Catching Up on the Latest AWS Blog Updates Around October 2026 – Materials for the AWS Trend Check Study Session
This page has been translated by machine translation. View original
Hello, this is Usuda.
Everyone, are you keeping up with the latest AWS news? (greeting)
I turned the materials from our internal AWS Trend Check Study Session into a blog post.
The AWS Trend Check Study Session is an internal study session with the theme "Let's catch up on the huge amount of AWS news released every day through blog posts and all become trendy together."
All sorts of blog posts are published every day on this blog site, DevelopersIO. From among them, mainly AWS updates, I pick the ones I personally found interesting (plus ads for my own blogs) and briefly introduce them about once a month.
October had 142 picks. That's more than the previous two months, but it's too early to blame the pre-re:Invent excitement, so please be prepared for November.
By the way, if you only want to catch up on the latest AWS news, I recommend Weekly AWS, and for generative AI, Weekly Generative AI with AWS. But the DevelopersIO blogs offer insights, explanations and fun that differ from AWS's official ones, so we catch up through blogs. There is also a lot of interesting information besides AWS!
Alright, let's go
Summaries
Summary of AWS Technical Support Notes for September 2026 1/142
Memo: One question, one answer
I Checked the Migration Guides for the 7 Services (DevOps Guru and Others) with End-of-Life/Migration Announcements on September 29, 2026 2/142
Memo: Goodbye
Classmethod Data Analytics Newsletter (AWS Data Analytics Edition) – October 2026 Issue 3/142
Memo: A roundup of updates such as the Amazon Quick mobile app update
AI & Machine Learning
I Tried AWS's Judgment-Only Model "Strands Decider 2B" on an M4 Mac and Compared It with Kev and Jev 4/142
Memo: You can make judgments using a local GPU
AWS MCP Server Now Supports the Tokyo Region, So I Tried It 5/142
Memo: You can use it in Tokyo
[Update] The AWS CLI Can Now Check for and Bulk-Update Agent Toolkit for AWS Skills, So I Tried It 6/142
Memo: Bulk update with aws agent-toolkit update-skill --all
[Update] I Ran a SageMaker AI Processing Job from Claude Code Using the AWS AI/ML Skills in Agent Toolkit for AWS 7/142
Memo: AI agents such as Claude Code can now automatically run MLOps tasks like data preprocessing on SageMaker AI
[Update] You Can Now Attach Custom Metadata to AWS Agent Registry Records 8/142
Memo: You can attach attributes such as internal-only and filter by them
Routing Low-Priority Alarms to a Custom Agent Using DevOps Agent Event Triggers and a Skip Skill 9/142
Memo: Note that a single webhook launches both the main investigation and the custom agent
[Update] AgentCore CLI v1.0.0 Has Been Released! 10/142
Memo: A development and operations tool for AI agents. It became more convenient in various ways, such as running Harness from outside a project
[Update] AWS Step Functions Workflows Can Now Be Used as AI Agent Tools via AgentCore Gateway! 11/142
Memo: From Gateway to SFn
I Checked the Anthropic Usage Policy Update (Effective November 12, 2026) Delivered via AWS Health 12/142
Memo: The requirements for personalized advice were revised, and internal drafts and analysis may no longer be treated as personalized
Bedrock
I Tried Grok 4.7 on Amazon Bedrock Runtime with the AWS CLI 13/142
Memo: Global and US inference profiles
[Presentation Materials] I Spoke at DevelopersIO 2026 Osaka with the Title "Let's Use AgentCore Gateway!" #devio2026 14/142
Memo: An easy-to-understand summary
I Tried GPT-6.1 Sol on Amazon Bedrock 15/142
