AWS

AWS Lambda Managed Instances now support a 90-minute execution timeout for asynchronous and event source mapping invocations, a six-fold increase from the previous 15-minute cap. This change enables direct execution of long-running tasks such as media transcoding, Monte Carlo simulations, and AI inference without requiring architectural workarounds. The update specifically targets data-intensive and batch processing scenarios that previously exceeded standard serverless limits.

• LMI timeout increased from 15 to 90 minutes for async and ESM invocations
• Eliminates need for complex workarounds in long-running batch jobs
• Directly supports media transcoding, financial modeling, and AI inference
• Applies specifically to Lambda Managed Instances, not standard containers

Amazon EBS Volume Clones has been updated to allow copying volumes across different AWS accounts. The feature supports re-encryption using an AWS KMS key located in the target account, ensuring key separation between environments. This enables secure data movement for scenarios like cloning production databases into isolated development accounts.

• Clone production volumes into separate dev/test accounts without data exposure risks.
• Re-encrypt data using target account KMS keys for strict key separation.
• Enforces isolation boundaries while maintaining consistent data snapshots.
• Simplifies compliance by keeping production and non-prod keys distinct.

AWS has removed the cost barrier for extending support on older Amazon EMR releases, allowing teams to maintain critical security fixes and standard support while migrating to newer versions. Eligible releases, including 5.36 and 6.6-6.15, receive best-effort security patches through June 2027, while 7.0-7.10 get extended standard support until August 2027. This policy applies across all EMR deployment models and regions, provided customers submit a migration plan via AWS Support.

• No extra charge for support extensions during active migration to current EMR releases
• Releases 5.36 and 6.6-6.15 get critical security fixes through June 30, 2027
• Releases 7.0-7.10 receive extended Standard Support through August 31, 2027
• Requires contacting AWS Support with a migration plan to activate the extension
• Applies to EMR on EC2, EKS, and Serverless across all available regions

Amazon RDS for MariaDB now supports community minor versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, and 12.3.3. These updates include critical CVE fixes and performance improvements alongside a new feature: post-quantum TLS (PQ-TLS) key exchange for data in transit. AWS recommends upgrading immediately to address security vulnerabilities and leverage new community functionality.

• New minors: 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3
• Post-quantum TLS key exchange now available for in-transit encryption
• Includes fixes for known CVEs and general bug fixes
• Performance improvements added via community updates
• Upgrade recommended to mitigate security risks

Amazon RDS now supports the most recent Cumulative Updates and General Distribution Releases for SQL Server versions 2016 through 2025. These updates include critical security patches addressing four specific vulnerabilities identified as CVE-2026-47295, CVE-2026-47296, CVE-2026-54118, and CVE-2026-55002. Engineers can now patch their managed instances to the latest Microsoft-recommended security baselines without manual intervention.

• Supports SQL Server 2016 SP3+GDR, 2017 CU31+GDR, 2019 CU32+GDR, 2022 CU26, and 2025 CU7
• Patches four CVEs: 2026-47295, 2026-47296, 2026-54118, and 2026-55002
• Enables immediate compliance with latest Microsoft security baselines for managed workloads
• No manual patching required; updates are available via standard RDS maintenance windows