# Amazon Web Services Amazon Web Services (AWS) is a cloud computing services platform offering over 240 cloud and AI services. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Architecting a secure landing zone in the AWS European Sovereign Cloud DevFeed: [Architecting a secure landing zone in the AWS European Sovereign Cloud]() Original publisher: [Read original article]() Author: Pablo Pagani Published: 2026-09-16T21:20:48Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services](), [Cloud](), [Architecture & Design](), [AWS IAM](), [Infrastructure as code](), [CI/CD](), [SIEM, Security](), [Incident response]() Tags: [advanced-300](), [aws](), [aws-identity-and-access-management-iam](), [ci-cd](), [cloud](), [eu](), [europe](), [incident-response](), [infrastructure-as-code-iac](), [partition](), [security](), [security-blog](), [security-identity-compliance](), [technical-how-to]() ### AI overview This article explains how to architect a secure, scalable landing zone in the AWS European Sovereign Cloud. It describes the aws-eusc partition boundary and covers governance, identity, logging, data protection, network design, CI/CD, artifact distribution, and incident response. ### Source excerpt The AWS European Sovereign Cloud is a new, independent cloud for Europe, physically and logically separate from existing AWS Regions and operated within the European Union (EU). It provides the same services, features, and APIs as AWS commercial Regions, but runs as a distinct AWS partition (aws-eusc), with its own control plane, AWS Identity and [...] ## AWS reimagines the getting started experience DevFeed: [AWS reimagines the getting started experience]() Original publisher: [Read original article]() Author: Micah Walter Published: 2026-09-16T17:50:14Z Content type: release Language: en Sources: [AWS News Blog]() Topics: [Amazon Web Services](), [AWS IAM](), [configuration](), [App]() Tags: [announcements](), [aws](), [aws-management-console](), [configuration](), [developers](), [free](), [getting-started](), [launch](), [news](), [permissions](), [project](), [team]() ### AI overview AWS announces a simplified getting-started experience with sensible defaults, managed project environments, simplified permissions, and $100 in Free Tier credits for most new customers. Customers can later activate advanced AWS features without migrating. ### Source excerpt AWS has reimagined the getting started experience with smart and sensible defaults to help developers get started fast so that they can focus on building. New customers can sign up and get started right away with $100 in Free Tier credits, managed project environments, and simplified team and resource permissions. If their workload evolves, customers can activate advanced features to access the full breadth and depth of AWS in one step, with no migration required. ## Build a serverless PII redaction pipeline with Amazon Bedrock Data Automation DevFeed: [Build a serverless PII redaction pipeline with Amazon Bedrock Data Automation]() Original publisher: [Read original article]() Author: Samantha Stuart Published: 2026-09-16T15:17:37Z Content type: tutorial Language: en Sources: [Artificial Intelligence]() Topics: [Amazon Bedrock](), [pii](), [Serverless](), [AWS Lambda](), [AWS Step Functions](), [Artificial Intelligence](), [Amazon Web Services](), [Ansible]() Tags: [advanced-300](), [amazon-bedrock](), [amazon-bedrock-data-automation](), [aws](), [aws-lambda](), [aws-step-functions](), [how-to](), [pii-redaction](), [pipeline](), [precision](), [serverless](), [technical-how-to]() ### AI overview This tutorial presents a serverless AWS pipeline for detecting and redacting personally identifiable information in scanned documents and images. It uses Amazon Bedrock Data Automation with a custom blueprint, AWS Step Functions, and AWS Lambda, with a token-matching quality check to improve recall on degraded and handwritten documents. ### Source excerpt Learn how to automate end-to-end PII detection and redaction from scanned documents at scale using Amazon Bedrock Data Automation with a custom blueprint, AWS Step Functions, and AWS Lambda. A custom blueprint redacts sensitive fields with field-level precision, and a token matching quality check raises recall across degraded and handwritten documents. ## AWS says wartime damage means some Middle East cloud resources are gone for good DevFeed: [AWS says wartime damage means some Middle East cloud resources