# AWS IAM AWS service for securely controlling access to AWS resources through identities, authentication, authorization, and permissions. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Security Analysis of AWS AgentCore Harness Credential Exposure Through Prompt Injection DevFeed: [Security Analysis of AWS AgentCore Harness Credential Exposure Through Prompt Injection]() Original publisher: [Read original article]() Author: Niv Rabin Published: 2026-09-18T10:00:36Z Content type: article Language: en Sources: [Unit 42]() Topics: [prompt injection](), [Security & compliance, Cloud security](), [Artificial Intelligence](), [Security](), [least privilege](), [AWS IAM](), [Model Context Protocol]() Tags: [agentcore-runtime](), [agentic-ai](), [ai-agents](), [aws](), [cloud](), [cloud-cybersecurity-research](), [cloud-security](), [encryption](), [exfiltration](), [iam](), [identity-and-access-management](), [least-privilege](), [mcp-server](), [prompt-injection](), [sandbox](), [shell-tool](), [threat-research]() ### AI overview Unit 42 researchers found that default configurations in AWS AgentCore Harness could allow prompt injection to steer an agent and exfiltrate plaintext credentials managed by AgentCore Identity. The analysis examines the interaction between the identity vault, a downstream MCP server, and the harness's built-in shell tool. It recommends restricting allowed tools, applying least privilege to identity-vault service accounts, and monitoring outbound traffic. ### Source excerpt Analysis of how default configurations in AWS AgentCore Harness allow prompt injection to exfiltrate credentials, and key steps to secure your agents. The post A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity appeared first on Unit 42. ## Architecting a secure landing zone in the AWS European Sovereign Cloud DevFeed: [Architecting a secure landing zone in the AWS European Sovereign Cloud]() Original publisher: [Read original article]() Author: Pablo Pagani Published: 2026-09-16T21:20:48Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services](), [Cloud](), [Architecture & Design](), [AWS IAM](), [Infrastructure as code](), [CI/CD](), [SIEM, Security](), [Incident response]() Tags: [advanced-300](), [aws](), [aws-identity-and-access-management-iam](), [ci-cd](), [cloud](), [eu](), [europe](), [incident-response](), [infrastructure-as-code-iac](), [partition](), [security](), [security-blog](), [security-identity-compliance](), [technical-how-to]() ### AI overview This article explains how to architect a secure, scalable landing zone in the AWS European Sovereign Cloud. It describes the aws-eusc partition boundary and covers governance, identity, logging, data protection, network design, CI/CD, artifact distribution, and incident response. ### Source excerpt The AWS European Sovereign Cloud is a new, independent cloud for Europe, physically and logically separate from existing AWS Regions and operated within the European Union (EU). It provides the same services, features, and APIs as AWS commercial Regions, but runs as a distinct AWS partition (aws-eusc), with its own control plane, AWS Identity and [...] ## AWS reimagines the getting started experience DevFeed: [AWS reimagines the getting started experience]() Original publisher: [Read original article]() Author: Micah Walter Published: 2026-09-16T17:50:14Z Content type: release Language: en Sources: [AWS News Blog]() Topics: [Amazon Web Services](), [AWS IAM](), [configuration](), [App]() Tags: [announcements](), [aws](), [aws-management-console](), [configuration](), [developers](), [free](), [getting-started](), [launch](), [news](), [permissions](), [project](), [team]() ### AI overview AWS announces a simplified getting-started experience with sensible defaults, managed project environments, simplified permissions, and $100 in Free Tier credits for most new customers. Customers can later activate advanced AWS features without migrating. ### Source excerpt AWS has reimagined the getting started experience with smart and sensible defaults to help developers get started fast so that they can focus on building. New customers can sign up and get started right away with $100 in Free Tier credits, managed project environments, and simplified team and resource permissions. If their workload evolves, customers can activate advanced features to access the full breadth and depth of AWS in one step, with no migration required. ## Encore for Python DevFeed: [Encore for Python]() Original publisher: [Read original article]() Author: Ivan Cernja Published: 2026-09-14T00:00:00Z