# AWS Identity and Access Management (IAM)

Published articles for AWS Identity and Access Management (IAM).

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Architecting a secure landing zone in the AWS European Sovereign Cloud

DevFeed: [Architecting a secure landing zone in the AWS European Sovereign Cloud](<https://devfeed.tech/articles/architecting-a-secure-landing-zone-in-the-aws-european-sovereign-cloud-31478.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/architecting-a-secure-landing-zone-in-the-aws-european-sovereign-cloud/>)

Author: Pablo Pagani

Published: 2026-09-16T21:20:48Z

Content type: article

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [Infrastructure as code](<https://devfeed.tech/topics/infrastructure-as-code.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [SIEM, Security](<https://devfeed.tech/topics/siem-security.md>), [Incident response](<https://devfeed.tech/topics/incident-response.md>)

Tags: [advanced-300](<https://devfeed.tech/tags/advanced-300.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [eu](<https://devfeed.tech/tags/eu.md>), [europe](<https://devfeed.tech/tags/europe.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [infrastructure-as-code-iac](<https://devfeed.tech/tags/infrastructure-as-code-iac.md>), [partition](<https://devfeed.tech/tags/partition.md>), [security](<https://devfeed.tech/tags/security.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>)

### AI overview

This article explains how to architect a secure, scalable landing zone in the AWS European Sovereign Cloud. It describes the aws-eusc partition boundary and covers governance, identity, logging, data protection, network design, CI/CD, artifact distribution, and incident response.

### Source excerpt

The AWS European Sovereign Cloud is a new, independent cloud for Europe, physically and logically separate from existing AWS Regions and operated within the European Union (EU). It provides the same services, features, and APIs as AWS commercial Regions, but runs as a distinct AWS partition (aws-eusc), with its own control plane, AWS Identity and [...]

## Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline

DevFeed: [Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline](<https://devfeed.tech/articles/operationalizing-least-privilege-automate-iam-remediation-through-your-ci-cd-pipeline-26908.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/operationalizing-least-privilege-automate-iam-remediation-through-your-ci-cd-pipeline/>)

Author: Luis Pastor

Published: 2026-09-15T15:53:51Z

Content type: tutorial

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [AWS Identity and Access Management (IAM)](<https://devfeed.tech/topics/aws-identity-and-access-management-iam.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [Infrastructure as code](<https://devfeed.tech/topics/infrastructure-as-code.md>), [AWS CloudFormation](<https://devfeed.tech/topics/aws-cloudformation.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>)

Tags: [aws](<https://devfeed.tech/tags/aws.md>), [aws-cloudformation](<https://devfeed.tech/tags/aws-cloudformation.md>), [aws-cloudtrail](<https://devfeed.tech/tags/aws-cloudtrail.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [aws-organizations](<https://devfeed.tech/tags/aws-organizations.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [expert-400](<https://devfeed.tech/tags/expert-400.md>), [iam](<https://devfeed.tech/tags/iam.md>), [infrastructure-as-code-iac](<https://devfeed.tech/tags/infrastructure-as-code-iac.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [pull-request](<https://devfeed.tech/tags/pull-request.md>), [security](<https://devfeed.tech/tags/security.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>)

### AI overview

This article describes an automated workflow for operationalizing least privilege in AWS. It explains how AWS IAM Access Analyzer identifies unused permissions and how remediation can be routed through different paths for infrastructure-as-code-managed, manually created, and unused IAM principals.

### Source excerpt

The principle of least privilege is straightforward to articulate but challenging to maintain at scale. When teams first deploy applications to AWS, they often grant broader permissions than strictly necessary; it's faster to get things working, and the plan is always to tighten permissions later. But later rarely comes. Permissions accumulate, AWS Identity and Access [...]

## Monitoring production agent lifecycle with AWS DevOps Agent and AgentCore Evaluations

DevFeed: [Monitoring production agent lifecycle with AWS DevOps Agent and AgentCore Evaluations](<https://devfeed.tech/articles/monitoring-production-agent-lifecycle-with-aws-devops-agent-and-agentcore-evaluations-4737.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/machine-learning/monitoring-production-agent-lifecycle-with-aws-devops-agent-and-agentcore-evaluations/>)

Author: Meghana Ashok

Published: 2026-09-11T18:26:38Z

Content type: article

Language: en

Sources: [Artificial Intelligence](<https://devfeed.tech/sources/artificial-intelligence.md>)