are gone for good]() Original publisher: [Read original article]() Author: Dan Robinson Published: 2026-09-16T12:11:56Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Amazon Web Services](), [Cloud](), [Availability]() Tags: [amazon](), [availability](), [aws](), [cloud](), [datacenter](), [middle-east](), [off-prem]() ### AI overview AWS says wartime damage has permanently removed some cloud resources in the Middle East after Iranian strikes overwhelmed regional redundancy in Bahrain and left one UAE Availability Zone inaccessible. ### Source excerpt Iranian strikes overwhelmed regional redundancy in Bahrain and left one UAE Availability Zone inaccessible ## AWS STS simplifies session token size limits and adds session token size monitoring DevFeed: [AWS STS simplifies session token size limits and adds session token size monitoring]() Original publisher: [Read original article]() Author: Rishi Tripathy Published: 2026-09-15T22:21:59Z Content type: release Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services](), [Security](), [Monitoring](), [Amazon CloudWatch](), [AWS CloudTrail](), [API]() Tags: [advanced-300](), [amazon-cloudwatch](), [apis](), [aws](), [aws-cloudtrail](), [aws-security-token-service](), [aws-sts](), [infrastructure](), [metrics](), [monitoring](), [security](), [security-blog](), [security-identity-compliance](), [technical-how-to](), [token]() ### AI overview AWS Security Token Service has replaced its separate packed policy and overall session token limits with a single 4,096-byte limit. It now reports session token size and limit utilization in API responses, Amazon CloudWatch metrics, and AWS CloudTrail events. ### Source excerpt AWS Security Token Service (AWS STS) has simplified session token size limits, giving you more room for your session policies and session tags. STS has replaced the packed policy size and the overall session token size limits with a single token size limit of 4,096 bytes. STS now reports session token size in API responses, [...] ## AWS agents will suggest your new flights. Code decides what gets booked. DevFeed: [AWS agents will suggest your new flights. Code decides what gets booked.]() Original publisher: [Read original article]() Author: Meredith Shubel Published: 2026-09-15T21:27:21Z Content type: news Language: en Sources: [The New Stack]() Topics: [AWS Step Functions](), [Amazon Bedrock AgentCore](), [Orchestration](), [Generative AI](), [Amazon Web Services]() Tags: [ai-agents](), [ai-engineering](), [airline](), [amazon-bedrock-agentcore](), [aws](), [aws-step-functions](), [cloud-services](), [generative-ai](), [orchestration]() ### AI overview AWS published a Step Functions pattern for airline rebooking in which Amazon Bedrock AgentCore agents propose itineraries and compensation messages, while deterministic workflow steps validate proposals before reservations change or payments are issued. ### Source excerpt AWS published a new Step Functions pattern this week that gives AI agents a role in airline rebooking while keeping The post AWS agents will suggest your new flights. Code decides what gets booked. appeared first on The New Stack. ## Architecting resilient authentication with Amazon Cognito multi-Region replication DevFeed: [Architecting resilient authentication with Amazon Cognito multi-Region replication]() Original publisher: [Read original article]() Author: Abrom Douglas Published: 2026-09-15T19:00:52Z Content type: tutorial Language: en Sources: [AWS Security Blog]() Topics: [Amazon Cognito](), [Replication](), [Authentication](), [identity and access management](), [Amazon Web Services](), [real-time](), [JSON Web Tokens]() Tags: [advanced-300](), [amazon-cognito](), [authentication](), [aws](), [failover](), [identity-and-access-management](), [real-time](), [replication](), [security-blog](), [security-identity-compliance](), [technical-how-to](), [token]() ### AI overview This AWS article explains how Amazon Cognito multi-Region replication supports resilient authentication by replicating user pools across AWS Regions, with eventual consistency, failover, and interoperable sessions and JSON web tokens. It also covers preparation, architecture decisions, and failover strategies for B2C, B2B, and M2M use cases. ### Source excerpt Your consumer identity and access management (CIAM) system is the foundation of your customer experience. It's how users sign in, access services, and engage with your applications. As