#744: Amazon Bedrock AgentCore, Amazon EC2 Capacity Manager, and so much more!

0:00This is episode 744 of the AWS podcast, released on November 3rd, 2025. Hello, everyone, and welcome back to Adibus Podcast. I'm Les Shee with you. Great to have you back with, of course, my co-host, Jillian Ford. G'day, Jillian. How are you doing? Simon, it's always a wonderful day when it's podcast day. These are facts. These are facts. So a couple of things that have popped up that we thought we'd highlight at the start before we get into all the updates. There's quite a few, and they're getting cool. The first one is that Amazon Bedrock Agent Core is now available. So you may have heard of this before.

0:33This is an agentic platform to build, deploy, and operate highly capable agents securely at scale using any framework, model, or protocol. That's really important. So this means you can build your agents faster, you can run them securely, you can have extended runtimes, and you can also monitor them in production. So it's taking away of our old friend, the undifferentiated heavy lifting of managing all these agents. Because once you create them, you're like, oh, now how do I look after them? So what's happening with general availability? Well, all Agent Core services now have support for VPC, AWS PrivateLink, AWS CloudFormation, resource tagging.

1:08So you get all that good stuff now out of the box. And Agent Core Runtime builds on its preview capabilities of an industry-leading eight-hour execution window and complete session isolation by adding support for agent-to-agent protocol, which I know a lot of folks have been asking for, and broader A2A supports coming across all agent core services. There's also now agent core memory that offers a self-managed strategy that gives you complete control over your memory extraction and consolidation pipelines. And agent core gateway now connects to existing model context protocol or MCP servers in addition to transforming APIs and Lambda functions into agent compatible tools.

1:50Plus there's more, there's IAM authentication so you can use that in addition to OAuth as well. Agent core identity now gives you identity aware authorization, secure vault storage for refresh tokens, native integration with additional OAuth enabled services. So lots of stuff there. And Agent Core Observability now delivers complete visibility into end-to-end agent execution with operational metrics across all Agent Core services through dashboards powered by, of course, Amazon CloudWatch. And it is OTL compatible. So you can integrate it into external capability providers like Dynatrace, Datadog, Arise, Phoenix, Langsmith, and Langfuse.

2:29Now, this works, AgentCore works with any open source framework. So CrewAI, LandGraph, LlamaIndex, Google ADK, OpenAI, Agents SDK, and any model in or outside of Amazon Bedrock. So you can use whatever it is you want to use. This is a thing I need to get far more comfortable with because I think I've been doing things the hard way until this came along, and now we don't have to do it the hard way anymore, Julian. I agree. I'm really excited for this one as well. And all the regions that it's now generally available in, I mean, you've got U.S. East Virginia, Ohio. We've got Asia Pacific, Sydney, Tokyo, Frankfurt, Ireland.

3:08I mean, Singapore. That's a lot. Yeah. Boom, bye. It's there. It's there. Get into it. Have a look at it. And it's nice because what's happened since the preview into the full release is, of course, lots of customer feedback and lots of work. And so now it's got all these features that I think a lot of folks looked at the site and said, this sounds promising, but I need X. Well, X is there now. So have a try. Now, something else that's really useful and interesting, I think, is the new Amazon EC2 Capacity Manager. So this is a new capability that enables customers to monitor, analyze and manage your EC2 capacity across all of your accounts and regions.

3:48So this is all about simplification. One interface, and you get a comprehensive view of your on-demand spot and capacity reservation usage across your accounts and regions. So this is really useful to understand trends because these details will give you all the historical trends. You can see optimization opportunities. You know how much I pester everyone to check their EC2 usage and optimize appropriately. You have the user interface, you have APIs, and also you can download your data as well. So if you're using some other system to manage things, you can do this. It's available at all commercial AWS regions enabled by default at no additional cost.