Topics: [ai observability](<https://devfeed.tech/topics/ai-observability.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Orchestration](<https://devfeed.tech/topics/orchestration.md>), [telemetry](<https://devfeed.tech/topics/telemetry.md>)

Tags: [advanced-300](<https://devfeed.tech/tags/advanced-300.md>), [agent](<https://devfeed.tech/tags/agent.md>), [agents](<https://devfeed.tech/tags/agents.md>), [amazon-bedrock](<https://devfeed.tech/tags/amazon-bedrock.md>), [amazon-bedrock-agentcore](<https://devfeed.tech/tags/amazon-bedrock-agentcore.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [devops](<https://devfeed.tech/tags/devops.md>), [incident](<https://devfeed.tech/tags/incident.md>), [infrastructure-monitoring](<https://devfeed.tech/tags/infrastructure-monitoring.md>), [logs](<https://devfeed.tech/tags/logs.md>), [metrics](<https://devfeed.tech/tags/metrics.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [orchestration](<https://devfeed.tech/tags/orchestration.md>), [production](<https://devfeed.tech/tags/production.md>), [tracing](<https://devfeed.tech/tags/tracing.md>)

### AI overview

The article describes monitoring production multi-agent systems with Amazon Bedrock AgentCore Evaluations for continuous quality assessment and AWS DevOps Agent for autonomous infrastructure incident investigation.

### Source excerpt

Multi-agent systems fail in ways traditional monitoring misses. This post presents a dual-layer approach to monitoring production agents: Amazon Bedrock AgentCore Evaluations for continuous quality scoring and AWS DevOps Agent for autonomous infrastructure investigation, shown on a four-agent airline reservation system.

## Amazon SageMaker Feature Store introduces UpdateRecord for feature-level writes

DevFeed: [Amazon SageMaker Feature Store introduces UpdateRecord for feature-level writes](<https://devfeed.tech/articles/amazon-sagemaker-feature-store-introduces-updaterecord-for-feature-level-writes-4726.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/machine-learning/amazon-sagemaker-feature-store-introduces-updaterecord-for-feature-level-writes/>)

Author: Mona Mona

Published: 2026-09-08T18:29:15Z

Content type: release

Language: en

Sources: [Artificial Intelligence](<https://devfeed.tech/sources/artificial-intelligence.md>)

Topics: [AI, ML & Data Engineering](<https://devfeed.tech/topics/ai-ml-data-engineering.md>), [Training AI Models](<https://devfeed.tech/topics/training-ai-models.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>)

Tags: [amazon-dynamodb](<https://devfeed.tech/tags/amazon-dynamodb.md>), [amazon-elasticache](<https://devfeed.tech/tags/amazon-elasticache.md>), [amazon-machine-learning](<https://devfeed.tech/tags/amazon-machine-learning.md>), [amazon-sagemaker](<https://devfeed.tech/tags/amazon-sagemaker.md>), [amazon-sagemaker-ai](<https://devfeed.tech/tags/amazon-sagemaker-ai.md>), [announcements](<https://devfeed.tech/tags/announcements.md>), [api](<https://devfeed.tech/tags/api.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [intermediate-200](<https://devfeed.tech/tags/intermediate-200.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>)

### AI overview

Amazon SageMaker Feature Store adds the UpdateRecord API for atomic feature-level updates without reading or rewriting an entire record.

### Source excerpt

Amazon SageMaker Feature Store now supports feature-level writes. With the new UpdateRecord API, you can update one or more feature values in a single call without reading or rewriting the entire record. It is available for both the Standard (Amazon DynamoDB) and In-Memory (Amazon ElastiCache) online store tiers.

## Govern models with MLflow and Amazon SageMaker AI Model Registry sync: Part 2

DevFeed: [Govern models with MLflow and Amazon SageMaker AI Model Registry sync: Part 2](<https://devfeed.tech/articles/govern-models-with-mlflow-and-amazon-sagemaker-ai-model-registry-sync-part-2-4732.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/machine-learning/govern-models-with-mlflow-and-amazon-sagemaker-ai-model-registry-sync-part-2/>)

Author: Melanie Li

Published: 2026-09-08T17:03:50Z

Content type: article

Language: en

Sources: [Artificial Intelligence](<https://devfeed.tech/sources/artificial-intelligence.md>)

Topics: [Amazon SageMaker AI](<https://devfeed.tech/topics/amazon-sagemaker-ai.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [amazon-sagemaker-ai](<https://devfeed.tech/tags/amazon-sagemaker-ai.md>), [announcements](<https://devfeed.tech/tags/announcements.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [intermediate-200](<https://devfeed.tech/tags/intermediate-200.md>), [model](<https://devfeed.tech/tags/model.md>), [sync](<https://devfeed.tech/tags/sync.md>)

### AI overview

This article describes cross-account model-governance patterns for managed MLflow and Amazon SageMaker AI Model Registry sync. It covers hub-and-spoke and hybrid topologies, IAM-based roles, and CI/CD deployment of approved models.