your business scales across geographies, ensuring authentication is always available becomes a core architectural requirement. However, building multi-Region authentication has traditionally required complex custom replication solutions that [...] ## Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline DevFeed: [Operationalizing least privilege: Automate IAM remediation through your CI/CD pipeline]() Original publisher: [Read original article]() Author: Luis Pastor Published: 2026-09-15T15:53:51Z Content type: tutorial Language: en Sources: [AWS Security Blog]() Topics: [AWS Identity and Access Management (IAM)](), [CI/CD](), [Infrastructure as code](), [AWS CloudFormation](), [Amazon Web Services]() Tags: [aws](), [aws-cloudformation](), [aws-cloudtrail](), [aws-iam](), [aws-identity-and-access-management-iam](), [aws-organizations](), [best-practices](), [ci-cd](), [expert-400](), [iam](), [infrastructure-as-code-iac](), [least-privilege](), [pull-request](), [security](), [security-blog](), [security-identity-compliance](), [technical-how-to]() ### AI overview This article describes an automated workflow for operationalizing least privilege in AWS. It explains how AWS IAM Access Analyzer identifies unused permissions and how remediation can be routed through different paths for infrastructure-as-code-managed, manually created, and unused IAM principals. ### Source excerpt The principle of least privilege is straightforward to articulate but challenging to maintain at scale. When teams first deploy applications to AWS, they often grant broader permissions than strictly necessary; it's faster to get things working, and the plan is always to tighten permissions later. But later rarely comes. Permissions accumulate, AWS Identity and Access [...] ## New in Symfony 8.2: KeyManagement Component DevFeed: [New in Symfony 8.2: KeyManagement Component]() Original publisher: [Read original article]() Author: Javier Eguiluz Published: 2026-09-15T07:11:00Z Content type: release Language: en Sources: [Symfony Blog]() Topics: [Symfony](), [Encryption](), [Amazon Web Services](), [Azure](), [Google]() Tags: [2026](), [api](), [article](), [aws](), [azure](), [backend](), [encryption](), [features](), [google](), [hashicorp-vault](), [kms](), [new-features](), [openssl](), [sdk](), [symfony]() ### AI overview Symfony 8.2 introduces an experimental KeyManagement component that provides one API for AWS KMS, Azure Key Vault, Google Cloud KMS, and HashiCorp Vault. It supports direct and envelope encryption, local development backends, provider bridges, console commands, debug-toolbar integration, and Doctrine support. ### Source excerpt This is the first article in a series showcasing the most important new features introduced by Symfony 8.2, which will be released at the end of November 2026. Contributed... ## How Delphi ships 100 times a day with its Python backend on Vercel DevFeed: [How Delphi ships 100 times a day with its Python backend on Vercel]() Original publisher: [Read original article]() Author: Kevin Sundstrom Published: 2026-09-15T04:00:00Z Content type: article Language: en Sources: [Vercel News]() Topics: [Python](), [Vercel](), [Back end](), [feature flags](), [Amazon Web Services](), [Docker](), [airflow]() Tags: [aws](), [backend](), [docker](), [feature-flags](), [python](), [vercel](), [workflow](), [workflows]() ### AI overview A Vercel case study describes how Delphi rebuilt its Python backend on Vercel after previously using AWS, ECS, Docker Desktop, and local databases. The move gave the team a shared deployment workflow, faster onboarding, and more than 100 production deploys per day, while Vercel Workflows and Queues support long-running work and background jobs. ### Source excerpt Delphi on Vercel 10 engineers with no dedicated infrastructure role Everyone ships code, including product and design 100+ production deploys a day behind feature flags Delphi builds digital minds. They capture what someone has written, recorded, and taught, so anyone can tap that expertise on demand. Delphi is "a destination where you can find and interact with interesting minds," says founding engineer Spencer Schoeben. Nobody has built a digital mind network before, so Delphi figures out what to build by shipping features and watching how people use them. That only works if the product is fast to change. "If we are going to win, we need to have an excellent developer and agentic experience," Spencer