Content type: article Language: en Sources: [Encore Updates]() Topics: [Python](), [FastAPI](), [AWS IAM](), [Amazon Web Services](), [Cloud](), [PostgreSQL](), [Terraform](), [postgresql clusters]() Tags: [aws](), [cloud](), [coding-agents](), [configuration](), [git](), [iam](), [infrastructure](), [postgresql](), [python](), [terraform]() ### AI overview Encore is introducing Encore.py, an upcoming beta that brings Encore's type-safe infrastructure primitives to Python and works alongside frameworks such as FastAPI. The article describes how application-level resource declarations can drive infrastructure provisioning while platform teams retain control over environment-specific settings in AWS, GCP, Terraform, or existing infrastructure. It also highlights preview environments where coding agents can implement and verify features against infrastructure configured to resemble production. ### Source excerpt An early look at Encore for Python, entering beta soon. ## Monitoring production agent lifecycle with AWS DevOps Agent and AgentCore Evaluations DevFeed: [Monitoring production agent lifecycle with AWS DevOps Agent and AgentCore Evaluations]() Original publisher: [Read original article]() Author: Meghana Ashok Published: 2026-09-11T18:26:38Z Content type: article Language: en Sources: [Artificial Intelligence]() Topics: [ai observability](), [AWS IAM](), [incident](), [Orchestration](), [telemetry]() Tags: [advanced-300](), [agent](), [agents](), [amazon-bedrock](), [amazon-bedrock-agentcore](), [aws](), [aws-identity-and-access-management-iam](), [best-practices](), [devops](), [incident](), [infrastructure-monitoring](), [logs](), [metrics](), [monitoring](), [orchestration](), [production](), [tracing]() ### AI overview The article describes monitoring production multi-agent systems with Amazon Bedrock AgentCore Evaluations for continuous quality assessment and AWS DevOps Agent for autonomous infrastructure incident investigation. ### Source excerpt Multi-agent systems fail in ways traditional monitoring misses. This post presents a dual-layer approach to monitoring production agents: Amazon Bedrock AgentCore Evaluations for continuous quality scoring and AWS DevOps Agent for autonomous infrastructure investigation, shown on a four-agent airline reservation system. ## Run DuckDB analytics on your Amazon DynamoDB data with zero-ETL DevFeed: [Run DuckDB analytics on your Amazon DynamoDB data with zero-ETL]() Original publisher: [Read original article]() Author: Lee Hannigan Published: 2026-09-11T14:53:57Z Content type: tutorial Language: en Sources: [AWS Database Blog]() Topics: [Databases](), [Amazon S3](), [Apache Iceberg](), [AWS Lambda](), [AWS IAM](), [Latency]() Tags: [advanced-300](), [amazon-dynamodb](), [amazon-s3-tables](), [analytics](), [apache-iceberg](), [aws-lambda](), [duckdb](), [how-to](), [iam](), [integration](), [sql](), [technical-how-to]() ### AI overview This tutorial explains how to run ad hoc SQL analytics on Amazon DynamoDB data with DuckDB through a zero-ETL replication flow. ### Source excerpt Run ad hoc SQL analytics on your Amazon DynamoDB data with DuckDB. A zero-ETL integration replicates your table into Apache Iceberg tables on Amazon S3 Tables, and an AWS Lambda function running DuckDB serves SQL queries through an IAM-authorized function URL. ## Set Up Cloud OIDC From the Pulumi CLI DevFeed: [Set Up Cloud OIDC From the Pulumi CLI]() Original publisher: [Read original article]() Author: Sean Yeh Published: 2026-09-11T00:00:00Z Content type: tutorial Language: en Sources: [Pulumi]() Topics: [OpenID connect (OIDC)](), [Command-line interface](), [AWS IAM](), [Cloud](), [AWS Identity and Access Management (IAM)](), [Azure](), [Google Cloud Platform (GCP)]() Tags: [automated](), [aws](), [azure](), [cli](), [cloud](), [configuration](), [docs](), [esc](), [google-cloud](), [how-to](), [iam](), [identity](), [oidc](), [openid-connect](), [product](), [pulumi](), [pulumi-cli](), [security](), [terminal](), [workflow]() ### AI overview This tutorial explains how to use the Pulumi CLI command pulumi env setup to configure Pulumi ESC as an OIDC provider for AWS, Azure, and Google Cloud. It covers interactive onboarding, non-interactive flags for scripts and agents, cloud credentials, account selection, access policies, and automatic creation of identity providers, IAM roles, policy attachments, and ESC environments. ### Source excerpt Pulumi ESC can act as an OpenID Connect (OIDC) provider for AWS, Azure, and Google Cloud, issuing short-lived, signed tokens that these clouds