AWS Morning Brief for the week of April 27th, with Corey Quinn. 

Links:

• Amazon CloudWatch pipelines now supports configuration of processors via AI
• Introducing the Amazon EKS Hybrid Nodes gateway for hybrid Kubernetes networking
• Amazon EKS enhances cluster governance with new IAM condition keys
• Attributed Revenue Dashboard Now Available in AWS Partner Central
• AWS Lambda functions can now mount Amazon S3 buckets as file systems with S3 Files
• Amazon CloudWatch Logs Insights introduces JOIN and sub-query commands
• AWS Lambda Durable Execution SDK for Java GA
• Amazon S3 Express One Zone now supports S3 Inventory
• Amazon S3 now supports five additional checksum algorithms
• AWS Secrets Manager extends managed external secrets to MongoDB Atlas and Confluent Cloud
• Track Amazon Bedrock Costs by Caller Identity with IAM Principal-Based Cost Allocation
• Transforming FinOps with the Latest Amazon Q Cost Capabilities
• Aurora Serverless: Faster performance, enhanced scaling, and still scales down to zero
• From developer desks to the whole organization: Running Claude Cowork in Amazon Bedrock
• Get to your first working agent in minutes: Announcing new features in Amazon Bedrock AgentCore
• Automated network incident response with AWS DevOps Agent
• Accelerate development workflows with Amazon EBS Volume Clones
• Troubleshooting Amazon S3 access denied errors using Kiro CLI
• CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver
• CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python