says. "Otherwise, we could not adapt to how fast our user's demands change." Delphi's frontend had run on Vercel since day one. "The frontend has always been easy," Spencer says, "but the backend was a nightmare." Six months ago, the team rebuilt its Python backend on Vercel as well. Today the whole team ships to production 100+ times a day. Building a Python backend that's easy to work onThe backend slowed every change Delphi's backend previously ran on AWS, with ECS, Docker Desktop, and local databases. In the earliest days, the setup worked because the team was small and much of the context lived in people's heads. As Delphi grew, that made onboarding slower than the team wanted: getting a new engineer to their first deploy took a full day of environment setup. Delphi could have fixed that without leaving AWS. But fixing it properly would have meant designing and owning the infrastructure themselves, and the team didn't want to own infrastructure at all. "That is not our current goal as a company," Spencer says. After moving the backend to Vercel, new engineers could get to production much faster, with the same deploy workflow the rest of the team used every day. Workflows and Queues made the move possible When Delphi was founded, Vercel Workflows and Vercel Queues ## Amazon Linux 2027 Enters Public Preview with SELinux Enforcing by Default DevFeed: [Amazon Linux 2027 Enters Public Preview with SELinux Enforcing by Default]() Original publisher: [Read original article]() Author: Steef-Jan Wiggers Published: 2026-09-15T03:40:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [Linux](), [SELinux](), [migration](), [Amazon Web Services](), [Kernel](), [amazon]() Tags: [amazon](), [amazon-linux-2027-preview](), [architecture](), [architecture-design](), [aws](), [cloud](), [development](), [devops](), [ec2](), [infrastructure](), [kernel](), [linux](), [migration](), [news](), [operating-systems](), [preview](), [selinux](), [x86-64]() ### AI overview AWS has released Amazon Linux 2027 in public preview with SELinux enforcing by default. The change may require application and migration work because policies that only logged violations on AL2023 can block applications on AL2027. The release has no announced AL2023 end-of-support date, general-availability date, or in-place migration path. ### Source excerpt AWS has released Amazon Linux 2027 in public preview, built on the AL2023 baseline with kernel 7.1 and SELinux in enforcing mode by default. Applications that pass on AL2023's permissive mode may fail under enforcing. The announcement gives no AL2023 end-of-support date, no GA date, and no in-place migration path. By Steef-Jan Wiggers ## Abnormal AI: Amazon Bedrock AgentCore for agentic email security at scale DevFeed: [Abnormal AI: Amazon Bedrock AgentCore for agentic email security at scale]() Original publisher: [Read original article]() Author: Aswin Vasudevan Published: 2026-09-14T21:22:45Z Content type: article Language: en Sources: [Artificial Intelligence]() Topics: [Amazon Bedrock AgentCore](), [threat detection](), [Amazon Bedrock](), [Security](), [Serverless](), [API](), [Amazon Web Services](), [AWS CloudTrail](), [Amazon CloudWatch](), [Amazon S3]() Tags: [advanced-300](), [agentic](), [agents](), [amazon-bedrock-agentcore](), [amazon-cloudwatch](), [amazon-s3](), [analysis](), [api](), [aws](), [aws-cloudtrail](), [code](), [customer-solutions](), [data](), [data-processing](), [security](), [serverless](), [threat-detection]() ### AI overview Abnormal AI uses Amazon Bedrock AgentCore Code Interpreter as an ephemeral, serverless compute scratch pad for real-time inline email threat detection. The article describes its sandbox isolation, networking and file-handling options, preloaded Python capabilities, observability integrations, and use at billion-message scale. ### Source excerpt Learn how Abnormal AI deployed Amazon Bedrock AgentCore Code Interpreter as an ephemeral compute scratch pad for the agents behind its real-time email threat detection at billion-message scale, plus the sandbox design decisions and practical lessons for builders deploying Code Interpreter in production. ## Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore DevFeed: [Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore]() Original publisher: [Read original article]() Author: Swara Gandhi Published: 2026-09-14T20:35:45Z Content type: tutorial Language: en Sources: [Artificial Intelligence]() Topics: [Amazon