New AWS Security Agent on-demand penetration testing is now generally available

Example use: pilot this in one internal workflow first to validate speed, cost, and engineering effort.

New customers can explore AWS Security Agent with a 2-month free trial

https://aws.amazon.com/about-aws/whats-new/2026/03/aws-security-agent-ondemand-penetration/

🚨 AWS Service Update: Maintenance & Sunsets 🚨
AWS has announced significant availability changes starting April 30, 2026. Here is the breakdown of what you need to know:
🛠 Moving to Maintenance
No longer accessible to new customers after April 30, 2026. Existing users can continue to use them with full support.
• Key Services: AWS App Runner, AWS Audit Manager, AWS CloudTrail Lake, AWS IoT FleetWise.
• Specific Features: * Comprehend: Topic Modeling, Event Detection.
• Rekognition: Streaming Events, Batch Image Moderation.
• Glue: Ray Jobs.
• SNS: Message Data Protection (MDP).
• ARC: Readiness Checks.
🌅 Entering Sunset (End of Life)
Operations and support will eventually end. Existing customers must begin migration planning.
• Amazon RDS Custom for Oracle
• Amazon WorkMail
• Amazon WorkSpaces Thin Client
• AWS Service Management Connector
🚫 End of Support (Immediate)
• Amazon Chime SDK – Proxy Sessions: No longer available as of March 31, 2026.
👉 Action Required: If you are using "Sunset" services, check the AWS Product Lifecycle Page immediately for migration guides and timelines.

https://aws.amazon.com/about-aws/whats-new/2026/03/aws-service-availability/

New Amazon CloudWatch now supports ingesting Security Hub CSPM findings with organization-wide enablement

Why It Matters
This launch simplifies security operations by ensuring consistent visibility. Instead of manually configuring every account, a security team can set a single rule to ensure all production environments automatically report their security posture to a central log group.

Pricing and Availability
• Availability: Now available in all AWS commercial regions.
• Cost: Findings delivered to CloudWatch Logs are subject to tiered pricing. For specific details, visit the CloudWatch pricing page.

https://aws.amazon.com/about-aws/whats-new/2026/03/amazon-cloudwatch-securityhub-findings/

What was the problem?
Before, if you had a team in Singapore and another team in a new region (like Milan or Cape Town), they couldn't easily share the same "phonebook" of users and passwords. You had to set up two separate systems and try to keep them the same manually. It was a lot of work.

What is the change?
Now, AWS does the work for you. You can "copy-paste" your existing login system into these extra regions automatically.

What’s the catch?
It’s not free: You pay for the extra "servers" running in those new countries and a small fee for moving data between them.

Almost everywhere: It works in most places, except for the Middle East (UAE and Bahrain) for now.

https://aws.amazon.com/about-aws/whats-new/2026/04/multi-region-opt-in-aws-microsoft-ad/

New AWS VPC Encryption Controls now available in AWS GovCloud (US) Regions

https://aws.amazon.com/about-aws/whats-new/2026/03/aws-vpc-encryption-controls/

For years, CloudWatch was seen as a "walled garden." If you wanted to use OpenTelemetry, you had to manage extra infrastructure but now can now send metrics directly to CloudWatch using the OpenTelemetry Protocol (OTLP).

public preview in US East (N. Virginia), US West (Oregon), Asia Pacific (Sydney), Asia Pacific (Singapore), and Europe (Ireland)

https://aws.amazon.com/about-aws/whats-new/2026/04/amazon-cloudwatch-opentelemetry-metrics/

🚀 Turbocharge your applications with Amazon DocumentDB 8.0

Link: https://aws.amazon.com/blogs/database/turbocharge-your-applications-with-amazon-documentdb-8-0/

[Kiro] 🚀 Models: GLM-5 Now Available in Kiro

Link: https://kiro.dev/changelog/models/glm-5-now-available-in-kiro

[AWS-Main] 🚀 Amazon CloudWatch introduces PromQL querying with Query Studio Preview

• Language Freedom: It finally breaks the "silo" between standard AWS metrics and OpenTelemetry by letting you query both using native PromQL or SQL-based Metric Insights in one spot.
• Zero Context Switching: You no longer have to jump between different consoles or external Grafana instances to correlate your custom app data with your underlying EC2 or Lambda infrastructure.
• Lowered Entry Barrier: The combination of a visual form builder for beginners and a syntax-highlighted editor for pros means anyone on the team can dig into complex telemetry without a steep learning curve.
• Seamless Workflow: It turns insights into action immediately, allowing you to go from a raw query to a live dashboard chart or a CloudWatch alarm with just a few clicks.

Link: https://aws.amazon.com/about-aws/whats-new/2026/04/amazon-cloudwatch-query-studio-preview/

[AWS-DevOps] 🚀 Streamlining Cloud Compliance at GoDaddy Using CDK Aspects

Link: https://aws.amazon.com/blogs/devops/streamlining-cloud-compliance-at-godaddy-using-cdk-aspects/

[🚨 OpenAI Status] 🚀 Some users may experience empty response from ChatGPT in web

Link: https://status.openai.com//incidents/01KNGPM84F5G72B8Y7ASYNB11H

[🚨 OpenAI Status] 🚀 GET /v1/responses endpoint is currently down and unable to serve requests

Link: https://status.openai.com//incidents/01KNH45H33H4J553XBG6TJ3PQF

[AWS-AI] 🚀 Connecting MCP servers to Amazon Bedrock AgentCore Gateway using Authorization Code flow

Link: https://aws.amazon.com/blogs/machine-learning/connecting-mcp-servers-to-amazon-bedrock-agentcore-gateway-using-authorization-code-flow/

[OpenAI] 🚀 Announcing the OpenAI Safety Fellowship

Link: https://openai.com/index/introducing-openai-safety-fellowship

[AWS-Database] 🚀 Navigating backup and recovery options for Oracle Database@AWS

Link: https://aws.amazon.com/blogs/database/navigating-backup-and-recovery-options-for-oracle-databaseaws/

[AWS-Main] 🚀 AWS Cost Explorer launches Natural Language Query capabilities powered by Amazon Q

Link: https://aws.amazon.com/about-aws/whats-new/2026/04/AWS-Cost-Explorer-Natural-Language-Query/

[🚨 OpenAI Status] 🚀 Some users may experience issues accessing the ChatGPT website on VPN

Link: https://status.openai.com//incidents/01KNKQQ4R06K00RDTNXZVX7SFC

[AWS-AI] 🚀 Manage AI costs with Amazon Bedrock Projects

Link: https://aws.amazon.com/blogs/machine-learning/manage-ai-costs-with-amazon-bedrock-projects/

[AWS-Main] 🚀 Announcing Amazon S3 Files, making S3 buckets accessible as file systems

https://aws.amazon.com/about-aws/whats-new/2026/04/amazon-s3-files/

https://red.anthropic.com/2026/mythos-preview/

It details how this model has moved beyond simply "finding bugs" to autonomously developing sophisticated exploits for major operating systems (like Linux and OpenBSD), web browsers, and core internet infrastructure. The post serves as both a demonstration of the model's power showing it can find 27-year-old vulnerabilities and bypass modern defenses and a warning to the security industry to accelerate defensive measures before such capabilities become widely accessible to attackers.