Memo: Cache read price is half, with performance comparable to GPT-6 Astra
Claude Haiku 5.5 Is Now Available on Amazon Bedrock 16/142
Memo: Pricing now changes with the 1M context size
Claude Sonnet 5.5 Cache Read Price Cut in Half; I Measured the Effect of the Price Reduction 17/142
Memo: It got cheaper
I Tried the Ultrafast Mode Now Supported by GPT-6.1 Sol on Amazon Bedrock 18/142
Memo: The unit price is 6 times Standard
Reasoning Summaries Are Now Available for OpenAI Models on Bedrock, So I Tried Them 19/142
Memo: You receive a compact summary of the thinking process, making it easier to trace
[Update] Amazon Bedrock AgentCore Gateway Now Supports Private CA Certificates, So I Connected to an MCP Server in a VPC 20/142
Memo: No need to put an internal ALB or similar in between
Bedrock Structured Outputs Now Supported on All Claude Models; I Tried It with the Latest Haiku 5.5 21/142
Memo: Works with Claude Haiku 5.5 and others too
[Update] A Standard Tier Was Added to the Contextual Grounding Check in Amazon Bedrock Guardrails, So I Tried It 22/142
Memo: Checking whether answers are appropriate now works well even in Japanese
[Update] AgentCore Gateway Rate Limits Can Now Be Split by Request Header or Body Values 23/142
Memo: Fine-grained limits such as per user are possible
[Update] AgentCore Gateway Now Supports Bedrock's InvokeModel API and Model Fallback, So I Tried It 24/142
Memo: Gateway handles it nicely without you implementing retries or destination switching in the application
[Update] Prompt Shortening Is Now Available in Amazon Bedrock Advanced Prompt Optimization, So I Tried It 25/142
Memo: It was originally a quality-maximizing feature, and now an option to shorten while maintaining quality has been added
I Tried the Domain Filtering Now Supported by Amazon Bedrock Web Search 26/142
Memo: You can specify allow/block. I'd like it to support malicious domain lists
I Tried the New GPT-6.1 Model "Terra" on Amazon Bedrock 27/142
Memo: Nothing noteworthy
Quick
[Update] Hierarchy Filters Were Added to Amazon Quick Sight, Letting You Combine Drilldowns into a Single Control 28/142
Memo: Easy to read
[Update] Live Dataset Data Can Now Be Used in Amazon Quick Apps, So I Compared Direct Query and SPICE 29/142
Memo: Apps can reference data, so this is where it really starts to shine
[Update] Brand Templates Are Now Available in Amazon Quick, So I Created a Document from a Proposal Template 30/142
Memo: A tool that speeds up document creation
[Update] Smart Approvals, Which Auto-Approves Agent Actions, Is Now Available in Amazon Quick, So I Tried It 31/142
Memo: A review model evaluates and routes things nicely for you
Kiro
Claude Sonnet 5.5 Is Now Selectable in Kiro, So I Tried It 32/142
Memo: Nice
[Update] Kiro Crew v0.8.0 Lets You Access Links Blocked by Redaction 33/142
Memo: Very important
[Update] Administrators Can Now Restrict Sign-In Methods in Kiro, So I Tried It 34/142
Memo: You can do things like allow only IdC
I Tried the New Kiro CLI Feature "/sandbox" to Restrict Scripts and Local MCP Server Communication 35/142
Memo: You can apply a sandbox to MCP as well and set network restrictions
Kiro Supports Kimi K3; I Compared Its Output with Claude and GPT Models 36/142
Memo: It may be good to use alongside others as a model with a different perspective
[Update] I Enabled the Dynamic Dashboard (Preview) in Kiro Crew v0.9.0 and Checked How to Use It 37/142
Memo: I want to use this across sessions
[Update] Kiro CLI v.2.31.1 Now Renders Mermaid Diagrams as Text in Chat, So I Tried It 38/142
Memo: It's doing its best
[Update] The Memory Feature Is Now Available in Kiro IDE v1.4, So I Checked It 39/142
Memo: It didn't have memory?
