AWS's CloudWatch Omni, generally available since September 23, lets Okta and Entra ID users investigate incidents without AWS console access. CloudWatch dashboard sharing has let outsiders view prebuilt graphs since 2020, so what Omni adds is the investigation itself, one of the reasons teams paid for third-party platforms.
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+20
- Incentives60
- Confidence55
Django's icontains made Postgres filter UPPER(product_name) while a team's pg_trgm index covered the raw column, so product searches ran for several seconds. Having the indexes proved nothing until the team read the generated SQL beside the query plan.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap−5
- Incentives
- Insufficient
- Confidence60
Amazon Bedrock now runs Claude Opus 5, Sonnet 5 and Haiku 4.5 in India on a profile that routes requests only between Mumbai and Hyderabad. Teams whose data rules require processing inside India can use the three Claude models without the global cross-Region route.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+10
- Incentives70
- Confidence60
AWS made CloudWatch Omni generally available with 17 built-in evaluators that score an AI agent's answers on live production traffic. For operators, the job moves from confirming an agent is running to deciding whether an automated score is good enough to gate a release.
Reality
- Evidence35
- Adoption20
- Hype gap+30
- Incentives65
- Confidence35
AWS collapsed two STS size limits into one 4,096-byte cap and now reports the assembled token's actual size in API responses, CloudWatch and CloudTrail, with a new parameter that pads tokens for testing.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+5
- Incentives35
- Confidence65
AWS's new observability surface discovers services and adjusts alarms against the targets you set, and signs engineers in through IAM Identity Center at a URL of your own. Instrumentation coverage decides what it can see.
Reality
- Evidence35
- Adoption15
- Hype gap+30
- Incentives80
- Confidence55
AWS WAF's Bot Control can now answer an AI agent with an HTTP 402 and payment instructions. The action runs only on CloudFront distributions, and AWS says the classification behind it is probabilistic and should be tested first.
Publishers:docs.aws.amazon.com
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+15
- Incentives70
- Confidence58
AWS has published a pipeline that pulls Bedrock guardrail traces out of model invocation logs, rewrites them as OCSF Detection Findings, and lands them in the CloudWatch store where analysts already query CloudTrail and VPC Flow Logs.
Reality
- Evidence58
- Adoption22
- Hype gap+12
- Incentives76
- Confidence60
An operator writing on dev.to describes a CPU target-tracking policy and a per-instance free-slot step policy taking turns on the same Auto Scaling Group, with tripling the alarm window only slowing the oscillation to six minutes.
Reality
- Evidence55
- Adoption20
- Hype gap+12
- Incentives25
- Confidence55
AWS counted 13 SageMaker inference launches so far in 2026. The one that changes production behaviour most is a prioritized list of up to five instance types, each allowed its own model optimization settings.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+25
- Incentives85
- Confidence55
AWS says both coding agents it tested defaulted to Text Generation Inference and billed GPU time for each crashed deploy before pivoting to vLLM. Its answer is six editable skill files the agent reads on demand.
Reality
- Evidence44
- Adoption11
- Hype gap+21
- Incentives76
- Confidence56
AWS does not offer SnapStart on the Native AOT managed runtime, so this test compared two runtimes as well as two features, and that missing combination is also why the numbers map onto a real deployment choice.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+10
- Incentives20
- Confidence55
A dev.to writeup makes the case for trying Bedrock Agents or AgentCore Runtime before containers, and for putting real limits on the gateway, because a looping agent spends money without ever raising an error.
Reality
- Evidence28
- Adoption
- Insufficient
- Hype gap+18
- Incentives32
- Confidence36
AWS now says it takes full operational responsibility for Elastic Beanstalk production environments for the life of the application. Underneath, Cluster Mode puts multiple apps on one shared Amazon EKS cluster.
Reality
- Evidence35
- Adoption20
- Hype gap+35
- Incentives90
- Confidence60
In HackerOne report #3022516 the trail was multi-region, the metric filter for unauthorised API calls existed and the alarm published to an SNS topic, while threat_detection.enabled read false. Turning it on costs one CLI call.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+10
- Incentives65
- Confidence60
IAM Access Analyzer already names the unused permissions and writes the tightened policy. A new AWS pattern sorts each finding by how the role was created and files the fix as a pull request or an issue.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+12
- Incentives65
- Confidence55
AWS's post on the deployment gives the sandbox defaults that decide whether it fits an inline path, among them a 15-minute session time-to-live configurable to eight hours and a choice between VPC-only and public internet access.
