Troubleshooting a multi-service, MWAA-orchestrated ETL pipeline often means hunting across scattered Amazon CloudWatch log groups. This post shows how to centralize your ETL logs in Amazon OpenSearch Service and query them in plain language through an MCP server on Amazon Bedrock AgentCore, so you find root causes faster.

Learn how to pair DuckDB with AWS Glue 6.0 to run SQL-centric ETL on a single worker, reading Parquet from Amazon S3 and writing Apache Iceberg tables to Amazon S3 Tables. This post walks through a complete, runnable example and compares measured cost and runtime against an equivalent Apache Spark job on the same Glue runtime.

Amazon Prime Day 2026 was exclusively for Prime members and ran June 23–26, 2026 with millions of deals across more than 35 categories. As part of our annual tradition of sharing how AWS powered Prime Day (2016, 2017, 2019, 2020, 2021, 2022, 2023, 2024, and 2025), I want to share the services and chart-topping metrics [...]

You’re building a data agent that lets business users ask questions about lakehouse data in natural language. You’ve already built governance policies that control who can access which datasets. The challenge is making the agent respect those rules without rebuilding them in your application code. When a user asks a question, the agent maps it [...]

Amazon EMR 8.1.0 adds multi-catalog support through the RedirectingSessionCatalog, so you can query Iceberg, Delta Lake, Hudi, and Hive tables through a single catalog and join data across AWS accounts without copying it. This post shows how to put these capabilities into practice on Amazon EMR Serverless.

The NGINX Ingress Controller is retired. If you run oauth2-proxy with NGINX for OpenID Connect authentication, switching to the AWS Load Balancer Controller can silently break your auth. This post shows two ways to keep OIDC working on an Application Load Balancer: run oauth2-proxy in reverse proxy mode, or use ALB native OIDC.

AWS invests in tools that help customers align with international standards for responsible AI governance. In this post, we explore the AI system impact assessment: what it is, how it improves enterprise-wide risk management, and how ISO/IEC 42005:2025 codifies best practices for conducting and documenting these assessments.

Learn how to administer Amazon SageMaker HyperPod through Amazon SageMaker Unified Studio while preserving cluster governance. This post shows platform teams how to design infrastructure boundaries, govern access, allocate shared capacity, and operate HyperPod consistently across the organization, project, cluster, and workload control layers.

Data scientists and ML engineers can now create, configure, start, stop, and open Amazon SageMaker Spaces on SageMaker HyperPod EKS clusters directly from SageMaker Studio. Launch JupyterLab and Code Editor environments in a few clicks, without using command-line tools.

Add a voice travel concierge to an airline app with Amazon Bedrock AgentCore, Amazon Nova Sonic for real-time speech, and Amazon Bedrock Knowledge Bases for policy answers. Travelers change seats, check delays, and ask policy questions by voice, while the agent reaches your backend through MCP tools and confirms every change before it writes.

Configure AWS DMS change data capture (CDC) from a self-managed SQL Server source without granting sysadmin to the endpoint login. This least-privilege pattern uses certificate-signed wrapper procedures, granular permissions, and AWS Secrets Manager to meet separation-of-duties requirements while preserving full CDC functionality.

When an Amazon Neptune workload needs resilience beyond a single cluster, this post presents a decision framework that maps availability targets to Neptune architectural patterns, from Multi-AZ and Global Database to write-ahead logs and caching, based on your RTO, RPO, and budget.

Introduction Before an AWS DevOps Agent investigation runs its first billable query, you can see what it will cost and decide whether to proceed. The Investigation Cost Guardrail skill brings cost awareness to AWS DevOps Agent, giving your team visibility and control over scope before the investigation begins. This post introduces the Investigation Cost Guardrail, [...]

GLM 5.3 from Z.ai is now available on Amazon Bedrock: a 753B-parameter mixture-of-experts model built for coding and long-horizon agentic tasks. Learn how to invoke it with the OpenAI-compatible APIs, cut cost and latency with prompt caching, and run an authorized security test with the open-source Strix agent.

Amazon Redshift now supports Iceberg materialized views. Compute an aggregation once in Amazon Redshift and store the result as a standard Apache Iceberg table in Amazon S3, queryable by Amazon Athena, Apache Spark, Amazon SageMaker, and AWS Glue. This post covers use cases, incremental refresh, and a step-by-step getting-started guide.

As AI models become more capable, they uncover more security vulnerabilities and identify increasingly sophisticated paths to exploit them, raising the bar for how quickly defenders must respond. Security teams now face more potential vulnerabilities than their existing processes were designed to handle — each requiring investigation, reproduction, and a repair that must be tested [...]

At Snap Inc., the company behind Snapchat, cost is an important factor in every infrastructure decision. With research scientists and machine learning (ML) engineers working across a wide gamut of projects, from large language models to computer vision to video generation, the AI/ML platform team faces a constant balancing act: deliver the high-performance storage that [...]

