Microsoft and AWS have launched matching preview services for private connectivity between Azure and AWS, replacing a traditionally complex collection of circuits, routers, and routing sessions with a managed intercloud link. The service is available now in four regions at up to 1 Gbps per connection, while Microsoft plans to support connections of up to 100 Gbps when it reaches general availability.

Source

AWS has opened AWS Interconnect — multicloud to Microsoft Azure customers in public preview, giving them an on-demand way to connect private workloads across the two clouds without assembling and operating a custom network. The service is initially limited to four regions, but AWS says it will expand availability.

Source

AWS has generally released its Graviton5-powered R9g and R9gd memory-optimized EC2 instances, promising up to 25% more compute performance than the previous R8g generation. The new instances target databases, caches, analytics, web applications, and containerized services, while adding faster memory, expanded bandwidth, and a Nitro Isolation Engine backed by formal verification.

Source

OpenAI’s GPT-5.6 Terra and Luna models are now generally available through Amazon Bedrock in both AWS GovCloud (US-East) and AWS GovCloud (US-West), bringing advanced AI workloads to AWS’s isolated government cloud regions. The release combines a choice between balanced and fast inference with a one-million-token context window, 90% discounted prompt caching, and access through Bedrock’s standard tooling.

Source

Truffle Security has found that 88% of 10,616 publicly exposed AWS access-key pairs still authenticate, including 526 root keys and 242 IAM users with AdministratorAccess. The credentials were found across public code, Docker images, CI logs, package registries, and Hugging Face datasets, turning years-old leaks into a current account-takeover risk.

Source

AWS has patched a flaw in seven AWS SDKs that could turn an unvalidated region value into a credential-theft mechanism. The most serious exposure affected applications and EKS workloads using `AssumeRoleWithWebIdentity`, whose redirected request could carry a Kubernetes service-account token to an attacker-controlled server and lead to live AWS credentials.

Source