4:27Wow, wouldn't you? And I also love for all of those who are using multiple accounts, which I hope is everyone who's here. Once you've enabled AWS organizations, you can view and analyze your capacity across all of your member accounts in a single dashboard. How convenient. That's what we like. convenience is good. So let's get into some of the other updates. Let's talk analytics. Amazon Kinesis Data Streams has announced new fault injection service actions for API errors. So you can now test your application's error handling and retry mechanisms, things like exponential backoffs. Amazon MSK managed streaming for Apache Kafka now supports version 4.1.

5:10So this introduces queues as a preview feature, a new streams rebalance protocol in early access and eligible leader replicas, plus bug fixes and improvements. Amazon OpenSearch Service now supports Graviton 4 based instances. So these will often give you up to 30 % better performance than Graviton 3 and give you the best price performance for what you're trying to do. My simple recommendation is if you're using something like the OpenSearch Service or RDS, et cetera, if you can switch to Graviton. If you can switch to the latest version of Graviton, you'll get a price performance benefit with zero effort.

5:48And I like zero effort. Amazon QuickSight has announced the general availability of a new data preparation experience. So you can now clean, transform and combine your data in multi-step workflows. You can append tables, you can aggregate data, you can do flexible joins and other advanced operations. You used to have to use custom programming or my very good friend SQL commands. Now you can do it a lot easier and you could even use data sets as a source expanded from three to ten levels now. There's team functionality, you can have 20 times larger cross source joins, so this moves from the previous capacity of one gig to 20 gig, like it's getting big.

6:26You can do lots of stuff. Let's talk some quick updates for application integration. Amazon Coreto October October 2025 quarterly updates are out. So if you're not familiar with it, this is a no-cost multi-platform production redistribution of OpenJDK. So if you're doing anything Java related, this is a library you want to use. I have it running on my machine. I update it regularly when it comes to the updates. And AWS Step Functions now supports Diagnosed with Amazon Q. So if you're not familiar with Step Functions, it's a visual workflow service that lets you build distributed applications and automate your IT and business processes.

7:04You can also build data and machine learning pipelines as well. And what this does is brings Amazon's Q's intelligent error analysis directly into the console. So if you're in the console doing stuff and stuff ain't working, you just click Diagnose with Amazon Q and it will go and give you some troubleshooting assistance. It's actually really useful. I used this the other day because I'm using step functions for something else. And I don't use step functions that often in just the work that I do, but I was using it and because I'm not a step functions expert and things weren't working, I just diagnosed it with Q.

7:37Q told me what was wrong, Q fixed it, and I moved on with my life. And speaking of other really cool things with artificial intelligence, Claude Haiku 4.5 is now available in Amazon Bedrock. Claude Haiku 4.5 delivers new frontier performance matching Claude Sonnet 4's capabilities in coding, computer use, agent tasks, and at a substantially, substantially lower cost and faster speeds. That's a big deal. It really is, yeah. The model supports vision, and it unlocks new use cases where customers previously had to choose between performance and cost. It enables economically viable agent experiences, supports multi-agent systems, and Claude's unique character makes it really great for having a performance efficiency, especially when you're looking at being able to take these proof of concepts and put them into production.

8:40So this is available in Bedrock via global cross-region inference in multiple locations. Pretty exciting about that one. Amazon Bedrock now provides immediate access to all serverless foundation models by default for users in all commercial AWS regions. This is a big deal, this one, because this is the old. You used to have to go in and click a bunch of checkboxes, and then the list got longer and longer and longer. There is no list anymore. That's right. No more buttons. Just start going. I love it. Amazon Bedrock Data Automation now supports AVI, MKV, and WebM file formats, along with the AV1 and MPEG-4 visual codecs, enabling you to generate insights across a broader range of video content.

9:29And BDA also delivers up to 50 % faster image processing. Pretty cool. If you're not familiar with Bedrock data automation, it's definitely worth checking out, especially if you're processing documents or in this case, images. It allows you to automate the generation of insights from unstructured multimodal content, such as documents, images, even audio and videos. So there's also expanded video and Kodak support. So it's definitely great, especially if you've got these like larger volumes of images and you want to be able to process them in less time. So definitely recommend that. Amazon Nova models now support the customization of content moderation settings for approved business use cases that require processing or generating sensitive content.

