS engineers write up what running Kubernetes at Amazon EKS scale taught them about GPU node failure, and why the default node health model has nothing to say when the GPU just vanishes from the bus.

Jul 20, 2026 · Maya Okonkwo Incident response

AWS teaches its DevOps Agent to open the pull request too

An AWS DevOps Blog walk-through chains the AWS DevOps Agent with the Kiro CLI so incident findings become a pull request instead of a Slack thread. The pipeline still gates on human approval, but who wrote the diff has changed, and so has what your review is actually catching.

Jul 15, 2026 · Tomás Vega Runners & infrastructure

AWS puts gray zone failures into the EKS control loop

The New Stack details how AWS treats non-obvious availability zone degradation as its own category on EKS, with zonal shift moving traffic away from an impaired zone before the traditional alarms fire. For CI/CD teams, it reframes what a regional resilience test needs to cover.

Jul 12, 2026 · Maya Okonkwo Infrastructure as code

CloudFormation Express mode ships, returning success before resources are ready

AWS added an Express deployment mode to CloudFormation that reports stack operations complete as soon as resource configuration is applied, with resources continuing to become available in the background. Rollback is disabled by default.

Jul 4, 2026 · Maya Okonkwo Infrastructure as code

CloudFormation now validates every stack operation, not only change sets

AWS extended CloudFormation's pre-deployment validation to run automatically on CreateStack and UpdateStack, alongside CreateChangeSet. It hard-fails property errors and name conflicts before a stack starts rolling, with a softer warning tier that still lives only on change sets.

Jul 3, 2026 · Priya Nair Platform engineering

AWS reworks the EKS control plane and starts selling it in sized tiers

Amazon EKS engineers detail a set of architectural changes to how the service runs the Kubernetes control plane, including a purpose-built journal that replaces etcd's Raft consensus, and a new tier-priced product, EKS Provisioned Control Plane, that lets customers reserve API and scheduling capacity ahead of bursty workloads.

Jul 1, 2026 · Maya Okonkwo Incident response

AWS wires its DevOps Agent into PagerDuty incidents

AWS has paired its DevOps Agent with PagerDuty so that the moment an incident is created, the agent runs a root-cause investigation across AWS telemetry, deployment history and a short list of third-party observability tools, posting its findings back onto the incident record.

Jun 21, 2026 · Maya Okonkwo Incident response

AWS DevOps Agent reaches GA with the Datadog MCP Server in tow

AWS has moved its DevOps Agent from preview to general availability, shipping it alongside the Datadog MCP Server so the agent can correlate monitoring signals with AWS-deployed infrastructure during an incident. The badge change is the smaller story; the bigger one is what SRE teams now have to write down before the agent touches production.

Jun 20, 2026 · Maya Okonkwo Incident response

AWS teaches its DevOps Agent to flip feature flags during incidents

The AWS DevOps Blog details an integration where the AWS DevOps Agent's MCP server talks to LaunchDarkly so an agent can identify and toggle the flags relevant to a live outage instead of paging three teams to do it by hand. The integration removes a real coordination step, and forces every shop to write down which actions an agent is allowed to take unattended.

Jun 20, 2026 · Tomás Vega Incident response

AWS pushes its DevOps Agent's diagnostic reach down to the EKS node via a custom MCP server

AWS has published a pattern for extending its autonomous DevOps Agent into EKS node OS and runtime data through a custom Model Context Protocol server, addressing incidents that live outside the agent's native cluster-control-plane visibility. The post is explicit that the implementation is a proof of concept, not a production replacement for monitoring or log shipping.

Jun 17, 2026 · Maya Okonkwo Release management

AWS pushes its DevOps Agent across the release boundary, in preview

AWS used the AWS New York Summit to preview a release-management capability for its DevOps Agent, extending the agent from incident-diagnostics work into the merge-and-deploy phase of CI/CD pipelines.

Jun 17, 2026 · Maya Okonkwo