When you modernize a .NET Framework application to modern .NET, you end up with a transformed, buildable codebase — but the question that immediately follows is always the same: how do I safely keep changing it from here? Once the code is modernized, your team keeps evolving it — fixing bugs, adding features, upgrading dependencies [...]

In a traditional on-premises network, predictable costs have always been central to network connectivity budgets. Organizations relied on leased lines, Multiprotocol Label Switching (MPLS) links, and dedicated cross-connects. No matter how much data they moved, the bill stayed the same. As they rebuilt their architecture in the cloud, they gained the flexibility of pay-as-you-go pricing. [...]

EC2 Tag Sharing lets AMI owners share tags with any account that has access to the image, using the ec2:SharedTag/ prefix. Updates propagate automatically with no custom replication workflows. This post walks through how it works, a golden AMI use case, and considerations for ABAC policies and account governance.

AWS WAF gives you a practical way to secure and observe Model Context Protocol (MCP) endpoints at the edge. MCP has quickly become the standard way AI agents communicate to tools and data. Originally, it was a stateful protocol built around long-running sessions, persistent connections, and client-to-server-instance binding. The 2026-07-28 MCP revision redesigned MCP as [...]

Today we’re launching the AWS Digital Sovereignty Lens, a new Well-Architected lens that provides extended guidance for designing, building, and operating sovereign workloads on AWS.

WellRithms achieved 30 times faster bill processing by combining AWS services with its deep medical billing expertise. This blog post explores how the company transformed document preparation from a manual constraint into a scalable, AI-powered capability, and the results they achieved.

Amazon SageMaker optimized generative AI inference introduces the aws-ai-ml skill through the Agent Toolkit for AWS, giving coding agents like Kiro, Claude Code, and Codex deep expertise in inference optimization and benchmarking. Describe what you want, and your agent generates executable SageMaker Python SDK v3 code to benchmark, recommend, and compare deployments.

In this blog, learn how we built a working prototype of a serverless environmental intelligence platform, where nontechnical users ask questions in plain language and receive answers drawn from open data, published models, and satellite observations. The platform is built on four pillars, as outlined in the following table.

Promoting Amazon Quick resources (agents, action connectors, knowledge bases, flows, and spaces) from a development to a production AWS account has been a manual, error-prone chore. This post shows how to automate cross-account promotion with an idempotent, auditable MCP server on Amazon Bedrock AgentCore.

Build a Retrieval Augmented Generation (RAG) application on Amazon Bedrock Managed Knowledge Base with LangChain, and see how agentic retrieval handles the multi-part questions that single-shot retrieval answers poorly. Run the same query through both paths, read the trace events, and compare what each retrieval path costs.

Amazon Quick doesn’t offer a direct console path to downgrade a user from Admin or Author to Reader. This post walks through two reliable methods: a manual delete-and-recreate approach and an AWS CLI step-down sequence that downgrades roles safely while preserving asset ownership.

Multi-agent systems need deeper guarantees than fluent responses: they must select the right tools, respect constraints, and explain their decisions. Learn how to build a Strands-based multi-agent supply chain decisioning system and evaluate it with Amazon Bedrock AgentCore Evaluations using built-in, custom, and explainability evaluators.

AWS CodeDeploy now offers a purpose-built RESTART deployment mode that reapplies the last successful revision to EC2 and on-premises fleets. It keeps restarts inside CodeDeploy with the same batch sizing, health checks, alarm monitoring, and rollback behavior as a standard deployment, and ran up to 6.1x faster in testing.

Amazon Redshift automates much of its own tuning, but periodic operational reviews still pay off. Learn how the review_cluster tool in the open-source Amazon Redshift MCP server runs a full cluster diagnostic from one natural-language request, evaluating 12 diagnostic areas and returning prioritized, documentation-linked recommendations in minutes.

Last week, we announced a public preview of Amazon Bedrock Managed Agents powered by OpenAI, built on a customized version of OpenAI’s Agents API engineered to be AWS-native and integrated with AWS resources. You can now build agents optimized for OpenAI models that run entirely inside AWS with the identities, permissions, and governance controls you [...]

Migrating SQL Server Full-Text Search to Babelfish for Amazon Aurora PostgreSQL is one of the trickier parts of a migration. This post presents a six-checkpoint decision tree to assess whether your Full-Text Search workload can move to Babelfish, what migrates directly, what needs a custom function, and what requires an alternative approach.

Amagi built a Global Metadata Store on Amazon Neptune to model billions of interconnected media metadata relationships. Learn how their RDF knowledge graph, paired with Amazon OpenSearch Service and a custom blank-node synchronization layer, delivers deep semantic queries and sub-500ms transactional reads across 2,500+ channels and 150+ countries.