exchange for temporary credentials. This eliminates hard-coded credentials and improves your security posture. Last year, we introduced an onboarding flow in the Pulumi Cloud console that makes it super easy to configure OIDC for your cloud provider in a few guided steps. We're bringing Pulumi Cloud into the CLI so agents can use its capabilities directly from the terminal, without requiring a human to complete steps in the console. The new pulumi env setup command brings OIDC onboarding to that workflow, with interactive prompts for guided setup and non-interactive flags for scripts and agents. pulumi env setup - how it works Run the command with your desired cloud provider (aws, azure, gcp). For example: pulumi env setup aws The command then asks what it needs to configure your cloud, including your credentials, the accounts to configure, and the level of access. The questions differ per cloud. For AWS, it asks: How to authenticate to AWS. It uses the credentials you already have, or it signs you in with AWS SSO. Which accounts to configure. Which policy to attach to the OIDC role. Choose AdministratorAccess for Pulumi Deployments, ReadOnlyAccess for Pulumi Insights, or any other policy ARN. Then, it will print out the plan: About to configure OIDC for organization my-org: account 111111111111: create role pulumi-esc-oidc-622e86ea-319ba4c675bb3c00-role attach arn:aws:iam::aws:policy/AdministratorAccess create ESC environment my-org/aws-login/sandbox-account-env Proceed? [yes/no] After you confirm, the command creates the identity provider, the IAM role, and the policy attachment in each account. It then creates one ESC Environment per account, with the aws-login provider already configured. Non-interactive setup You can also run the command without interactive prompts by passing in the necessary flags. Each cloud has its ow ## Testing application resilience with Amazon SQS and AWS Fault Injection Service DevFeed: [Testing application resilience with Amazon SQS and AWS Fault Injection Service]() Original publisher: [Read original article]() Author: Richard Whitworth Published: 2026-09-09T21:33:59Z Content type: tutorial Language: en Sources: [AWS Architecture Blog]() Topics: [Amazon Simple Queue Service (SQS)](), [AWS Fault Injection Service (FIS)](), [Chaos Engineering](), [AWS IAM](), [AWS Identity and Access Management (IAM)]() Tags: [advanced-300](), [amazon-cloudwatch](), [amazon-simple-queue-service-sqs](), [amazon-sqs](), [automation](), [aws](), [aws-fault-injection-service-fis](), [experiments](), [how-to](), [iam](), [observability](), [resilience](), [technical-how-to](), [testing]() ### AI overview A tutorial on testing application resilience when Amazon SQS data-plane operations fail. It uses AWS Fault Injection Service and Systems Manager Automation to progressively deny queue access, evaluate recovery and observability with CloudWatch metrics, and avoid IAM deny-policy lockouts. ### Source excerpt Learn how to use AWS Fault Injection Service and AWS Systems Manager Automation to run progressive chaos experiments against Amazon SQS queues. Validate that your retry logic, circuit breakers, and dead-letter queues actually work under failure before a real outage hits production. ## Building async Python applications with Tortoise ORM and Amazon Aurora DSQL DevFeed: [Building async Python applications with Tortoise ORM and Amazon Aurora DSQL]() Original publisher: [Read original article]() Author: Lasita Bhattacharya Published: 2026-09-09T15:27:43Z Content type: tutorial Language: en Sources: [AWS Database Blog]() Topics: [DSQL](), [Concurrency](), [AWS IAM](), [Database](), [CRUD]() Tags: [advanced-300](), [amazon-aurora](), [concurrency](), [database](), [dsql](), [how-to](), [iam](), [orm](), [postgresql](), [python](), [rideshare](), [serverless](), [technical-how-to]() ### AI overview A tutorial for building a high-concurrency asynchronous Python rideshare application with Tortoise ORM and Amazon Aurora DSQL. It covers UUID-based models, IAM-authenticated asyncpg connections, OCC retry handling, and asynchronous CRUD operations. ### Source excerpt Build a high-concurrency async Python rideshare application with Tortoise ORM and Amazon Aurora DSQL. This post walks through the key adaptations: UUID primary keys, IAM-authenticated asyncpg connections with a connection-pool patch, individual DDL execution, and optimistic concurrency control (OCC) retry logic. ## Govern models with MLflow and Amazon SageMaker AI Model Registry sync: Part 2 DevFeed: [Govern models with MLflow and Amazon SageMaker AI Model