A new zero day really sucks when Nichole in marketing launched a vps without telling anyone and never updates anything.

AWS archived rain in July with a README notice and no migration guide. Nobody picked it up, so I did.

If you haven't used it: rain deploys CloudFormation the way you'd want the AWS CLI to. You get a readable change set, a confirm prompt, live progress and the real error when something fails, even in a nested stack. It also adds a few template tags. My favorite is `!Rain::Embed`, which keeps code in its own file and puts it into the template at deploy time.

cfnrain v1.25.1 is the original rain code under a new name. Templates, directives, config files and artifact buckets work as before. Next up is dependency updates, then the first changes that might break compatibility, where they buy a real usability win.

If you use rain, tell me what you can't live without, or join the direction discussion. If nobody does, I'll make the calls myself.

- Repo and releases: https://github.com/awesome-foundation/cfnrain

- Direction discussion: https://github.com/awesome-foundation/cfnrain/discussions/20

- The longer story: https://chaosguru.substack.com/p/aws-killed-rain-im-keeping-it-going?r=3f5ebc

Curious what people actually do in teams without a dedicated FinOps person. Cron

and Lambda scripts? AWS Instance Scheduler? Tags and good intentions? Someone

remembering on Friday?

The parts I keep hearing are painful: developers needing a stopped box at 9pm,

scripts that break when someone renames a tag, and RDS starting itself again after 7

days.

What's worked for you, and what did you give up on?

I recently built a AWS serverless side project and felt that coding agents struggled to gather the broader wholistic context regarding code and devops. I studied about some alternative to SAM like SST but they all believe in the same concept - code and infra should be separate - Infra as Code (IaC).

Then I stumbled across encore.dev which rethought all of this fundamentally using Infra from Code (IfC) and realised this is exactly what I was looking for.

But one major issue, it supports exclusively container services like EKS meanwhile I use solely serverless for my weekend projects. Hence, decided to build a Infra from Code (IfC) for pure AWS serverless services.

Decided to dogfood it by making my own side project use it. This approach allowed make eventually verify whether IfC compiler works.

So have a look it and tell me what you think about it. Don't keep your expectations too high, this is just a cute side project. :-)

framework: https://github.com/harsh-vardhhan/syncploy
serverless app: https://github.com/harsh-vardhhan/EHR-backend
documentation: https://www.syncploy.com/

Hi, I'm a student learning AWS. I'm looking for project ideas. It should take about a week for a team of 5 and only use services available for free tier.

So far, we've studied things like VPC, subnets, security groups, nat gateways, ec2, ALB, auto scaling, cloud formation, cloudfront etc. We've not really done much for monitoring or IAM. We also studied using docker, no k8s yet, no terraform yet.

I'm hoping we get to use some, if not everything we've learned. We're not developers, but some of us know how to use git and some python. Really, we're just looking to make a simple project that we can decide to continue on later if we want. Also, I would love for there to be some way to measure the efficiency/impact. We are down to learn 1 or 2 new things, but we only have a week.

Aside from project ideas, I would also love advice on how a team should be assigned different roles since all of us are focusing on the same thing. I was thinking one project lead for documenting and decisions, 2 on infrastructure and IaC, and 2 on platform containerization. The only thing I'm unsure of is how everyone will constantly have sth to do rather than waiting for one team to finish.

It would be awesome to be able relate it to an irl scenario or task that a company might have undergone. Even better if recent.

I know I'm asking a lot, but I would really appreciate it if I got some good advice. Please don't be too harsh if this isn't the right place to ask.

Hi ,

Historically, our organization had a dedicated DBA team for managing on-premise databases. However, with the migration to cloud databases like AWS Aurora (MySQL & Postgres) and Snowflake, management adopted the mindset that "the cloud manages everything now." Consequently, database responsibilities fell entirely onto our feature developers.

While AWS/Snowflake handles the physical infrastructure and basic backups, we are getting heavily burnt by data-layer issues. Our generalist developers don't have deep database expertise, and we are experiencing frequent performance bottlenecks, sub-optimal indexing,clustering,partitioning choices and spiking cloud bills etc.

So thinking of having a specialized Database expert Team . Is this the right move? For those in modern cloud environments, do you still see a need for a dedicated data team, or should developers truly own the database end-to-end? If its yes, then want to understand , what all should this specialized team actually be responsible for in your opinion?

Want to understand experts thought on the same.