Texas Capital Bank is a full-service financial services firm headquartered in Dallas, Texas, serving commercial, consumer, and institutional clients. Its technology organization builds internal platforms across several areas, including document intelligence for lending. Processing a commercial loan package is slow, manual work: an analyst reads a 200-plus-page package and extracts financial obligations, servicing requirements, and covenant terms by hand, a task that can take hours per package and is easy to get wrong.

Today, Amazon Web Services (AWS) announces the recipients of the 2026 AWS Imagine Grant Children’s Health Innovation Award (CHIA). Whether a child is battling a rare cancer, managing a chronic condition, or growing up downstream from a contaminated waterway, this year’s 10 recipients share a common ambition: using technology to help every child get access to the best possible care.

Moving an Angular application to React can require changes across components, state management, routing, build tooling, and tests. Teams may consider the migration when Angular expertise is harder to staff, third-party libraries stop supporting older versions, or maintenance costs increase. AWS Transform custom automates this migration process by analyzing the Angular codebase, creating a migration [...]

Read how the 2026 AWS Life Sciences Symposium, the Clinical Trials track brought a shift into focus that’s well underway. Six global life sciences leaders—Novartis, Merck (with BCG), Novo Nordisk, Labcorp, Eli Lilly, and Bayer—took the stage to demonstrate what AI in drug development looks like in practice across every stage of a clinical trial.

In less than 2 years, MiCloud, a statewide initiative with strategic support from Amazon Web Services (AWS), Michigan is building a resilient foundation for education technology that protects learning continuity for more than 568,000 students statewide, representing 42 percent of the state’s 1.4-million student K12 population.

Introduction: The missing layer in Physical AI on AWS Physical AI systems, those that perceive, reason, and act in the physical world, are moving fast from research into production deployments. Training policies in GPU-accelerated simulation compress months of real-world experience into hours of computing, without the cost, time, or safety risks of physical experimentation. A [...]

This post provides step-by-step procedures to deploy Oracle Database on Amazon Elastic VMware Service (Amazon EVS) with Amazon FSx for NetApp ONTAP as NFS datastore storage. You provision storage volumes, mount NFS datastores, install Oracle, and configure SnapMirror replication for cross-region disaster recovery.

Learn how to architect a highly available Oracle Database environment on Amazon Elastic VMware Service (Amazon EVS) with Amazon FSx for NetApp ONTAP. This post covers EC2 bare metal instance selection, vSAN and FSx storage tiering, NSX networking, and SnapMirror cross-region disaster recovery for enterprises preserving their VMware operational tooling.

Deploy AWS Regional availability data as infrastructure you own. Capability Insights for AWS runs a self-hosted dashboard in your VPC that auto-refreshes daily, and Workload Analysis narrows the catalog to the services your account actually runs, so your Regional expansion gap analysis focuses only on what you deploy.

Learn how to connect AWS DevOps Agent investigation events to third-party tools such as Jira using Amazon EventBridge and AWS Lambda. This post walks through a deployable AWS CDK solution that automatically creates and updates Jira issues as an investigation progresses, and shows how to adapt the same pattern to ServiceNow, PagerDuty, and other tools.

The Adjudicated Query pattern pairs the Amazon Quick chat agent with a bounded MCP server over a deterministic rules engine to deliver provably complete, defensible compliance answers. This post walks through the reference architecture and a deployable AWS CDK sample, using lease compliance as the running example.

Claude Desktop on Amazon Bedrock is limited to the model’s knowledge cutoff without web search. In this post, we walk through connecting Claude Desktop to Web Search using Amazon Bedrock AgentCore Gateway, with JWT-based inbound authentication through AWS IAM Identity Center and Amazon Cognito.

Fine-tuning teaches a small search agent your tools and environment, giving it the reliability of a frontier model at lower latency and cost. In this post, we fine-tune an LLM-powered search agent with multi-turn reinforcement learning (MTRL) on Amazon SageMaker AI and share the gains we measured in retrieval quality and reliability.

Connect AWS DevOps Agent to your Amazon OpenSearch Service observability data using the Model Context Protocol (MCP), so an alert that fires at 2 AM triggers autonomous root cause investigation. Covers three MCP server hosting paths (self-managed on Amazon ECS, Amazon Bedrock AgentCore, or built-in OpenSearch 3.3+), plus alert routing and FGAC role mapping.

In this post, you’ll learn how Best Buy transformed their network over many phases and years, and how the latest iteration uses a segment matrix constructed with Cloud WAN’s advanced routing policy to improve security, flexibility, and contain costs simultaneously.

AWS Outposts extend AWS infrastructure, services, APIs, and tools to on-premises locations for workloads that require low latency, local data processing, or data residency. In April 2025, we announced the general availability of second-generation AWS Outposts. If you’re running workloads on first-generation AWS Outposts, we recommend developing a structured migration strategy to move to second-generation. [...]