Registry sync: Part 2]() Original publisher: [Read original article]() Author: Melanie Li Published: 2026-09-08T17:03:50Z Content type: article Language: en Sources: [Artificial Intelligence]() Topics: [Amazon SageMaker AI](), [AWS IAM](), [CI/CD](), [Command-line interface]() Tags: [amazon-sagemaker-ai](), [announcements](), [aws](), [aws-identity-and-access-management-iam](), [ci-cd](), [intermediate-200](), [model](), [sync]() ### AI overview This article describes cross-account model-governance patterns for managed MLflow and Amazon SageMaker AI Model Registry sync. It covers hub-and-spoke and hybrid topologies, IAM-based roles, and CI/CD deployment of approved models. ### Source excerpt Governing models across accounts is the next step after automatic model registration. This post extends managed MLflow and Amazon SageMaker AI Model Registry sync to two cross-account governance topologies: a hub-and-spoke pattern that centralizes governance with AWS RAM, and a hybrid pattern that keeps development accounts isolated. ## Getting started with Oracle Database@AWS: A complete onboarding guide DevFeed: [Getting started with Oracle Database@AWS: A complete onboarding guide]() Original publisher: [Read original article]() Author: Raghu Soma Published: 2026-09-08T16:59:29Z Content type: tutorial Language: en Sources: [AWS Database Blog]() Topics: [Oracle Database](), [cloud-infrastructure](), [AWS IAM]() Tags: [aws](), [aws-marketplace](), [best-practices](), [database](), [guide](), [iam](), [infrastructure](), [intermediate-200](), [onboarding](), [oracle](), [oracle-database-aws]() ### AI overview A step-by-step guide to onboarding Oracle Database@AWS, covering service selection, AWS Marketplace offers, prerequisites, OCI tenancy linking, and IAM configuration before provisioning. ### Source excerpt A practical, step-by-step guide to getting Oracle Database@AWS up and running. It covers the five procurement and onboarding steps, from securing your AWS Marketplace offer through validating prerequisites, linking your OCI tenancy, and configuring IAM, so you can move from purchase to a provisioning-ready environment. ## Incident response guide for AWS CloudTrail investigations - Part 2 DevFeed: [Incident response guide for AWS CloudTrail investigations - Part 2]() Original publisher: [Read original article]() Author: Oscar Diaz Published: 2026-09-03T21:15:53Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Incident response](), [AWS CloudTrail](), [AWS IAM](), [web applications]() Tags: [advanced-300](), [amazon-bedrock](), [aws](), [aws-cloudtrail](), [aws-identity-and-access-management-iam](), [best-practices](), [incident-response](), [security-blog](), [security-identity-compliance]() ### AI overview An incident-response guide for investigating AWS CloudTrail events through a multi-stage attack scenario. It traces an SSRF vulnerability on an EC2-hosted web application to IMDSv1 credential harvesting, IAM activity, and unauthorized Amazon Bedrock access across Regions. ### Source excerpt In Part 1 of this guide, we examined two common incident scenarios: cross-account Amazon Simple Storage Service (Amazon S3) data deletion with ransomware implications, and cryptocurrency mining deployed through AWS CloudFormation using exposed AWS Management Console credentials. We also introduced key incident response terminology and investigative frameworks for analyzing AWS CloudTrail events. In this second [...] ## Managing identity source transition for AWS IAM Identity Center DevFeed: [Managing identity source transition for AWS IAM Identity Center]() Original publisher: [Read original article]() Author: Xiaoxue Xu Published: 2026-09-02T20:36:31Z Content type: tutorial Language: en Sources: [AWS Security Blog]() Topics: [migration](), [AWS IAM]() Tags: [advanced-300](), [automation](), [aws-iam-identity-center](), [compliance](), [identity-and-access-management](), [migration](), [security-blog](), [security-identity-compliance](), [technical-how-to]() ### AI overview A walkthrough for safely changing the identity source used by AWS IAM Identity Center, including an Active Directory-to-Okta example. ### Source excerpt September 2, 2026: This post was republished to include Active Directory migration strategies and automation for permission sets. AWS IAM Identity Center manages user access to Amazon Web Services (AWS) resources, including both AWS accounts and applications. You can use IAM Identity Center to create and manage user identities within the Identity Center identity store [...] ## Automate IAM Identity Center governance