10:19Amazon SageMaker AI projects now supports custom template S3 provisioning. Amazon SageMaker Univide Studio supports Amazon Athena workgroups. Now we've got one update in the AWS Marketplace. AWS Marketplace now supports purchase order line numbers for AWS Marketplace purchases, which is just going to make it a lot simpler with cost allocation and payment processing. Let's talk business applications. Of course, the Amazon Connect team have been busy because they always are. Amazon Connect now provides granular permissions for conversation recordings and transcripts. So now you can separately configure access to recordings and transcripts so you can allow users to listen to calls while preventing any unauthorized copying of transcripts.

11:05Amazon Connect now supports threaded views and includes conversation history in agent replies. It also now supports automated follow-up evaluations triggered by initial evaluation results and it now provides configurable thresholds for schedule adherence. So you can define how early or late agents will start in their shifts. So you may say that they can start five minutes early or end 10 minutes late or end their breaks three minutes late without it sort of affecting their adherence scores you know there's a bit of flexibility there now. Some more updates it now supports agent schedule adherence notifications so you can understand if people are following what they should be following.

11:44It supports copy and bulk editing of agent scheduling configuration and Amazon Connect outbound campaigns support preview dialing for greater agent control So this means you can see as an agent, you can see key customer information like name, account balance, prior interactions, and choose the right moment to call so that you're getting the right context before you make that phone call. Amazon QuickSight now supports font customizations for data labels and axes so you can make it look even more pretty. And something brand new that's generally available is Amazon RTB Fabric. This is a fully managed service that allows you to connect with your ad tech partners such as Amazon Ads, GumGum, Cargo, MobileFuse, Sorven, TripleLift, Viant, Yieldmo, etc.

12:30in just three steps while giving single-digit millisecond latency for a private high-performance network environment. RTB Fabric reduces the standard networking cloud costs by up to 80 % and doesn't require any commitments. Now, this is all about real-time bidding for advertising type stuff, which is a really interesting domain. I remember speaking to folks early, early, early, early on in my time at Amazon who were building on AWS for exactly this use case. And latency was always a maximum consideration. So this is a really interesting offering that's available now. And Amazon SES, the simple email service, has added visibility into the IP addresses used by dedicated IP address managed pools.

13:12So you can now find the exact addresses in use when sending emails through DIPM pools to mailbox providers. and this gives you more transparency and allows you to have more control. Let's talk about compute. Amazon EC2 now allows customers to modify an instance's CPU options to optimize the licensing costs of Microsoft Windows license-included workloads. This is a big one. You can now customize the number of vCPUs and or disable hyper-threading on Windows Server and SQL Server license-included instances to save on vCPU-based licensing costs. That's a really big deal. It really is. I don't know if you spend much time of your life working on licensing.

13:55It's not fun, spoiler alert. But cutting back on CPUs that you're not using, etc., can have a huge effect in terms of cost. So this is massive. It really is. I mean, just to put it into perspective, so let's take an R7i 8X large instance, and this is running a Windows and SQL Server license So now you can turn off hyperthreading to reduce the default 32 vCPU count to 16. And then what that's going to do for you is this is actually going to save you 50 % on the licensing costs. I mean, that's pretty significant. And you're still getting the same memory that you had before in the same IOPS as well.

14:34So you're not cutting back on those. For sure. Yeah, this is really cool. Amazon ECS now publishes AWS CloudTrail data events for insights into API activities. This new capability enables customers to monitor, audit, and troubleshoot container instance operations. With CloudTrail data event support, security and operations teams can now maintain comprehensive audit trails of ECS agent API activities, detect unusual access patterns, and troubleshoot agent communication issues more effectively. Amazon ECS now allows you to run FireLens containers as a non-root user by specifying a user ID in your task definition.