How long does it take for AWS support to answer on the ticket? I've been waiting for 2 weeks already, no traction at all. They blocked my account and I can't add a payment method to pay for educational sub, and they're not answering or unblocking my acc. How am I supposed to work with them?

In case AWS answers here - case ID 179202198100662

AWS Transit Gateway now supports 1:1 NAT (SNAT/DNAT) for connecting overlapping networks. This is fully managed. Customer doesn't have to figure out how to SNAT and DNAT the source and target networks.

The article says it uses "Regional Private NAT Gateway" but as of now, customers can not create Regional Private NAT Gateways. Private NAT Gateways have to be zonal. They can only create Regional Public NAT Gateways. Maybe that feature is also coming soon? Nevertheless, this is a nice new feature.

"AWS Transit Gateway and AWS Cloud WAN now provide managed one-to-one network address translation (NAT) directly on their attachments, through integration with Regional Private NAT Gateway. This enables customers to connect private networks that share the same IP address ranges without renumbering either network, deploying a NAT appliance, or writing return-traffic rules"

https://aws.amazon.com/about-aws/whats-new/2026/10/aws-transit-gateway-cloud-wan-1-1-nat/

I need some help guys

I installed Odoo Community edition in an Ubuntu 24.04 OS in AWS EC2, the installation is successful and "SUDO SYSTEMCTL STATUS ODOO" returns Active but i can't access Odoo remotely using the IP address of my machine.

Odoo is Active but http://13.63.53.194:8069/ does not work in my browser (i am running Odoo in AWS EC2)

I have Odoo working just fine in an Ubuntu VM and can access it from windows just by using the IP address of the VM and the Port of Odoo, but it seems not to work with AWS.

In case you didn't know as part of the AI race there's going to be a data center belt in my town. I don't know exactly what's happened. All I know is that on October 19th it was the final court hearing regarding it for final approval.

Now as much as some of yall hate Amazon web services I don't know if there will be anyway we can stop them. The primary reason is that lots of things like Reddit and Netflix and even PlayStation network is hosted by AWS. So yeah in case some of you guys didn't know Amazon web services is basically 1/3 of the internet.

Northern Indiana Public Service Company (NIPSCO) states that repairs will not have their utility rates raised when the data center is in operation.

Hobart says that this will generate lots of revenue for public works and the school system.

The city council has not yet revealed if they signed any non-disclosure agreements with Amazon yet.

We don't know yet if it will be closed loop.

A group of Hobart residents are suing the city council, alongside the plan commission to block the project.

Source: https://hobart.nwidatafacts.com/

AWS put out a lot of cost updates this week. Here is a quick list of the changes that actually help you cut costs:

• Bedrock cuts down your AI prompts: Bedrock now shrinks your text prompts automatically while keeping the same answer quality. Shorter prompts mean you pay for fewer input tokens and get faster replies. Source
• Lambda stops infinite loops on EventBridge: Lambda now catches runaway loops on custom EventBridge buses and stops them. If a bad setup triggers an endless loop, this stops it before you get a huge surprise bill. Source
• ECS Gateway lets 25 services share one load balancer: This new tool sets up and runs Application Load Balancers for you. Up to 25 ECS services can share a single load balancer, so you stop paying for extra idle load balancers. Source
• DynamoDB lets you unhook region copies without losing data: You can now disconnect a region from a global table without deleting the table or its data. You stop paying for cross-region copying while keeping the local data safe. Source
• Redshift keeps system logs longer without custom code: Redshift now saves system table data past the old 7-day limit using S3 Tables. You no longer need to build and pay for custom data pipelines just to keep old logs. Source
• CloudWatch log sharing reaches more regions: You can now put logs from many accounts and regions into one place in GovCloud and 13 more regions. This makes it much easier to track everything in one spot. Source
• CloudWatch Omni expands to 8 new regions: This tool lets you view monitoring data across AWS accounts and other clouds in one screen. Finding bugs faster means less wasted time for your team. Source
• Better clock sync for 135 more EC2 instance types: More EC2 servers now get super accurate time sync across all regions. This helps apps that need exact timing run smoothly and makes log tracking cleaner. Source

Source: FinOps Weekly Newsletter

Sorry if this question is dumb, but I started aws like today. Is there a difference between these two?

The first one leads me to this page:

And the second one leads me to this page:

And I had to set up 2 different MFAs, one for each.

As a developer, I’m working on a project that needs a fast and cheap LLM. Nova Micro/Lite would be a perfect fit, and both are available in Frankfurt.