with continuous discovery and reporting DevFeed: [Automate IAM Identity Center governance with continuous discovery and reporting]() Original publisher: [Read original article]() Author: Jonathan Nguyen Published: 2026-08-31T17:18:31Z Content type: tutorial Language: en Sources: [AWS Security Blog]() Topics: [AWS IAM](), [CSV]() Tags: [advanced-300](), [authentication](), [aws](), [aws-iam-identity-center](), [aws-organizations](), [compliance](), [iam](), [iam-identity-center](), [identity](), [integration](), [security](), [security-blog](), [security-identity-compliance](), [technical-how-to]() ### AI overview The article explains how to plan identity governance for AWS IAM Identity Center and use an automated discovery and reporting sample solution to track application access assignments across an organization. ### Source excerpt AWS IAM Identity Center integrates with external identity provider (IdP) to provide customers with a centralized authentication and authorization solution for AWS resources across AWS Organizations. AWS continues to invest into IAM Identity Center with a growing number of AWS services that natively integrate with IAM Identity Center. As your AWS organization scales, maintaining visibility [...] ## Password spraying campaign targets AWS root user accounts across 150+ organizations DevFeed: [Password spraying campaign targets AWS root user accounts across 150+ organizations]() Original publisher: [Read original article]() Author: Martin McCloskey Published: 2026-08-31T00:00:00Z Content type: article Language: en Sources: [Datadog Security Labs]() Topics: [Amazon Web Services](), [Security](), [Threat Research](), [AWS IAM](), [IAM](), [Authentication](), [passwords]() Tags: [authentication](), [aws](), [aws-iam](), [iam](), [identity](), [password-spraying](), [research](), [security]() ### AI overview Datadog Security Research describes a password spraying campaign that repeatedly targeted AWS root user accounts at more than 150 organizations between July 24 and August 23, 2026. The campaign used Chrome and Firefox user-agent fingerprints and proxy infrastructure; no successful authentications were observed, and the attackers' motive remains undetermined. The article explains the privileges and safeguards associated with AWS root users and recommends reducing reliance on persistent root credentials. ### Source excerpt Datadog Security Research observed a password spraying campaign attempting to authenticate as the AWS root user across more than 150 organizations. ## Durable Digest: August highlights DevFeed: [Durable Digest: August highlights]() Original publisher: [Read original article]() Author: Temporal Technologies Published: 2026-08-27T00:00:00Z Content type: release Language: en Sources: [Temporal Blog]() Topics: [Cloud](), [AI Development](), [AWS Lambda](), [Workers](), [autoscaling](), [Amazon Web Services](), [AI Agent](), [AWS IAM](), [SDKs]() Tags: [ai](), [ai-agent](), [announcements](), [autoscaling](), [aws](), [aws-lambda](), [cloud](), [distributed](), [durability](), [genai](), [google](), [iam](), [infrastructure](), [workers]() ### AI overview Temporal's August 2026 Durable Digest highlights new and preview features for running Workers on AWS Lambda, organizing Temporal Cloud resources, invoking Nexus Operations, and building durable AI applications. ### Source excerpt Highlights this month include new ways to run Workers without managing infrastructure, organize Temporal Cloud resources and build more durable AI applications. ## ICYMI: July 2026 @AWS Security DevFeed: [ICYMI: July 2026 @AWS Security]() Original publisher: [Read original article]() Author: Rodolfo Brenes Published: 2026-08-26T19:32:55Z Content type: news Language: en Sources: [AWS Security Blog]() Topics: [Application Security](), [AI-assisted coding](), [AWS IAM]() Tags: [ai-agent](), [ai-coding](), [ai-security](), [amazon-bedrock](), [announcements](), [aws](), [compliance](), [ddos](), [firewall](), [foundational-100](), [iam](), [secrets](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview A July 2026 AWS Security roundup covering AI-agent security, data protection, supply-chain protection, firewall automation, DDoS mitigation, and compliance readiness. ### Source excerpt If you found time for a bit of vacation this summer, you might be in catch-up mode. Here's a list to help: all the expert blog posts, new service capabilities, code samples, and workshops, in case you missed it, from July 2026. AWS Security Blog post This month's AWS Security Blog posts covered AI agent [...] ## Amazon