I Tried Claude Haiku 5.5, Now Selectable in Kiro CLI 40/142
Memo: Cheap at 0.06x credits
Claude Sonnet 5.5 and More Are GA in Kiro, So I Summarized the Current Model List 41/142
Memo: Claude Fable 5.1, Claude Sonnet 5.5, and GPT-5.6 Terra and Luna are GA
[Update] I Tried the Team Leader Agent "kirocrew-team-lead" Implemented in Kiro Crew v0.10.0 42/142
Memo: The team leader agent is like a management agent that launches worker agents
[Update] Kiro Crew v0.10.0 Lets You Specify a Backend per Worker, So I Used Claude Code's Slack Connector from Kiro Crew 43/142
Memo: Nice
I Tried Which Operations Require Confirmation with the New Kiro CLI V3 Feature "Approve for me" 44/142
Memo: Looks like it will handle things nicely
Visit the Halloween-Themed Kiro Site and Join "Kiroween"! 45/142
Memo: kawaiiiiiiiiiiiiiiiiii
Contact Center & AI
Claude Sonnet 5 Is Now Selectable for Amazon Connect AI Agents 46/142
Memo: Nice
Amazon Connect Customer Gained a Feature That Suggests Improvements to Evaluation Forms, So I Tried It 47/142
Memo: You can check for missing evaluation criteria while configuring the form
You Can Now Select the Generative AI Version in Amazon Connect Customer Performance Evaluations 48/142
Memo: You can try preview versions
You Can Now Specify Flow Versions and Aliases in Amazon Connect Customer 49/142
Memo: You can manage them with aliases
GPT 5.6 Terra and GPT 5.6 Luna Are Now Selectable for Amazon Connect Customer AI Agents 50/142
Memo: You can use them
Security
[Presentation Materials] Adding AWS DevOps Agent Investigation Results to Amazon GuardDuty Finding Notification Emails #devio2026 51/142
Memo: Looks like it can be operated nicely
[Update] Amazon GuardDuty Can Now Detect Unauthorized Use of Leaked AWS Lambda Credentials (InsideAWS Edition) 52/142
Memo: InsideAWS detection works for Lambda too
Can GuardDuty AI Protection Really Prevent Japanese Prompt Injection? #devio2026 53/142
Memo: Investigation results show a gap with reality, e.g., it couldn't stop Japanese prompt injection unless set to Standard
[Update] Amazon GuardDuty Enablement Can Now Be Centrally Managed with AWS Organizations Declarative Policies 54/142
Memo: The way AWS Organizations-integrated services are controlled may change going forward?
[Update] AWS Security Agent Automatic PR Review Can Now Be Narrowed by Target Branch or Label 55/142
Memo: Nice
ACM ACME Certificate Issuance Now Supports PrivateLink, So I Tried It in a VPC with No IGW or NAT Gateway 56/142
Memo: Watch out for running costs
[Update] AWS Continuum Penetration Testing Now Supports CI/CD Pipeline Integration, So I Tried It with GitHub Actions 57/142
Memo: Running it every time might raise cost concerns
[Update] Network Restrictions Can Now Be Applied to the IAM Identity Center Identity Store API 58/142
Memo: You can restrict the access sources for management operations and SCIM sync
[Presentation Materials] Steps for Switching from Trend Cloud One to TrendAI Vision One ~ Questions and Pitfalls to Know in Advance ~ 59/142
Memo: Let's migrate
AWS Security Bulletin 2026-137-AWS (CVE-2026-99999) Doesn't Apply to Normal EC2. I Checked the Scope of Impact 60/142
Memo: Take action especially if you use KVM or similar
I Tried Re-validating Findings with AWS Continuum for Penetration Testing 61/142
Memo: It finishes in 32 minutes, so it's an essential feature
I Tried Setting a Task Time Limit (Budget Management) in AWS Continuum for Penetration Testing 62/142
Memo: Starts from 20 hours
[Update] GuardDuty RDS Protection Now Supports Data Activity Monitoring and Can Detect Data Exfiltration and Destruction 63/142
Memo: Detects retrieval of large amounts of data, abnormal DROPs, and so on
After the php2shell Announcement, I Tried Rules to Block or Restrict Multipart POST with AWS WAF on an ALB 64/142
Memo: Fundamental vulnerability remediation is needed, but let's use WAF as a mitigation too
I Tried the AWS WAF Rules to Mitigate PHP2Shell Introduced in AWS Security Bulletin (2026-143-AWS) and the AWS Security Blog 65/142
Memo: Content from a little after publication
I Compared the AWS WAF Managed Rule PHP2Shell_BODY with a Custom Rule, Testing with CloudFront's 64 KB Body Inspection 66/142
Memo: The managed rule group for PHP now covers it as well
[Presentation Materials] I Talked About "Security Thinking for AI-Driven Development Environments" #devio2026 67/142
Memo: The way of thinking is well organized
KMS Now Supports ML-KEM Keys, So I Tried It 68/142
Memo: NIST IR 8547 deprecates elliptic curve DH after 2030, so let's consider migrating
[Update] I Tried Amazon GuardDuty Custom Detection Rules 69/142
Memo: Can detect things such as VPC Flow Logs deletion with the managed rules provided
[Update] I Tried Seeing What the AWS Secrets Manager Console's Recommended Actions Point Out 70/142
Memo: It suggests various things, down to replication and rotation schedules
[Update] I Ran an On-Demand AMI Scan Without Enabling Amazon Inspector 71/142
Memo: In Tokyo it's 0.51 USD per scan
I Checked the Kernel Update for CVE-2026-98432 on Amazon Linux 2023 (Linux Kernel TCP Vulnerability) 72/142
Memo: Let's update
Monitoring, Operations & Management
I Compared the Estimated Scan Volume of the New CloudWatch Logs Insights "estimate" Feature with Actual Measurements 73/142
Memo: You can now do a dry run to get a sense of cost before executing
I Tried the New CloudWatch Logs Feature "Auto Indexing" 74/142
Memo: Queries are automatically sped up and made cheaper
[Update] A Version Catalog Was Added to AWS Health, Letting You See Service Support End Dates in a List 75/142
Memo: Easy to read
I Used AWS Capabilities by Region to Find Features Not Yet Available in the Target Region and Set Up Launch Notifications 76/142
Memo: Easy to understand!