15:18AWS Lambda increases maximum payload size from 256 kilobytes to 1 megabyte for asynchronous invocations. This is also a big one if you are like a serious serverless user. Yes, it really helps people streamline their architectures. I could really have another look at things. Oh, for sure. All right, next up, we've got Adibus Parallel Computing Service. This now supports rotation of cluster secret keys using Adibus Secrets Manager, enabling you to update the secure credentials used for authentication between Slurm controller and compute nodes without creating a new cluster. Adibus Parallel Computing Service now supports Slurm version 25.05.

16:05AWS Serverless Application Model Command Line Interface now supports Finch as an alternative to Docker for local development and testing of serverless applications. AWS FluentBit announces version 3.0.0 based on FluentBit version 4.1.0. So we talked about processing stuff. Where do we put it? We put it in databases. So let's talk about databases. Amazon CloudWatch Database Insights now provides on-demand analysis for RDS in SQL Server. So this uses machine learning models to identify performance bottlenecks during time periods and gives you advice on what to do next. So this really helps process your data faster because you figure out where those bottlenecks are and you fix them.

16:47Amazon DocumentDB with MongoDB compatibility now supports Graviton4-based R8G database instances. refer back to my earlier comment. If you can move to Graviton 4, do it. You'll thank me later. And Amazon DocumentDB with MongoDB now supports Internet Protocol version 6 because of course it is the year of IPv6. Wouldn't be an episode without one of those. And we're also happy to announce Vector Search for Amazon ElastiCache is now generally available. So you can use ElastiCache to index, search, and update billions of high-dimensional vector embeddings with popular providers like Amazon Bedrock, SageMaker, Anthropic and OpenAI with latency as low as microseconds and up to 99 % recall.

17:31So when would you use this? Semantic caching for large language models, multi-turn conversational agents, which need that very quick response time to give you relevant information back to people who are waiting on those answers. CloudWatch Database Insights now supports tag-based access controls. So this includes database and per query metrics as well. So this means you can logically group together and stop people seeing things they shouldn't see. Aurora DSQL now supports resource-based policies, again, simplifying access control, and it means you can specify IAM principles and the specific IAM actions they can perform against your Aurora D SQL resources.

18:11Amazon RDS now supports the latest CU and GDR updates for Microsoft SQL Server, which is my regular reminder for you to patch your stuff. And Amazon RDS for SQL Server now supports retaining CDC configurations when restoring your backups. So this makes it easier for you to get up and running quickly and making sure that you have your restoration set up properly. Amazon RDS for SQL Server enables encrypting native backups using server-side encryption using AWS KMS keys. So this means you can now encrypt your files using your own KMS key or the AWS ones as well. Amazon Aurora Postgres SQL zero ETL integration with Amazon SageMaker is now available so this means you can have near real-time availability for analytics workloads so this integration automatically extracts and loads data from Postgres SQL tables into your lake house where it's immediately accessible through various analytics engines and machine learning tools now the data synced into the lake house is compatible with Apache Iceberg open standards which means you can use things like SQL, Apache Spark, BI and AIML tools, no code interface, away you go.

19:19This is a really cool thing. I love anything that avoids me having to do any ETL. Amazon Timestream for InfluxDB now offers support for InfluxDB 3. So this is a new architecture for the InfluxDB database engine built on Apache Arrow for in-memory data processing, Apache data fusion for query execution and columnar parquet storage format with persistence in Amazon S3 to give you fast performance for high cardinality data and large-scale data processing for large analytical workloads. Got two updates in end-user computing. Amazon AppStream 2.0 now offers Microsoft applications with licenses included.

20:01Amazon DCV releases version 2025.0 with enhanced keyboard handling and web auth and support. One update in the world of front-end web and mobile, Amazon Location Service introduces new map styling features for enhanced customization. So it means you can now customize your maps with terrain visualization, contour lines, real-time traffic data, and transport-specific routing information. And it can be tailored for different use cases. So, you know, you might have something that's different for outdoor navigation versus logistic planning, et cetera. helps you do overlays, all those kinds of visual things you want to do.

