AWS published CVE-2026-87911, a CVSS 9.6 command injection in its own postgres-mcp-server, where one COPY ... TO PROGRAM line runs a shell on the host. The read-only promise lives in a regex filter that lets the COPY keyword through.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+25
- Incentives40
- Confidence50
At Dreamforce 2026 the company said Model Context Protocol will carry its context and actions into both hyperscalers' agent products, while AWS agents move into Slack. The connector work becomes a scoping job.
Reality
- Evidence32
- Adoption18
- Hype gap+22
- Incentives76
- Confidence45
An audit of a post-Series A fintech serving 35 requests a second puts one observability line at $3,800 a month, more than five times the two bare-metal machines that replaced the whole AWS cluster.
Reality
- Evidence22
- Adoption12
- Hype gap+55
- Incentives68
- Confidence26
A Savings Plan and a Reserved Instance buy the same discount ceiling. Only one of them follows your workload. The residual RI portfolio now comes down to Redshift nodes and OpenSearch.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+14
- Incentives38
- Confidence55
Terraform applies the repository, not your merge request, so deploy duty means carrying a neighbouring team's encryption flag into a resource that has no in-place path for it; the disclosure sits on line 267 of a 427-line plan.
Reality
- Evidence63
- Adoption
- Insufficient
- Hype gap−8
- Incentives34
- Confidence57
The cloud bill is organised by service and region and can never see your tenants. So any per-tenant number is a blend of exact tagging and an honest estimate, and it fits in two small tables.
Reality
- Evidence28
- Adoption
- Insufficient
- Hype gap+15
- Incentives22
- Confidence38