Bedrock AgentCore](), [OAuth](), [Amazon Web Services](), [AWS CloudTrail](), [GitHub](), [Slack](), [Model Context Protocol](), [ide]() Tags: [amazon-bedrock](), [amazon-bedrock-agentcore](), [announcements](), [aws](), [aws-cloudtrail](), [claude-code](), [cursor](), [github](), [intermediate-200](), [kiro](), [model-context-protocol](), [oauth](), [slack](), [visual-studio-code]() ### AI overview This tutorial explains how Amazon Bedrock AgentCore Identity's Consent portal manages end-user OAuth consent and session binding for AI agents. It covers configuring GitHub and Slack targets through an AgentCore Gateway, storing user tokens, supporting IDE and MCP clients, and reviewing activity in AWS CloudTrail. ### Source excerpt Amazon Bedrock AgentCore Identity now offers a Consent portal, a managed web experience and session binding endpoint for AgentCore Gateway. This post walks through provisioning a portal, configuring GitHub and Slack 3LO targets, and the end-user consent flow, and shows how to review activity in AWS CloudTrail. ## AWS Security Reference Architecture: A deep dive into PCI DSS compliance DevFeed: [AWS Security Reference Architecture: A deep dive into PCI DSS compliance]() Original publisher: [Read original article]() Author: Avik Mukherjee Published: 2026-09-14T17:46:56Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services](), [Security](), [Architecture & Design](), [Network Segmentation](), [Encryption](), [Logging](), [Access Control](), [Cloud]() Tags: [access-control](), [amazon-web-services](), [announcements](), [architecture](), [compliance](), [encryption](), [foundational-100](), [logging](), [network-segmentation](), [pci-dss](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview AWS announces the AWS Security Reference Architecture (AWS SRA) PCI DSS Deep Dive, a guide that extends the core AWS SRA with prescriptive architecture-level guidance for organizations handling cardholder data on AWS. It explains how AWS SRA patterns address PCI DSS concerns including account scoping, network segmentation, encryption, logging, and access control. ### Source excerpt Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations that store, process, or transmit cardholder data on AWS. Organizations subject to [...] ## Unified Knowledge Graph RAG on AWS: GraphRAG and LightRAG on one stack DevFeed: [Unified Knowledge Graph RAG on AWS: GraphRAG and LightRAG on one stack]() Original publisher: [Read original article]() Author: Jonas Kim Published: 2026-09-14T16:55:58Z Content type: article Language: en Sources: [AWS Open Source Blog]() Topics: [Retrieval Augmented Generation (RAG)](), [Graphs](), [Amazon Bedrock](), [Amazon OpenSearch Service](), [Amazon Web Services]() Tags: [amazon-bedrock](), [amazon-opensearch-service](), [aws](), [knowledge-graph](), [open-source](), [rag](), [retrieval](), [search](), [vector-search]() ### AI overview This article presents a unified knowledge-graph RAG stack that brings Microsoft GraphRAG and HKUDS LightRAG together on Amazon Bedrock, Amazon Neptune, and Amazon OpenSearch Service. The shared stack supports common ingestion, indexing, caching, and multilingual handling while allowing the retrieval methodology to be selected per query. ### Source excerpt Picture a compliance analyst staring at a few thousand contracts, amendments, and internal memos, trying to answer one question that sounds straightforward: "Which of our obligations are exposed if this one milestone slips?" The answer isn't written in any single document. It's stitched across three -- a master agreement that ties a payment to a [...] ## Resolve Amazon Aurora PostgreSQL lock contention with Database Insights: Part 2 DevFeed: [Resolve Amazon Aurora PostgreSQL lock contention with Database Insights: Part 2]() Original publisher: [Read original article]() Author: Sameer Kumar Published: 2026-09-14T16:02:16Z Content type: tutorial Language: en Sources: [AWS Database Blog]() Topics: [Amazon Aurora](), [Amazon CloudWatch](), [PostgreSQL](), [Concurrency](), [Monitoring](), [Database](), [Amazon EC2](), [Architecture & Design](), [Amazon Web Services](), [AWS CloudFormation]() Tags: [advanced-300](), [amazon-aurora](), [amazon-cloudwatch](), [amazon-ec2](), [aws](), [aws-cloudformation](), [concurrency](), [monitoring](), [performance](), [postgresql](), [rds-for-postgresql](), [simulation](), [technical-how-to]() ### AI overview This tutorial explains how to diagnose and resolve