I Tried the New CloudWatch Pipelines Feature "Conditional Log Routing" 77/142
Memo: You can do things like separate only error logs
[Update] Amazon CloudWatch Alarms Can Now Include Tags in the Notification Payload 78/142
Memo: Easy to understand
[Update] SSM Document Sharing Now Uses a New Method with AWS RAM 79/142
Memo: You can migrate too
Opting Out of the CloudTrail S3 Data Events Being Added on 2026/11/2 via Advanced Event Selectors 80/142
Memo: Recording expiration deletions, delete marker creation, storage class transitions and so on is nice, but they're often unnecessary, so opting out seems fine. I'd want to keep authentication failure events
[Update] AWS Config Now Supports 77 New Resource Types 81/142
Memo: Lots more added
Cost Management & Optimization
I Aggregated by Model Using Amazon Bedrock Product Attributes in Cost Explorer 82/142
Memo: Easy to see
Compute
Amazon EC2 Spot Placement Score Now Supports Local Zones, So I Checked It 83/142
Memo: Useful when using Local Zones
Amazon EC2 Future-Dated On-Demand Capacity Reservations Now Support Postponing the Start Date, So I Tried It 84/142
Memo: There are no cancellation fees anymore, but there are considerations such as the commitment period increasing
I Checked the Contents of the September 2026 Amazon Corretto Release and How to Tell Versions Apart 85/142
Memo: Memory leak fixes and more
Amazon EC2 Capacity Blocks for ML Pricing Update, October 2026 Edition 86/142
Memo: Price increase of 15% to 26.5%
I Created an AMI with EC2 Image Builder Using an ASG Instance as the Build Base 87/142
Memo: Uses a running instance as the base. Not very healthy
AWS Batch Job Success Counts and Wait Times Can Now Be Viewed in Amazon CloudWatch, So I Tried It 88/142
Memo: Metrics for job state transitions are now available
AWS Batch Now Supports Bulk Cancellation and Bulk Termination of Jobs, So I Tried It 89/142
Memo: Easy!