Reality
- Evidence46
- Adoption62
- Hype gap+25
- Incentives82
- Confidence52
A dev.to writeup deployed AWS's own migration sample, reran the repo's diff-checking script, and reports that the managed runtime, gateway and memory are worth taking while the LangGraph loop stays as written.
Reality
- Evidence63
- Adoption22
- Hype gap−8
- Incentives45
- Confidence60
AWS shows three agents sharing one AgentCore container across two hosting paths. The orchestration framework absorbs the split; the OpenTelemetry instrumentation does not.
Reality
- Evidence74
- Adoption
- Insufficient
- Hype gap+8
- Incentives86
- Confidence66
AWS has made the Quick desktop assistant generally available on macOS and Windows and pitched it to IT as the sanctioned answer to shadow AI. It runs in Frankfurt, London and Ireland, and not in the Brandenburg sovereign cloud.
Reality
- Evidence55
- Adoption34
- Hype gap+28
- Incentives74
- Confidence55
Earlier coverage
- A poorly scoped supervisor prompt sends 20 percent of requests to the wrong specialist
Build · September 11, 2026 · 1 publisher
- Guardrail policies give one IAM role a different reach in every Slack channel
Build · September 11, 2026 · 1 publisher
- Amazon pitches the Quick desktop app to IT as containment for shadow AI
Build · September 10, 2026 · 1 publisher
- Requiring IMDSv2 cuts off every caller that never learned the token PUT
Build · September 6, 2026 · 1 publisher
- Bedrock's Sydney and Melbourne GPT-5.6 endpoints delegate the processing Region to AWS
Build · September 2, 2026 · 1 publisher
- CloudFormation delegates ASG instance replacement to the Instance Refresh engine
Build · September 1, 2026 · 1 publisher
- Both agents signed off on a byte-identity test inside a folder tagged THROWAWAY
Build · September 1, 2026 · 1 publisher
- Bedrock's managed agentic retrieval nests a second loop inside the call your RAG logs count as one
Build · August 31, 2026 · 1 publisher
- CloudWatch EMF moves instrumentation overhead off the request path and onto the log bill
Build · August 31, 2026 · 1 publisher
- Changing one model-ID prefix pins GPT-5.6 inference to Mumbai and Hyderabad
Build · August 27, 2026 · 1 publisher
- AWS puts agent evaluation on OpenTelemetry, and on exactly three span roles
Build · August 26, 2026 · 2 publishers
- AWS puts the trace waterfall inside the tool response, betting verification is the slow part
Build · August 25, 2026 · 1 publisher
- Argo CD's "Healthy" means the YAML landed, not that checkout works
Build · August 25, 2026 · 1 publisher
- EventBridge Pipes as agent glue: the retries move to config, the three-step Lambda stays
Build · August 24, 2026 · 1 publisher
- Four agents, five stages, one manifest row: AWS's migration pipeline is a handoff problem
Build · August 24, 2026 · 1 publisher
- AWS's own agent fleet guidance puts the lock-in in state, auth and telemetry, not the framework
Build · August 24, 2026 · 1 publisher
- AWS cuts DynamoDB retries from 9 to 4 next November, and the flag to test it is already live
Build · August 22, 2026 · 1 publisher
- A batch job that returns false on failure makes your CloudWatch alarm decorative
Build · August 22, 2026 · 1 publisher
- S3 to Lambda is async and at-least-once: the 3% that vanished after eight quiet months
Build · August 22, 2026 · 1 publisher
- Bedrock model IDs behind AppConfig flags: the swap gets cheaper, the approval gets thinner
Build · August 22, 2026 · 1 publisher
- AWS wants data governance to ship as a pull request, not a sign-off
Build · August 21, 2026 · 1 publisher
- Put a threshold and a price next to every "idle" resource, or stop calling it idle
Build · August 20, 2026 · 1 publisher
- Agent payments stop being a demo when the wallet lives outside the model's reach
Build · August 17, 2026 · 1 publisher