lock contention in Amazon Aurora PostgreSQL using Amazon CloudWatch Database Insights. It demonstrates Lock Analysis and the Lock Tree visualization for identifying blocking sessions, then covers immediate fixes, configuration changes, optimistic concurrency control, asynchronous processing, SKIP LOCKED, and row splitting. ### Source excerpt Part 1 showed how row lock contention degrades Amazon Aurora PostgreSQL throughput. In Part 2, use Amazon CloudWatch Database Insights and its Lock Tree to pinpoint blocking sessions, then resolve contention with query termination, timeout parameters, and architectural patterns such as SKIP LOCKED and row splitting that restore throughput. ## How Ninth Wave built AI-powered open finance onboarding on Amazon Bedrock DevFeed: [How Ninth Wave built AI-powered open finance onboarding on Amazon Bedrock]() Original publisher: [Read original article]() Author: Shawn Kelly Published: 2026-09-14T15:58:57Z Content type: article Language: en Sources: [Artificial Intelligence]() Topics: [Amazon Bedrock AgentCore](), [Artificial Intelligence](), [API](), [Architecture & Design](), [Security](), [Finance](), [Amazon Web Services](), [data]() Tags: [advanced-300](), [ai](), [amazon-bedrock](), [amazon-bedrock-agentcore](), [apis](), [customer-solutions](), [fintech](), [onboarding](), [pci-dss](), [security](), [soc-2]() ### AI overview The article describes how Ninth Wave built Compass, a multi-agent AI onboarding assistant powered by Amazon Bedrock AgentCore. Compass helps financial institutions validate bank APIs, map fields to Financial Data Exchange standards, and score production readiness while supporting secure, compliant open finance connectivity. ### Source excerpt Learn how Ninth Wave built Compass, a multi-agent AI onboarding assistant on Amazon Bedrock AgentCore that validates bank APIs against Financial Data Exchange (FDX) standards, scores compliance, and compresses open finance onboarding from weeks to minutes while meeting SOC 2 and PCI DSS requirements. ## The generative AI customization spectrum: From prompt engineering to custom models on AWS DevFeed: [The generative AI customization spectrum: From prompt engineering to custom models on AWS]() Original publisher: [Read original article]() Author: Bhavya Sruthi Sode Published: 2026-09-14T15:47:12Z Content type: tutorial Language: en Sources: [Artificial Intelligence]() Topics: [Generative AI](), [Amazon Web Services](), [Prompt Engineering](), [Fine-tuning](), [Retrieval Augmented Generation (RAG)](), [Amazon Bedrock](), [foundation-models](), [Anthropic Claude](), [Nova](), [llama]() Tags: [advanced-300](), [ai](), [amazon-bedrock](), [anthropic-claude](), [aws](), [best-practices](), [chain-of-thought](), [fine-tuning](), [foundation-models](), [generative-ai](), [llama](), [nova](), [optimization](), [prompt-engineering](), [rag]() ### AI overview This AWS article presents an eight-step decision framework for customizing generative AI workloads. It compares progressively more involved approaches, including prompt engineering, Retrieval Augmented Generation (RAG), fine-tuning, continued pre-training, and custom models such as Amazon Nova Forge, emphasizing that teams should start with the simplest approach and escalate when greater control or domain specificity is required. ### Source excerpt Pick the right generative AI customization approach on AWS with an 8-step decision framework, from prompt engineering and RAG to fine-tuning, continued pre-training, and Amazon Nova Forge. Start simple and escalate only when you must. ## Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more DevFeed: [Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more]() Original publisher: [Read original article]() Author: Nico Vibert and Donia Chaiehloudj, Cilium Published: 2026-09-14T10:45:49Z Content type: article Language: en Sources: [Cloud Native Computing Foundation]() Topics: [Cilium](), [Open Source](), [API](), [networking](), [Kubernetes](), [Amazon Web Services](), [eBPF](), [VPC](), [nginx]() Tags: [2026](), [api](), [authentication](), [authorization](), [aws](), [blog](), [cilium](), [cloud](), [cni](), [ebpf](), [google](), [ingress-nginx](), [ipv4](), [ipv6](), [kubernetes](), [microsoft](), [network](), [networking](), [nginx](), [open-source](), [release]() ### AI overview Cilium 1.20 expands Gateway API support with ExternalAuth, CORS filters, ListenerSets, TCPRoute, and UDPRoute. The release also introduces