### Source excerpt

Governing models across accounts is the next step after automatic model registration. This post extends managed MLflow and Amazon SageMaker AI Model Registry sync to two cross-account governance topologies: a hub-and-spoke pattern that centralizes governance with AWS RAM, and a hybrid pattern that keeps development accounts isolated.

## Incident response guide for AWS CloudTrail investigations - Part 2

DevFeed: [Incident response guide for AWS CloudTrail investigations - Part 2](<https://devfeed.tech/articles/incident-response-guide-for-aws-cloudtrail-investigations-part-2-4686.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/incident-response-guide-for-aws-cloudtrail-investigations-part-2/>)

Author: Oscar Diaz

Published: 2026-09-03T21:15:53Z

Content type: article

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [Incident response](<https://devfeed.tech/topics/incident-response.md>), [AWS CloudTrail](<https://devfeed.tech/topics/aws-cloudtrail.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [advanced-300](<https://devfeed.tech/tags/advanced-300.md>), [amazon-bedrock](<https://devfeed.tech/tags/amazon-bedrock.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-cloudtrail](<https://devfeed.tech/tags/aws-cloudtrail.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>)

### AI overview

An incident-response guide for investigating AWS CloudTrail events through a multi-stage attack scenario. It traces an SSRF vulnerability on an EC2-hosted web application to IMDSv1 credential harvesting, IAM activity, and unauthorized Amazon Bedrock access across Regions.

### Source excerpt

In Part 1 of this guide, we examined two common incident scenarios: cross-account Amazon Simple Storage Service (Amazon S3) data deletion with ransomware implications, and cryptocurrency mining deployed through AWS CloudFormation using exposed AWS Management Console credentials. We also introduced key incident response terminology and investigative frameworks for analyzing AWS CloudTrail events. In this second [...]

## Extend Amazon Bedrock Guardrails to Tool Interactions Using the Strands Agents SDK

DevFeed: [Extend Amazon Bedrock Guardrails to Tool Interactions Using the Strands Agents SDK](<https://devfeed.tech/articles/extend-amazon-bedrock-guardrails-to-tool-interactions-using-the-strands-agents-sdk-4679.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/extend-amazon-bedrock-guardrails-to-tool-interactions-using-the-strands-agents-sdk/>)

Author: Stephan Traub

Published: 2026-08-27T16:20:05Z

Content type: tutorial

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [AI Bots](<https://devfeed.tech/topics/ai-bots.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>)

Tags: [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [amazon-bedrock](<https://devfeed.tech/tags/amazon-bedrock.md>), [amazon-bedrock-guardrails](<https://devfeed.tech/tags/amazon-bedrock-guardrails.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [expert-400](<https://devfeed.tech/tags/expert-400.md>), [generative-ai](<https://devfeed.tech/tags/generative-ai.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>), [strands-agents](<https://devfeed.tech/tags/strands-agents.md>), [tools](<https://devfeed.tech/tags/tools.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

A tutorial on extending Amazon Bedrock Guardrails beyond model prompts and responses to validate AI-agent tool interactions with Strands Agents SDK lifecycle hooks.

### Source excerpt

If you're running AI agents in production, Amazon Bedrock Guardrails protects the model boundary. But your agents also invoke tools, fetch external data, and communicate with other systems. That data flows outside the model boundary, where model-level guardrails can't reach. You can extend guardrail coverage to those interactions using three validation checkpoints built with the [...]

