AWS Notes

re:Invent 2025 — обзор анонсов, часть 2 https://www.youtube.com/watch?v=mBGtwLTNzZw Присоединяйтесь! #reInvent #video

re:Invent 2025 — обзор анонсов, часть 1 https://www.youtube.com/watch?v=kjct4Kz54Os Присоединяйтесь! #reInvent #video

С недавнего времени заставляю себя не исправлять ошибки в постах. Даётся с трудом и не всегда, но заставляю. Чтобы было видно, что ни один AI не пострадал и пост написан вот этими вот руками.

На конец 2025-го года у AWS есть три AI агента: - Security agent - DevOps agent - Software Developer agent (Kiro) Обратите внимание, что агенты это не просто какие-то там "расширения", они имеют такие же полноценные разделы, как и сервисы. Потому что это и есть сервисы, новые AWS managed сервисы. Также это лишь "первые три" агенты:

Our first three frontier agents transform the way you build, secure, and operate software

Дальше стоит ждать: - FinOps agent: Billing, Cost Optimization, Savings Plans - Support agent: Connect, Support - Platform agent: Network, AWS Organizations (Accounts), SSO - Governance agent: Compliance (PCI/GDPR/ISO/etc), Audit Далее должен быть и уровнем выше, Business agent, который следит за другими агентами, разбирается проблемой "безопасно vs дешево vs быстро" и разговаривает на диалекте "CFO + CISO + CTO" . В результате можно (нужно) ожидать, что в 2026-м году заменят примерно всех будет много AI агентов. #AI #Agents

🆕 New and enhanced AWS Support plans add AI capabilities to expert guidance

Business Support+ transforms the developer, startup, and small business experience by providing intelligent assistance powered by AI.

Enterprise Support builds on our established support model, this tier accelerates innovation and cloud operations success through intelligent operations and AI-powered trusted human guidance.

Unified Operations Support delivers our highest level of context-aware Support through an expanded team of AWS experts.

https://aws.amazon.com/blogs/aws/new-and-enhanced-aws-support-plans-add-ai-capabilities-to-expert-guidance/

Business Support+ starts at $29 per month, a 71% savings over the previous Business Support monthly minimum.

Enterprise Support starts at $5,000 per month, a 67% savings over the previous Enterprise Support minimum price.

Unified Operations, designed for organizations with mission-critical workloads and including a designated team of AWS experts, starts at $50,000 a month.

#Support

AWS re:Invent 2025 - Opening Keynote with Matt Garman https://www.youtube.com/watch?v=rpsh_UBQY14 #reInvent

🆕 Lambda + durable functions 🔥 https://aws.amazon.com/blogs/aws/build-multi-step-applications-and-ai-workflows-with-aws-lambda-durable-functions/ То есть теперь можно запилить на Lambda фичи, для которых ранее требовались Step Functions.

Steps—The context.step() method adds automatic retries and checkpointing to your business logic. After a step is completed, it will be skipped during replay.

Wait—The context.wait() method pauses execution for a specified duration, terminating the function, suspending and resuming execution without compute charges.

В результате на простых пайплайнах можно получить 2-4 раза экономию по деньгам. #Lambda

🆕 AWS Kiro Agent 🎉 https://kiro.dev/blog/introducing-kiro-autonomous-agent/ #Kiro

🆕 Database Savings Plans 💪 https://aws.amazon.com/blogs/aws/introducing-database-savings-plans-for-aws-databases/ Покрывают и DynamoDB, и On-Demand инстансы, до 35% экономии. P.S. Теперь без FinOps агента никак... #cost_optimization

S3 maximum object size: 5 TB => 50 TB 🎉

Upload an object in parts by using the AWS SDKs, REST API, or AWS CLI – Using the multipart upload API operation, you can upload a single large object, up to 50 TB in size.