EKS is replacing the deprecated aws-auth ConfigMap for IAM-to-cluster permission mapping DevFeed: [Amazon EKS is replacing the deprecated aws-auth ConfigMap for IAM-to-cluster permission mapping]() Original publisher: [Read original article]() Author: Yannick Struyf Published: 2026-08-19T18:59:54Z Content type: article Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack]() Topics: [Amazon EKS](), [Kubernetes](), [AWS IAM](), [Access Control](), [Amazon Web Services](), [Cloud](), [migration]() Tags: [access-control](), [amazon-eks](), [aws](), [cloud](), [cloud-native](), [deprecated](), [iam](), [kubernetes](), [migration](), [nutanix](), [platform-engineering](), [post](), [report](), [security](), [sponsor-nutanix](), [sponsored](), [sponsored-post]() ### AI overview The article examines security challenges in Kubernetes and cloud-native infrastructure, focusing on Amazon EKS's replacement of the deprecated aws-auth ConfigMap with an API-driven method for mapping IAM identities to cluster permissions. It also explains how Kubernetes security spans code, containers, clusters, and cloud infrastructure. ### Source excerpt The migration to Kubernetes and cloud native infrastructure has been one of the defining IT trends of the past decade. The post AWS deprecated this EKS auth method. 81% of clusters still run it. appeared first on The New Stack. ## Integrate your Spring Boot application with Amazon ElastiCache using Spring Data Valkey DevFeed: [Integrate your Spring Boot application with Amazon ElastiCache using Spring Data Valkey]() Original publisher: [Read original article]() Author: Chris Gillespie Published: 2026-08-18T16:38:30Z Content type: tutorial Language: en Sources: [AWS Database Blog]() Topics: [App](), [AWS IAM](), [telemetry]() Tags: [amazon-elasticache](), [applications](), [aws-iam](), [cache](), [cli](), [encryption](), [how-to](), [integration](), [intermediate-200](), [observability](), [opentelemetry](), [performance](), [redis](), [serverless](), [spring-boot](), [technical-how-to]() ### AI overview A tutorial for adding Amazon ElastiCache caching to a Spring Boot application with Spring Data Valkey. It covers dependencies, Valkey configuration, TTL settings, encryption, and migration compatibility with Spring Data Redis. ### Source excerpt Learn how to integrate a Spring Boot application with Amazon ElastiCache using Spring Data Valkey for caching. This walkthrough covers adding caching to a serverless cache, plus the advantages of Spring Data Valkey over Spring Data Redis: native AWS IAM authentication, Availability Zone affinity, and OpenTelemetry observability. ## Updates to your AWS Sign-In experience DevFeed: [Updates to your AWS Sign-In experience]() Original publisher: [Read original article]() Author: Vaibhav Chowla Published: 2026-08-17T17:22:33Z Content type: release Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services (AWS)](), [AWS IAM](), [identity and access management](), [AWS IAM Identity Center](), [browser]() Tags: [amazon-web-services-aws](), [aws](), [aws-iam](), [aws-iam-identity-center](), [aws-identity-and-access-management-iam](), [browser](), [identity-and-access-management](), [intermediate-200](), [scripted](), [security-blog](), [security-identity-compliance](), [uncategorized](), [updates]() ### AI overview AWS is gradually introducing a redesigned sign-in and sign-up experience to a limited number of customers. The changes add new account access options, unify the initial email entry point, and refresh the session selection page while existing customers continue using their current credentials and sign-in methods. ### Source excerpt Amazon Web Services (AWS) is gradually introducing updates to the AWS Sign-In and sign-up experience to a limited number of customers. We're sharing these changes so you will know what to expect as we gradually make the updated experience available to more customers. These updates include new options for creating and accessing AWS accounts. To [...] ## AWS Weekly Roundup: EC2 application status checks, IAM role manager, OpenAI Daybreak on Bedrock, and more (August 17, 2026) DevFeed: [AWS Weekly Roundup: EC2 application status checks, IAM role manager, OpenAI Daybreak on Bedrock, and more (August 17, 2026)]() Original publisher: [Read original article]() Author: Channy Yun (윤석찬) Published: 2026-08-17T16:02:36Z Content type: news Language: en Sources: [AWS News Blog]() Topics: [Amazon Web Services](), [Amazon EC2](), [AWS IAM](), [Amazon OpenSearch Service](), [Open Source](), [Amazon Bedrock](), [Linux](), [OpenAI](), [MCP]() Tags: [amazon-bedrock](), [amazon-ec2](), [amazon-elasticache](), [amazon-opensearch-service](), [amazon-sagemaker-jumpstart](), [aws](), [aws-certificate-manager](), [aws-client-vpn](), [aws-identity-and-access-management-iam](), [bedrock](), [iam](), [linux](), [mcp](), [news](), [open-source](), [openai](), [oracle-database-aws](), [week-in-review]() ### AI overview AWS Weekly Roundup highlights EC2 application status checks, automatic IAM role setup, OpenAI Daybreak on Amazon Bedrock, and updates involving OpenSearch, Valkey, and open source community events. ### Source excerpt Last week, AWS contributors joined the OpenSearch and Valkey communities at Open Source Summit Korea 2026 and MCP DevSummit Seoul 2026 to meet open source developers and contributors. At the four-day event, community leaders and users of these Linux Foundation open source projects gathered to share knowledge, collaborate on solutions, and push the projects forward. [...] ## Vibe coded apps are the new shadow IT DevFeed: [Vibe coded apps are the new shadow IT]() Original publisher: [Read original article]() Author: Andy Gombar Published: 2026-08-13T00:00:00Z Content type: article Language: en Sources: [Webflow Blog]() Topics: [AI Agent](), [Security & compliance, Cloud security](), [AWS IAM](), [Amazon Web Services](), [cloud-infrastructure](), [App](), [Security]() Tags: [ai](), [ai-agent](), [aws](), [cloud-infrastructure](), [cloud-security](), [code](), [iam](), [policy](), [security]() ### AI overview Vibe-coded internal applications can become a new form of shadow IT when AI agents rapidly generate code, provision cloud infrastructure, and deploy resources without tickets or security review. The article describes the resulting risks, including exposed endpoints, overpermissioned IAM roles, and production blast radius, and calls for platform controls, review gates, and detection. ### Source excerpt Vibe-coded internal apps ship with IAM roles and no ticket filed. This baseline covers platform controls, review gates, and detection for what slips through. ## How AWS IAM role manager rethinks the starting point for IAM roles DevFeed: [How AWS IAM role manager rethinks the starting point for IAM roles]() Original publisher: [Read original article]() Author: Zach Jiang Published: 2026-08-12T22:16:55Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [AWS IAM]() Tags: [aws](), [aws-iam](), [aws-identity-and-access-management-iam](), [aws-lambda](), [iam](), [intermediate-200](), [security-blog](), [security-identity-compliance](), [technical-how-to]() ### AI overview AWS IAM role manager automates creation and attachment of IAM roles for supported AWS service-console workflows, letting developers begin with default roles and refine permissions later. ### Source excerpt When you build a new application or capability on Amazon Web Services (AWS), you want to focus on what you're building. Getting a service running almost always begins with AWS Identity and Access Management (IAM). Many AWS services that act on your behalf need an IAM role, an identity the service assumes to access your [...] ## A decade of mathematical certainty: Reflections on the Automated Reasoning Group DevFeed: [A decade of mathematical certainty: Reflections on the Automated Reasoning Group]() Original publisher: [Read original article]() Author: Byron Cook Published: 2026-08-11T16:22:19Z Content type: article Language: en Sources: [Amazon Science homepage]() Topics: [Automated reasoning](), [Formal verification](), [Math and Logic](), [systems](), [Amazon Web Services](), [VPC](), [network security](), [Security](), [AWS IAM](), [Amazon S3](), [Cloud](), [amazon]() Tags: [agentic-ai](), [amazon](), [amazon-web-services-aws](), [automated-reasoning](), [aws](), [compliance](), [formal-verification](), [network-security](), [security](), [security-privacy-and-abuse-prevention](), [vpc](), [vulnerabilities]() ### AI overview Amazon's Automated Reasoning Group reflects on a decade of applying mathematical logic, formal verification, and program analysis to AWS security and reliability. The article describes how research projects became production systems, including Tiros for VPC and network analysis and Zelkova for analyzing policies, S3 Block Public Access, and IAM Access Analyzer. ### Source excerpt Ten years after we founded the Automated Reasoning Group, mathematical logic has moved from academic research into production services that secure millions of customer workloads -- demonstrating that systems can be provably correct, not just probably correct. [Next page]()