AWS Parallel Computing Service Now Supports Node Lifecycle Actions, So I Tried It 90/142
Memo: You can now run scripts placed in S3 or elsewhere while a compute node is starting up
AWS Parallel Computing Service Now Supports Scaling Logs, So I Tried It 91/142
Memo: Compute node launches and terminations are now recorded with reasons
[Update] WAF Can Now Be Used on Amazon Lightsail Distributions 92/142
Memo: Block-only with provided managed rules. No additional charge
I Tried the New Amazon EC2 Auto Scaling Feature Launch Before Terminate 93/142
Memo: Useful when you'd rather not reduce capacity
I Tried the Amazon Corretto October 2026 Quarterly Update 94/142
Memo: Includes TLS hybrid key exchange (JEP 527) support and more
Networking & Infrastructure
[Update] An Analytics Tab Was Added to Route 53 Global Resolver DNS Firewall, So I Checked It 95/142
Memo: Metrics are a bit easier to see
VPC Origins Support Dual-Stack. I Tried Whether CloudFront Origin Requests Reach the ALB over IPv6 96/142
Memo: IPv6 now works between CF and ALB
[Update] Network Firewall's SNI Spoofing Protection Was Strengthened, So I Reproduced and Verified It 97/142
Memo: No additional charge, so let's use it
I Connected Two VPCs with Overlapping CIDRs Using 1:1 NAT on Transit Gateway 98/142
Memo: Both TGW and Cloud WAN support 1:1 NAT. You set up virtual IPs
I Tried AWS Network Firewall Container Association 99/142
Memo: You can control accessible domains per Pod
I Checked the Connection to Google Cloud in the AWS Interconnect - multicloud Tokyo Region with the AWS CLI 100/142
Memo: Tokyo Region supported
Data Analytics
I Tried Direct Queries to S3 and S3 Tables with the New Aurora PostgreSQL Feature "aurora_analytics" 101/142
Memo: Direct access
I Tried the New S3 Vectors Feature "Metadata Prefiltering" 102/142
Memo: It changed to a method that filters first and then searches
[Update] All Apache Iceberg V3 Data Types Are Now Available in Amazon S3 Tables, So I Tried Them in an AWS Glue 6.0 Interactive Session 103/142
Memo: Supports geometry/geography and more
[Update] System-Managed Iceberg Materialized Views Are Now Available in AWS Glue, So I Compared Writes with Regular Materialized Views 104/142
Memo: You can create MVs that don't get rewritten on their own. However, note that DPUs go up and it becomes more expensive
[Update] Apache Iceberg Materialized Views Can Now Be Created in Amazon Redshift, So I Tried It 105/142
Memo: Conventional MVs were stored in Redshift and readable only by Redshift, but now they're stored in S3 and readable from anywhere
Databases
[Update] Public Endpoints Are Now Available for ElastiCache Serverless for Valkey 106/142
Memo: Easy to use from non-VPC Lambda and external apps. IAM authentication and TLS 1.3 are required for connections
Amazon Aurora / RDS Now Supports AMD EPYC-Powered db.r8a 107/142
Memo: From r7i to db.r8a, 20% more expensive but double the cores
I Tried MySQL 26.7 in the Amazon RDS Database Preview Environment 108/142
Memo: Naming has changed as well, and Innovation and LTS now run in parallel
I Measured the 16 ACU Scaling of Aurora Serverless v2 109/142
Memo: Where it previously reached a maximum of 12 ACU in the first second during a spike, it can now go up to 16 ACU
[Update] Partial Indexes Are Now Available in Amazon Aurora DSQL 110/142
Memo: Only rows matching a condition are indexed, improving search speed
I Tried Aurora DSQL Partial Indexes with Opt-In and Logical Deletion 111/142
Memo: Verification results say to use them only when the indexed data is extremely small, at most 20% of the total, and queries searching the data that doesn't match the condition will never run
Filter Specification Added to DynamoDB S3 Export. I Tried It with Full and Incremental 112/142
Memo: You can narrow down the output data
[Update] Amazon DynamoDB Accelerator (DAX) Is Now Available in the Osaka Region 113/142
Memo: Plain DynamoDB in Osaka seems faster than DAX in Tokyo
[Update] "AWS Advanced Ruby Driver Wrapper," Which Speeds Up Amazon Aurora Failover from Ruby Apps, Is GA, So I Tried It 114/142
Memo: The standard 36 seconds became about 6 seconds
[Update] Amazon Aurora PostgreSQL 18.6 Has Been Released, So I Checked the Babelfish 6.2 Update Contents 115/142
Memo: You can create XML nicely and so on
Amazon RDS Snapshot Full Snapshot Size Is Also Supported in the Management Console, So I Checked It 116/142
Memo: You can see it right away when you want a quick look
