[Last Week in AWS] Issue #495: The Week the Internet Burned Down

Why... why do I need to reserve capacity for on-demand databases? Oh, right, because the cloud is full.

But not Ohio, so I still can't use it in my test account. At some point picking non-us-east-1 regions for your IAM Identity Center should come with a warning label.

This is big news for folks who are looking for an angle in their Nvidia negotiations. "Well we got it working on Trainium so are you SURE you can't meet our requirements?" Maybe it will work (it won't), but it's a direction anyway.

One click, instant activation, 4 9s SLA, and you're back to dealing with Megaport. You can't have everything...

Last week's cybersecurity updates now support a dis-associative state. Come, gaze into the abyss with me.

Oh, now look who's suddenly all about getting away from vendor lock-in. This seems credible!

This has the distinct smell of being shoved out the airlock before re:Invent in light of... the current state of the internet.

25 services behind one ALB will come as a devastating blow to the morale of the bean-counters on the ALB team.

That's a lot of acronyms. But yes, a 3 month latency target for AWS + AI + SAP seems, if anything, to be a smidgen ambitious.

First; AAAAHHHHHHHH! Now then: Both the kernel running your thermostat and the TCP stack bolted beside it need patches, which is delightful news if your fleet is soldered into a parking garage in Ohio. Down in C, an MQTT adapter with no size opinions will allocate whatever a stranger asks for, and PHP runtimes doing PHP things round out the classics section. The rest is a treatise in support of the idea that nobody checks who's allowed to do what. A serverless pipeline hands out more IAM privilege than ordered, the SageMaker SDK never asks who owns that bucket, Athena skips an authorization check mid-query, and the SAM CLI's Terraform hook runs whatever shell you smuggle in. Then we arrive at the agents, where a WhatsApp channel forgot authorization entirely and an A2A server hands your data to someone else's session. We are wiring autonomous agents into production on top of a permission model that two separate teams forgot to implement this month alone.