## Implement custom authentication for tools integration using request Lambda interceptor in AgentCore Gateway

DevFeed: [Implement custom authentication for tools integration using request Lambda interceptor in AgentCore Gateway](<https://devfeed.tech/articles/implement-custom-authentication-for-tools-integration-using-request-lambda-interceptor-in-agentcore-gateway-4684.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/implement-custom-authentication-for-tools-integration-using-request-lambda-interceptor-in-agentcore-gateway/>)

Author: Nishant Mainro

Published: 2026-08-18T20:46:26Z

Content type: tutorial

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [Amazon Bedrock AgentCore](<https://devfeed.tech/topics/amazon-bedrock-agentcore.md>), [Amazon Bedrock](<https://devfeed.tech/topics/amazon-bedrock.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Security](<https://devfeed.tech/topics/security.md>), [IAM](<https://devfeed.tech/topics/iam.md>), [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [OAuth 2.0](<https://devfeed.tech/topics/oauth2.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>)

Tags: [advanced-300](<https://devfeed.tech/tags/advanced-300.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [amazon-bedrock](<https://devfeed.tech/tags/amazon-bedrock.md>), [amazon-bedrock-agentcore](<https://devfeed.tech/tags/amazon-bedrock-agentcore.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [aws-lambda](<https://devfeed.tech/tags/aws-lambda.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>)

### AI overview

This tutorial explains how to use a request Lambda interceptor in Amazon Bedrock AgentCore Gateway to support legacy Basic Authentication for downstream tool APIs. The interceptor retrieves service credentials from AWS Secrets Manager and constructs the authentication header while keeping credentials isolated from the AI agent. The article also describes the inbound MCP request flow and cautions that Basic Auth should be treated as an interim measure, with modernization toward OAuth 2.0, SAML, OpenID Connect, or IAM recommended.

### Source excerpt

When deploying AI agents with Amazon Bedrock AgentCore, organizations benefit from built-in modern support for OAuth 2.0, AWS Identity and Access Management (IAM), and API key authentication through Amazon Bedrock AgentCore Gateway. However, some enterprise environments still use legacy authentication mechanisms such as HTTP Basic Authentication (Basic Auth) (RFC 7617). The extensible architecture of AgentCore [...]

## Updates to your AWS Sign-In experience

DevFeed: [Updates to your AWS Sign-In experience](<https://devfeed.tech/articles/updates-to-your-aws-sign-in-experience-4692.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/updates-to-your-aws-sign-in-experience/>)

Author: Vaibhav Chowla

Published: 2026-08-17T17:22:33Z

Content type: release

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [Amazon Web Services (AWS)](<https://devfeed.tech/topics/amazon-web-services-aws.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [identity and access management](<https://devfeed.tech/topics/identity-and-access-management.md>), [AWS IAM Identity Center](<https://devfeed.tech/topics/aws-iam-identity-center.md>), [browser](<https://devfeed.tech/topics/browser.md>)

Tags: [amazon-web-services-aws](<https://devfeed.tech/tags/amazon-web-services-aws.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [aws-iam-identity-center](<https://devfeed.tech/tags/aws-iam-identity-center.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [browser](<https://devfeed.tech/tags/browser.md>), [identity-and-access-management](<https://devfeed.tech/tags/identity-and-access-management.md>), [intermediate-200](<https://devfeed.tech/tags/intermediate-200.md>), [scripted](<https://devfeed.tech/tags/scripted.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>), [updates](<https://devfeed.tech/tags/updates.md>)

### AI overview

AWS is gradually introducing a redesigned sign-in and sign-up experience to a limited number of customers. The changes add new account access options, unify the initial email entry point, and refresh the session selection page while existing customers continue using their current credentials and sign-in methods.

### Source excerpt

Amazon Web Services (AWS) is gradually introducing updates to the AWS Sign-In and sign-up experience to a limited number of customers. We're sharing these changes so you will know what to expect as we gradually make the updated experience available to more customers. These updates include new options for creating and accessing AWS accounts. To [...]

## AWS Weekly Roundup: EC2 application status checks, IAM role manager, OpenAI Daybreak on Bedrock, and more (August 17, 2026)

DevFeed: [AWS Weekly Roundup: EC2 application status checks, IAM role manager, OpenAI Daybreak on Bedrock, and more (August 17, 2026)](<https://devfeed.tech/articles/aws-weekly-roundup-ec2-application-status-checks-iam-role-manager-openai-daybreak-on-bedrock-and-more-august-17-2026-4613.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/aws/aws-weekly-roundup-ec2-application-status-checks-iam-role-manager-openai-daybreak-on-bedrock-and-more-august-17-2026/>)

Author: Channy Yun (윤석찬)

Published: 2026-08-17T16:02:36Z

Content type: news

Language: en

Sources: [AWS News Blog](<https://devfeed.tech/sources/aws-news-blog.md>)