#S3

🆕 AWS Security Agent 🎉 https://aws.amazon.com/blogs/aws/new-aws-security-agent-secures-applications-proactively-from-design-to-deployment-preview/ Тот случай, когда от предположения в комментарии о том, что должен быть такой сервис до его выхода прошло лишь пять минут. 😁 #SecurityAgent

EC2 X8aedz 🎉 Это не кот походил по клавиатуре, это новые виртуалки от AMD Zen 5 на 5 GHz + 3 TB RAM + 7.6 TB NVMe. https://aws.amazon.com/ec2/instance-types/x8aedz/ #EC2 #AMD

🆕 Amazon Nova 2 🎉 https://aws.amazon.com/blogs/aws/introducing-amazon-nova-2-lite-a-fast-cost-effective-reasoning-model/ https://docs.aws.amazon.com/nova/latest/nova2-userguide/what-is-nova-2.html #Nova #AI

🆕 AWS DevOps Agent 🔥 https://aws.amazon.com/devops-agent/

AWS DevOps Agent is a frontier agent that resolves and proactively prevents incidents, continuously improving reliability and performance.

На текущий момент DevOps Agent обрабатывает инциденты используя интеграцию со всеми доступными источниками логов и метрик (см. скриншоты). #DevOpsAgent

EC2 C8a 🎉 Новое поколение AMD Zen5 на 5% дороже AMD Zen4 (C7a), что при заявленных десятках процентов ускорения круто. https://aws.amazon.com/ec2/amd/ #EC2

Выбор детерминированного человека. #AI

🆕 AWS MCP Server 🎉 https://docs.aws.amazon.com/aws-mcp/latest/userguide/what-is-mcp-server.html 1️⃣ AWS API MCP + Knowledge MCP integration = AWS MCP Server (as a single MCP server) - AWS Documentation Search - What's New / API Reference Lookup - Automatically generate and execute any API calls across AWS services - Automatically reflect the latest release service APIs 2️⃣ Support for Agent Standard Operating Procedures (SOPs) 3️⃣ Automate real world tasks: Create permissioned AWS API calls, create/update/delete resources, troubleshoot, and change settings 4️⃣ Enterprise-grade security model based on IAM + CloudTrail: - Control permissions with IAM authentication/authorization - Everything MCP Server does is recorded in CloudTrail logs 5️⃣ Optimized AI-native IDE integration #MCP #AI

🆕 IAM Policy Autopilot https://aws.amazon.com/blogs/aws/simplify-iam-policy-creation-with-iam-policy-autopilot-a-new-open-source-mcp-server-for-builders/

As an MCP server, IAM Policy Autopilot operates in the background as builders converse with their AI coding assistants.

When your application needs IAM policies, your coding assistants can call IAM Policy Autopilot to analyze AWS SDK calls within your application and generate required identity-based IAM policies, providing you with necessary permissions to start with.

After permissions are created, if you still encounter Access Denied errors during testing, the AI coding assistant invokes IAM Policy Autopilot to analyze the denial and propose targeted IAM policy fixes.

After you review and approve the suggested changes, IAM Policy Autopilot updates the permissions.

#IAM

Route 53 Global Resolver https://aws.amazon.com/blogs/aws/introducing-amazon-route-53-global-resolver-for-secure-anycast-dns-resolution-preview/ Global Resolver is a next-generation DNS resolution service that goes beyond the capabilities of traditional Route 53 Resolver (VPC only) and includes internet reachable, enhanced security, multi-region Anycast, and DNS Firewall-based protection. 1️⃣ Reconcile public + private domains all at once — Split DNS Anywhere 2️⃣ DNS-based data leak prevention — DNS Firewall full integration 3️⃣ Global Anycast + Multi-Region Automatic Failover 4️⃣ Service name cleanup — Change the existing Resolver to "Route 53 VPC Resolver" 5️⃣ Security + Flexibility + Maximum Scalability #Route53

EKS Capabilities: Argo CD, ACK, KRO и другие из коробки! 🔥 https://aws.amazon.com/blogs/aws/announcing-amazon-eks-capabilities- for-workload-orchestration-and-cloud-resource-management/

There are no upfront commitments or minimum fees, and you only pay for the EKS Capabilities and resources that you use.

Хм. В переводе на простой — поддержка за деньги. $0.03 per Argo CD Capability hour $0.0015 per Argo CD Application hour $0.005 per ACK Capability hour $0.00005 ACK resource hour $0.005 per KRO Capability hour $0.00005 per KRO RGD instance hour #EKS