extensible datapath plugins, advances networking standardization with Kubernetes, and adds beta IPv6 support for AWS ENI IPAM. ### Source excerpt Cilium 1.20, the second major open source Cilium release of 2026 after Cilium 1.19, is finally here. Three themes stand out in this release: Thank you to every contributor, reviewer and maintainer who made Cilium 1.20... ## Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection DevFeed: [Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection]() Original publisher: [Read original article]() Author: Osher Jacob Published: 2026-09-14T10:00:01Z Content type: article Language: en Sources: [Unit 42]() Topics: [AWS CloudTrail](), [Cloud](), [threat detection](), [Threat Research](), [SIEM, Security, Observability](), [Machine learning](), [Algorithms](), [SQL](), [IAM](), [identity and access management](), [Amazon Web Services]() Tags: [algorithms](), [amazon-web-services-aws](), [analysis](), [aws-cloudtrail](), [cloud](), [cloud-cybersecurity-research](), [cloud-detection](), [devops](), [iam](), [identity-and-access-management](), [logs](), [machine-learning](), [post](), [sql](), [threat-detection](), [threat-research]() ### AI overview This article presents a behavioral clustering model for mapping cloud identities to functional roles using activity patterns from audit logs. It applies unsupervised machine learning with UMAP and HDBSCAN to data from more than 40,000 identities across 125 cloud environments, and shows how the resulting map can support automated threat detection. The article also explains how lightweight heuristics extracted from the map can classify identities at scale using standard SQL, reducing the need for continuous resource-intensive machine learning pipelines. ### Source excerpt We designed a behavioral clustering model to map cloud identity roles from audit logs, enabling continuous threat detection using standard SQL queries. The post Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection appeared first on Unit 42. ## GitLab Dedicated: Compliance for a new regulatory era DevFeed: [GitLab Dedicated: Compliance for a new regulatory era]() Original publisher: [Read original article]() Author: Aathira Nair Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [GitLab]() Topics: [GitLab](), [Software as a service](), [Amazon Web Services](), [Cybersecurity](), [Security](), [Resilience](), [Deployment](), [Testing](), [Multitenancy]() Tags: [amazon-web-services-aws](), [aws](), [compliance](), [deployment](), [gdpr](), [gitlab](), [infrastructure-as-code](), [nis2](), [product](), [regulatory](), [resilience](), [saas](), [security](), [testing]() ### AI overview The article presents GitLab Dedicated as a fully isolated, single-tenant SaaS platform hosted and managed by GitLab in a preferred Amazon Web Services region. It explains how the service is intended to help European enterprises address compliance, data sovereignty, audit readiness, security, resilience, and operational responsibilities related to DORA, NIS2, and GDPR. ### Source excerpt Enforcements such as NIS2 are no longer a future planning consideration. The European Union Agency for Cybersecurity's (ENISA) NIS360 report confirms that supervisory authorities are actively assessing cybersecurity maturity across critical sectors. The agency is moving from guidance and consultation into active oversight, scrutiny, and accountability. This is the regulatory environment European enterprises now operate in. Multi-tenant cloud platforms remove operational overhead but place source code and pipelines on shared infrastructure regulators now scrutinize. Self-managed solutions provide isolation but transfer responsibility for upgrade cycles, security patches, and disaster recovery (DR) tests to an already stretched platform team. Both deployment options leave gaps in risk management, data sovereignty, and furnishing audit evidence. In this article, you'll discover how GitLab Dedicated, a fully isolated, single-tenant SaaS solution deployed in your preferred Amazon Web Services (AWS) region and hosted and managed by GitLab, addresses these challenges and helps you keep pace with evolving compliance requirements. "NatWest Group is adopting GitLab Dedicated SaaS to enable our engineers to use a common cloud engineering platform; delivering new customer and colleague outcomes rapidly, frequently, and securely with high quality, automated testing, on-demand infrastructure, and