Topics: [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Amazon EC2](<https://devfeed.tech/topics/amazon-ec2.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [Amazon OpenSearch Service](<https://devfeed.tech/topics/amazon-opensearch-service.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Amazon Bedrock](<https://devfeed.tech/topics/amazon-bedrock.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [OpenAI](<https://devfeed.tech/topics/openai.md>), [MCP](<https://devfeed.tech/topics/mcp.md>)

Tags: [amazon-bedrock](<https://devfeed.tech/tags/amazon-bedrock.md>), [amazon-ec2](<https://devfeed.tech/tags/amazon-ec2.md>), [amazon-elasticache](<https://devfeed.tech/tags/amazon-elasticache.md>), [amazon-opensearch-service](<https://devfeed.tech/tags/amazon-opensearch-service.md>), [amazon-sagemaker-jumpstart](<https://devfeed.tech/tags/amazon-sagemaker-jumpstart.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-certificate-manager](<https://devfeed.tech/tags/aws-certificate-manager.md>), [aws-client-vpn](<https://devfeed.tech/tags/aws-client-vpn.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [bedrock](<https://devfeed.tech/tags/bedrock.md>), [iam](<https://devfeed.tech/tags/iam.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [news](<https://devfeed.tech/tags/news.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [openai](<https://devfeed.tech/tags/openai.md>), [oracle-database-aws](<https://devfeed.tech/tags/oracle-database-aws.md>), [week-in-review](<https://devfeed.tech/tags/week-in-review.md>)

### AI overview

AWS Weekly Roundup highlights EC2 application status checks, automatic IAM role setup, OpenAI Daybreak on Amazon Bedrock, and updates involving OpenSearch, Valkey, and open source community events.

### Source excerpt

Last week, AWS contributors joined the OpenSearch and Valkey communities at Open Source Summit Korea 2026 and MCP DevSummit Seoul 2026 to meet open source developers and contributors. At the four-day event, community leaders and users of these Linux Foundation open source projects gathered to share knowledge, collaborate on solutions, and push the projects forward. [...]

## How AWS IAM role manager rethinks the starting point for IAM roles

DevFeed: [How AWS IAM role manager rethinks the starting point for IAM roles](<https://devfeed.tech/articles/how-aws-iam-role-manager-rethinks-the-starting-point-for-iam-roles-4682.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/how-aws-iam-role-manager-rethinks-the-starting-point-for-iam-roles/>)

Author: Zach Jiang

Published: 2026-08-12T22:16:55Z

Content type: article

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>)

Tags: [aws](<https://devfeed.tech/tags/aws.md>), [aws-iam](<https://devfeed.tech/tags/aws-iam.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [aws-lambda](<https://devfeed.tech/tags/aws-lambda.md>), [iam](<https://devfeed.tech/tags/iam.md>), [intermediate-200](<https://devfeed.tech/tags/intermediate-200.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>)

### AI overview

AWS IAM role manager automates creation and attachment of IAM roles for supported AWS service-console workflows, letting developers begin with default roles and refine permissions later.

### Source excerpt

When you build a new application or capability on Amazon Web Services (AWS), you want to focus on what you're building. Getting a service running almost always begins with AWS Identity and Access Management (IAM). Many AWS services that act on your behalf need an IAM role, an identity the service assumes to access your [...]

## Connect OpenSearch to private ML endpoints

DevFeed: [Connect OpenSearch to private ML endpoints](<https://devfeed.tech/articles/connect-opensearch-to-private-ml-endpoints-12786.md>)

Original publisher: [Read original article](<https://opensearch.org/blog/connect-opensearch-to-private-ml-endpoints/>)

Author: Nathalie Jonathan

Published: 2026-07-28T15:00:41Z

Content type: tutorial

Language: en

Sources: [OpenSearch](<https://devfeed.tech/sources/opensearch.md>)

Topics: [Amazon OpenSearch Service](<https://devfeed.tech/topics/amazon-opensearch-service.md>), [network security](<https://devfeed.tech/topics/network-security.md>), [VPC](<https://devfeed.tech/topics/vpc.md>), [inference-endpoints](<https://devfeed.tech/topics/inference-endpoints.md>), [Security](<https://devfeed.tech/topics/security.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [Latency](<https://devfeed.tech/topics/latency.md>), [Self-hosted](<https://devfeed.tech/topics/self-hosted.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>)

Tags: [aws](<https://devfeed.tech/tags/aws.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [blog](<https://devfeed.tech/tags/blog.md>), [firewalls](<https://devfeed.tech/tags/firewalls.md>), [inference](<https://devfeed.tech/tags/inference.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [opensearch](<https://devfeed.tech/tags/opensearch.md>), [production](<https://devfeed.tech/tags/production.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>), [vpc](<https://devfeed.tech/tags/vpc.md>)

### AI overview

This guide explains how to connect OpenSearch and Amazon OpenSearch Service to machine learning models hosted on private infrastructure. It covers VPC-hosted endpoints, private SageMaker endpoints, internal API gateways, and self-hosted inference servers, with configuration steps for connectors, model registration, deployment, testing, and VPC egress.

