Tag

#aws

Tagged “aws”

13 articles

Four hyperscaler agent sandboxes, four different isolation primitives

A New Stack survey argues AWS, Google Cloud, Microsoft Azure and Cloudflare have each shipped an agent-sandbox service, built on four different isolation foundations. Google Cloud's Cloud Run sandboxes public preview, announced at the WeAreDevelopers World Congress, is the news peg.

Jul 25, 2026 · Maya Okonkwo Security & supply chain

Auditors, OIDC and the trust policy most teams get wrong

A DevOps.com walkthrough by Artur Yolchyan lays out a SOC 2-shaped CI/CD pipeline on GitHub Actions and AWS: multi-account isolation, OIDC federation locked to one repo and branch, and the same container image retagged all the way to production. The interesting part is not the account topology; it is the one line in the trust policy that decides who can talk to your ECR.

Jul 24, 2026 · Tomás Vega Runners & infrastructure

GPUs keep falling off the PCIe bus, and standard node health does not notice

AWS engineers write up what running Kubernetes at Amazon EKS scale taught them about GPU node failure, and why the default node health model has nothing to say when the GPU just vanishes from the bus.

Jul 20, 2026 · Maya Okonkwo Incident response

AWS teaches its DevOps Agent to open the pull request too

An AWS DevOps Blog walk-through chains the AWS DevOps Agent with the Kiro CLI so incident findings become a pull request instead of a Slack thread. The pipeline still gates on human approval, but who wrote the diff has changed, and so has what your review is actually catching.

Jul 15, 2026 · Tomás Vega Runners & infrastructure

AWS puts gray zone failures into the EKS control loop

The New Stack details how AWS treats non-obvious availability zone degradation as its own category on EKS, with zonal shift moving traffic away from an impaired zone before the traditional alarms fire. For CI/CD teams, it reframes what a regional resilience test needs to cover.

Jul 12, 2026 · Maya Okonkwo Infrastructure as code

CloudFormation Express mode ships, returning success before resources are ready

AWS added an Express deployment mode to CloudFormation that reports stack operations complete as soon as resource configuration is applied, with resources continuing to become available in the background. Rollback is disabled by default.

Jul 4, 2026 · Maya Okonkwo Infrastructure as code

CloudFormation now validates every stack operation, not only change sets

AWS extended CloudFormation's pre-deployment validation to run automatically on CreateStack and UpdateStack, alongside CreateChangeSet. It hard-fails property errors and name conflicts before a stack starts rolling, with a softer warning tier that still lives only on change sets.

Jul 3, 2026 · Priya Nair Platform engineering

AWS reworks the EKS control plane and starts selling it in sized tiers

Amazon EKS engineers detail a set of architectural changes to how the service runs the Kubernetes control plane, including a purpose-built journal that replaces etcd's Raft consensus, and a new tier-priced product, EKS Provisioned Control Plane, that lets customers reserve API and scheduling capacity ahead of bursty workloads.

Jul 1, 2026 · Maya Okonkwo Incident response

AWS wires its DevOps Agent into PagerDuty incidents

AWS has paired its DevOps Agent with PagerDuty so that the moment an incident is created, the agent runs a root-cause investigation across AWS telemetry, deployment history and a short list of third-party observability tools, posting its findings back onto the incident record.

Jun 21, 2026 · Maya Okonkwo Incident response

AWS DevOps Agent reaches GA with the Datadog MCP Server in tow

AWS has moved its DevOps Agent from preview to general availability, shipping it alongside the Datadog MCP Server so the agent can correlate monitoring signals with AWS-deployed infrastructure during an incident. The badge change is the smaller story; the bigger one is what SRE teams now have to write down before the agent touches production.

Jun 20, 2026 · Maya Okonkwo Incident response

AWS teaches its DevOps Agent to flip feature flags during incidents

The AWS DevOps Blog details an integration where the AWS DevOps Agent's MCP server talks to LaunchDarkly so an agent can identify and toggle the flags relevant to a live outage instead of paging three teams to do it by hand. The integration removes a real coordination step, and forces every shop to write down which actions an agent is allowed to take unattended.

Jun 20, 2026 · Tomás Vega Incident response

AWS pushes its DevOps Agent's diagnostic reach down to the EKS node via a custom MCP server

AWS has published a pattern for extending its autonomous DevOps Agent into EKS node OS and runtime data through a custom Model Context Protocol server, addressing incidents that live outside the agent's native cluster-control-plane visibility. The post is explicit that the implementation is a proof of concept, not a production replacement for monitoring or log shipping.

Jun 17, 2026 · Maya Okonkwo Release management

AWS pushes its DevOps Agent across the release boundary, in preview

AWS used the AWS New York Summit to preview a release-management capability for its DevOps Agent, extending the agent from incident-diagnostics work into the merge-and-deploy phase of CI/CD pipelines.

Jun 17, 2026 · Maya Okonkwo