straight-through deployment." -- Adam Leggett, Platform Lead for Engineering Platforms, NatWest Group Regulations are driving change In the European Union, key regulations are driving the need for a different platform approach. These regulations converge on a decision most enterprises made before they existed: a platform their developers build on. That decision now carries audit consequences it didn't before. Digital Operational Resilience Act (DORA), which came into force across EU financial services in January 2025, requires financial institutions to keep critical technology resilient, ## Encore for Python DevFeed: [Encore for Python]() Original publisher: [Read original article]() Author: Ivan Cernja Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Encore Updates]() Topics: [Python](), [FastAPI](), [AWS IAM](), [Amazon Web Services](), [Cloud](), [PostgreSQL](), [Terraform](), [postgresql clusters]() Tags: [aws](), [cloud](), [coding-agents](), [configuration](), [git](), [iam](), [infrastructure](), [postgresql](), [python](), [terraform]() ### AI overview Encore is introducing Encore.py, an upcoming beta that brings Encore's type-safe infrastructure primitives to Python and works alongside frameworks such as FastAPI. The article describes how application-level resource declarations can drive infrastructure provisioning while platform teams retain control over environment-specific settings in AWS, GCP, Terraform, or existing infrastructure. It also highlights preview environments where coding agents can implement and verify features against infrastructure configured to resemble production. ### Source excerpt An early look at Encore for Python, entering beta soon. ## Second-Gen Single-Rack AWS Outposts Puts 2,688 vCPUs and 100TB of EBS in One 42U Rack DevFeed: [Second-Gen Single-Rack AWS Outposts Puts 2,688 vCPUs and 100TB of EBS in One 42U Rack]() Original publisher: [Read original article]() Author: Harold Fritts Published: 2026-09-12T18:24:22Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [AWS Outposts](), [Amazon Web Services](), [cloud-infrastructure](), [Network](), [Latency](), [data-processing](), [Security]() Tags: [5g](), [automation](), [aws](), [aws-outposts](), [cloud](), [compute](), [connectx](), [data-processing](), [enterprise](), [governance](), [latency](), [low-latency](), [networking](), [security]() ### AI overview AWS has generally released a second-generation single-rack AWS Outposts configuration: a self-contained 42U rack combining compute, storage, and networking with up to 2,688 vCPUs and 100 TB of Amazon EBS. The article describes its on-premises cloud compatibility, compact footprint, supported instance families, and accelerated networking options for trading floors and 5G cores. ### Source excerpt AWS has made second-generation single-rack AWS Outposts generally available, a self-contained 42U rack that puts compute, storage, and networking together with up to 2,688 vCPUs and 100 TB of Amazon EBS. It runs the same APIs, console, automation, governance policies, and security controls as the multi-rack second-generation Outposts and the parent AWS Region, so an The post Second-Gen Single-Rack AWS Outposts Puts 2,688 vCPUs and 100TB of EBS in One 42U Rack appeared first on StorageReview.com. ## Build an end-to-end RFI questionnaire workflow using Amazon Quick Automate DevFeed: [Build an end-to-end RFI questionnaire workflow using Amazon Quick Automate]() Original publisher: [Read original article]() Author: Chaytanya Kumar Published: 2026-09-10T16:08:57Z Content type: tutorial Language: en Sources: [Artificial Intelligence]() Topics: [Automation](), [Amazon S3](), [CSV](), [Amazon Web Services](), [datasets]() Tags: [advanced-300](), [amazon-quick-suite](), [amazon-s3](), [amazon-simple-storage-service-s3](), [automation](), [aws](), [data](), [how-to](), [technical-how-to](), [tutorial]() ### AI overview A tutorial for automating RFI questionnaire processing with Amazon Quick Automate. It reads multi-tab workbooks from Amazon S3, extracts and structures questions, and writes CSV output to Amazon S3. ### Source excerpt Learn how to build an end-to-end RFI questionnaire workflow with Amazon Quick Automate. Read a multi-tab RFI workbook from Amazon S3, use natural-language prompts to extract and structure the questionnaire data, refine the workflow through conversation, and write clean CSV output back to Amazon S3 -- cutting development from days to hours. [Next page]()