I Tried PostgreSQL 19 RC1 in the Amazon RDS Database Preview Environment 117/142
Memo: Fixes such as normalizing keys in COPY TO (JSON output)
[Update] Snapshots Can Now Be Taken from Read Replicas in Amazon RDS for SQL Server 118/142
Memo: Avoids interruptions when using read replicas on Enterprise Edition
I Tried the New Amazon RDS Feature "Capacity Reservations" (On-Demand Capacity Reservations) 119/142
Memo: At least 32 vCPUs per AZ, with a minimum 14-day commitment
[Update] Replicas Can Now Be Disassociated in Amazon DynamoDB Global Tables 120/142
Memo: You can keep using it as a standalone table
[Update] ElastiCache Serverless for Valkey Now Supports Online Migration, So I Migrated from Redis OSS on EC2 121/142
Memo: You can migrate online with no downtime from self-managed Valkey / Redis OSS
Aurora Serverless (PostgreSQL) Maximum Capacity Is Now 384 ACU, So I Checked It 122/142
Memo: Maximum capacity went from the previous 256 ACU to 384 ACU (50% increase)
[Update] You Can Now Change the Durability of Existing Amazon ElastiCache for Valkey Clusters 123/142
Memo: No need to recreate
[Update] Amazon RDS Proxy Now Supports SQL Server 2022, So I Connected to It 124/142
Memo: 2025 is still unsupported
I Verified Whether Post-Quantum TLS Key Exchange for Aurora PostgreSQL Can Be Configured with Terraform 125/142
Memo: You can use it
Containers & Serverless
ECS Now Supports Blue/Green Deployments for Services Exposed via VPC Lattice, So I Tried It 126/142
Memo: Blue/Green and canary deployments became easy
AWS Lambda Durable Functions Have Been Integrated with Pydantic AI, So Let's Try It 127/142
Memo: Saving and resuming checkpoints is easy
[Update] AWS Transfer Family Managed Workflow Logs Can Now Be Sent to a Dedicated CloudWatch Log Group 128/142
Memo: You can split the destination per workflow
[Update] Custom Ports Can Now Be Used on AWS Transfer Family Public SFTP Servers 129/142
Memo: Not much need to change it, though
I Tried the Now-GA Lambda Web Functions in the Tokyo Region 130/142
Memo: App code receives and handles HTTP requests directly. Request pricing is 1.5x and memory pricing is about 1/3, but you're charged for active CPU time instead. Since it can process requests in bulk, there are pros and cons
[Update] Amazon ECS Adds a New Metric LiveTaskCount, and RunningTaskCount Becomes Free 131/142
Memo: The benefit is that you can count without using Container Insights
With Lambda Web Functions on Node.js, Do Other Requests Wait When You Run CPU-Bound Processing? 132/142
Memo: With Go, it can interrupt and respond quickly even when sharing
I Tried the Lambda Durable Functions Limit Increases (30,000 Operations and 1MB Checkpoint Size) 133/142
Memo: Operations per execution went from 3,000 to 30,000, and checkpoint payload size from 256KB to 1MB
I Compared the Execution Time of the Now-GA Lambda Durable Functions Go SDK with the Python SDK 134/142
Memo: Python SDK 2.0.1 is also out and fast
I Migrated the DevelopersIO Backend from ECS to Lambda Web Functions and Made It Multi-Region 135/142
Memo: An example that gained benefits such as cost reduction and faster overseas access
[Update] Lambda Recursive Loop Detection Now Supports EventBridge's New Custom Event Bus, So I Tried It 136/142
Memo: Until now it supported SQS, S3, SNS, and Lambda-to-Lambda invocations
I Replicated Existing Images to Another Region with Amazon ECR Replication Backfill 137/142
Memo: You can replicate existing images without pulling them locally
[Update] I Tried Whether Per-Container Memory and Compute Limits Are Respected with Amazon ECS GPU Sharing 138/142
Memo: You can share
I Checked the AWS Lambda Runtime Update for CVE-2026-111497 139/142
Memo: There are times when you need to take action on Lambda too
Storage
AWS Backup Logically Air-Gapped Vaults Now Support FSxN 140/142
Memo: Great for ransomware protection
Developer Tools & CI/CD
[Update] "Force Rollback" Was Added to the Advanced Troubleshooting Options of AWS CloudFormation's "Continue Update Rollback," Letting You Skip Resources That Can't Be Rolled Back All at Once 141/142
Memo: Slightly easier to specify
[Update] AWS SAM CLI sam build Now Installs npm Workspaces Monorepo Dependencies Only Once 142/142
Memo: It's a beta feature, but builds get shorter
Summary
Everyone, did you become trendy? If you find an update you're curious about, try it out right away!
Let's keep catching up at full speed!