Here’s what happened:

1. On nova.amazon.com, the rate limits page says: “For higher limits, migrate to using Amazon Bedrock.”
2. So I created an AWS account. In eu-central-1, the default quota for Nova Micro, Nova Lite and every other model I’ve tried is 0.
3. I requested an increase, using the lowest value the form allowed.
4. Support rejected it because the account is new and has little usage. Their advice: build usage history by using your existing limits, or wait for the next billing cycle.

But the existing limit is 0. I can’t make a single call. I can’t generate the usage history needed to get the quota needed to generate usage. The only way forward seems to be burning credits on services I don’t need just to look “active”.

For the record, the support engineer was polite and clearly tried to help. The problem is the process.

Has anyone gotten past this on a fresh account? Did opening a support case through Sales work, or did you just give up and use another provider? For now, the catch-22 forces me to stay on the slow Nova developer tier and other providers.

Hi,

I spend all the day trying to sign in aws and I always had the this proplem I also talked withe support and nothing happened so can anyone help me with this (I tried incognito mode, deleted all the cash)

I have been a software developer for about 8 years, now I see more and more AI implemented in the full cycle. Using open-spec or other tools that make you pretty much just review code generated by AI.

I just finished the AWS Solutions Architect Associate course and, while looking at Cloud Formation, made wonder if the cloud will eventually suffer the same fate. AI will help create infrastructure easier using IaC I believe.

Do you think, like in software, it will become harder to enter cloud roles now? I know Solutions Architect isn't a junior role, but even as a cloud engineer, I don't see it become easier.

It seems like everything that touches software will have less and less people overall. After your certifications, maybe not AI or MLOps, have you feel it's tough for you to land a job? How is the day to day in your Cloud environment?

Pl help me i m trying to create a new aws account from last 5-6 hours 3,4 email used but when ever i created it it got on hold then suspended for no reason any one knwo why this happening?

Been trying to register a domain for almost a week now. I only get some mysterious message to contact support which I did that same day and I still haven't heard back from them. I tried a different browser as well but it didn't work.

This is the message I get:

The account is at least 6 months old and I have successfully gotten billed before.

The only thing I can think of is I had a legal name change back in December of last year. I re-added my credit card with my new name shortly thereafter and I have been billed with the new name.

Someone said to try to launch an EC2 instance for 5 minutes but that still doesn't work.

Any help would be appreciated.

We have several AWS environments running a micro RDS/Postgesql instance.

All of the instances show a sudden drop of FreeableMemory on the October 9th - 10th.
FreeableMemory is stable around 170Mb for months then drops to a new stable around 115Mb, which triggers our alerts.

We have not made simultaneous changes on these environments in the given periode. So I am thinking of a rollout of a RDS update or something like that.

Do anyone else see a similar drop?

I am unable to access my AWS account because the passkey configured as my only Multi-Factor Authentication (MFA) method is no longer available.

When I attempt to sign in as the Root user, AWS opens Windows Security and asks me to authenticate using a phone or USB security key. However, the passkey is no longer available in Windows or Google Password Manager. I do not remember deleting it; it simply stopped appearing.

I have attempted the available recovery options, including:

• Using the “Trouble signing in?” option on the AWS sign-in page.
• Looking for the “Try another MFA method” option mentioned in AWS documentation, which is not displayed.
• Retrying the sign-in process in Chrome Incognito mode.
• Checking Windows settings and Google Password Manager for the missing passkey.

Unfortunately, these attempts have not restored access. Cancelling the Windows Security prompt results in a sign-in failure.

I still have access to both the email address and phone number registered with my AWS account.

For those of us that are required to constantly update the AMI to keep current with security patches, this has sped up the process:
https://aws.amazon.com/blogs/compute/os-patching-and-upgrades-with-amazon-ec2-root-volume-replacement/

I made a new aws account yesterday, I was able to login to it the whole day and today all of a sudden I started getting this error message, ive tried resetting the password but I dont get any email.

I cant get into contact with aws, is there a chat or something I can connect to without signing it?

Authentication failed
Your root user credentials are not valid or sign-in as root is currently disabled for this account. Please reach out to your administrator for further assistance.

Can we customize the placement name in the TRK codes for awz marketplace tracking. The tracking-code currently includes generic tactic labels such as email-a, ISV Blog, and Content CTA L100 / Content CTA L200. Can we make it like em_seller-led_email_global_MSS-email-1-product-video ?