### Source excerpt

Connect OpenSearch to ML models hosted on private infrastructure. Configure ML Commons connectors for VPC-hosted endpoints, private SageMaker models, and internal inference servers without exposing services to the public internet The post Connect OpenSearch to private ML endpoints appeared first on OpenSearch.

## How AWS Powers Gradle's Open Source Build Tool

DevFeed: [How AWS Powers Gradle's Open Source Build Tool](<https://devfeed.tech/articles/how-aws-powers-gradle-s-open-source-build-tool-24641.md>)

Original publisher: [Read original article](<https://blog.gradle.org/how-aws-powers-gradle-open-source>)

Author: Bo Zhang

Published: 2026-06-09T04:00:00Z

Content type: article

Language: en

Sources: [The Gradle Blog](<https://devfeed.tech/sources/the-gradle-blog.md>)

Topics: [Gradle](<https://devfeed.tech/topics/gradle.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [ci](<https://devfeed.tech/topics/ci.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Security](<https://devfeed.tech/topics/security.md>), [AWS IAM](<https://devfeed.tech/topics/aws-iam.md>), [Amazon EC2](<https://devfeed.tech/topics/amazon-ec2.md>), [Amazon Elastic Kubernetes Service](<https://devfeed.tech/topics/amazon-elastic-kubernetes-service.md>), [Amazon S3](<https://devfeed.tech/topics/amazon-s3.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>)

Tags: [amazon-ec2](<https://devfeed.tech/tags/amazon-ec2.md>), [amazon-eks](<https://devfeed.tech/tags/amazon-eks.md>), [amazon-rds](<https://devfeed.tech/tags/amazon-rds.md>), [aws](<https://devfeed.tech/tags/aws.md>), [aws-identity-and-access-management-iam](<https://devfeed.tech/tags/aws-identity-and-access-management-iam.md>), [ci](<https://devfeed.tech/tags/ci.md>), [gradle](<https://devfeed.tech/tags/gradle.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

The article explains how AWS supports Gradle's open source build tool, including plugin distribution through Amazon S3, large-scale builds and tests on Amazon EC2 and Amazon EKS, performance tracking with Amazon RDS, and layered security and observability services.

### Source excerpt

The Gradle Build Tool runs a lot of the world's software. Millions of developers use it every day, and almost every Android app on your phone was built with it. So somebody, somewhere, is kicking off a Gradle build right now. And the next one. And a thousand more in the next minute. For all of them, it has to be fast, and it has to be there. That isn't free. Behind the open source project sits a plugin portal serving hundreds of millions of downloads a month, a CI fleet running millions of tests, a performance lab watching for regressions, and the security tooling that guards a supply chain a lot of the industry depends on. All of it runs on AWS. Here's how. Downloading plugins The Gradle Plugin Portal at plugins.gradle.org is where the community publishes the plugins that extend Gradle. Every plugin JAR it serves (thousands of them, downloaded around 200 million times a month) lives in Amazon S3. That's what lets us be the front door for the plugin ecosystem without running a fleet of file servers ourselves. Building and testing Gradle itself Most of our AWS bill goes here. Every commit to Gradle triggers hundreds of separate builds and tens of thousands of tests across our supported operating systems and architectures. That fleet runs on: Amazon EC2, with auto-scaling to match capacity to demand. Amazon EKS, which orchestrates our containerized Test Distribution agents. Amazon ECR, which stores the agent container images. Keeping Gradle fast A build tool only earns trust if it stays fast. Every commit runs through our performance test suite, and the results land in Amazon RDS, where we compare against history and catch regressions before they reach users. Securing the build Protecting a build tool means protecting a supply chain. Our CI authenticates to AWS through AWS Identity and Access Management (IAM) with GitHub OIDC. That gives us keyless, short-lived credentials, and any secrets we still need are pulled on demand from AWS Secrets Manager and AWS Systems Man