20:38Now let's talk about management and governance. Generative AI observability is now generally available in Amazon CloudWatch. So this allows you to monitor all components of AI applications and workloads. So this includes, of course, agents deployed and operated with Amazon Bedrock Agent Core. This release expands beyond runtime monitoring to include complete observability across Agent Core's built-in tools, gateways, memory, and identity capabilities. So with this new capability, CloudWatch enables developers to analyze telemetry data across components of a generative AR application. You can monitor code execution patterns in built-in tools.

21:15You can track API transformation success rates through gateways. You can analyze memory storage and retrieval patterns. And you can ensure secure agent behavior through identity observability. Now, this is really useful because, you know, as we're building out these systems, they get complex pretty quickly and they're doing lots of stuff. This lets you do things like identify gaps in vector DB to authentication failures to end-to-end prompt tracing. And when people are saying, why is it doing this? You can give them a good answer. Amazon CloudWatch now also offers interactive incident report generation, which means you can create comprehensive post-incident analysis reports in just minutes.

21:52So what this will do is automatically gather and correlate all your telemetry data as well as your input and any actions taken during an investigation and give you a streamlined report. This is really cool. Amazon CloudWatch Agent has added support for Windows event log filters. So this means you can selectively collect and send system and application events to CloudWatch from Windows hosts running on EC2 or on-premises. So this allows you to focus on events that meet specific criteria and it means you're reducing the amount of logging you might be doing. Amazon CloudWatch Synthetics now supports bundled multi-check canaries.

22:27No, these are not actual birds. Canaries are tests that you use to try and see if something might be going wrong. It's sort of the analogy of the canary in the coal mine from the old days. And so now there are multi-check blueprints, which means you can have comprehensive tests with just some simple JSON configuration files. so you don't have to sort of figure everything out you can bundle up to 10 different monitoring steps in a single canary and get up and running adibus config now supports three new resource types make sure using config it stops things happening that you don't want to have happen and adibus customer carbon footprint tool now includes scope 3 emissions data this is really important because this is irrelevant to folks who are working in sort of environments or areas that need industry reporting.

23:13So we have scope 3 emissions data and scope 1 natural gas and refrigerants, which means you have visibility into your cloud carbon footprint. And this allows you to have full visibility into the lifecycle carbon impact of your usage, including emissions from manufacturing the servers that run the workloads, powering the AWS facilities, and transporting equipment to data centers. Historical data is available back to January 2022, so you can also see your train data as well. AWS Systems Manager, Patch Manager, has launched security updates notification for Windows. So this allows you to identify security updates that are available but not approved by your patch baseline configuration.

23:51And AWS now supports immediate resource discovery within a region. So this provides immediate access to research search in all accounts through AWS Resource Explorer. So you don't have to activate it to get it. You just get it, if that makes any sense. let's talk about migration and transfer adibus transfer family now supports changing identity provider type on a server so you can change it without service disruption so this is really useful if you need to make a change and adibus transfer family sftp connectors now support a vpc-based connectivity next up is networking and content delivery adibus application load balancer launches URL and host header rewrite.

24:33This feature enables customers to modify request URLs and host headers using regex-based pattern matching before routing requests to targets. With URL and host header rewrites, you can transform URLs using regex patterns, standardize URL patterns across different applications, modify host headers for internal service routing, remove or add URL path prefixes and redirect legacy URL structures to new formats. AWS Client VPN is now supporting macOS Tahoe. Amazon Route 53 Profiles now supports AWS PrivateLink. Next up, we've got Security, Identity, and Compliance. AWS announces support for customer-managed KMS keys and automated reasoning checks and Amazon Bedrock guardrails.

25:24This enhancement enables you to use your own encryption keys to protect policy content and tests, giving you full control over key management. AWS Security Hub Security Posture Management now supports the Center for Internet Security AWS Foundation's benchmark version 5.0. Let's talk storage. AWS Backup expands information in job APIs and Backup Audit Manager reports, so you can now get more information. You can also verify your backup policies with a single API call so this gives you more control. And Adibus backup has also enhanced a backup plan management with schedule preview. You can see when each backup occurs across all backup rules along with settings like life cycle to cold storage, point in time recovery and indexing.

26:13So this lets you identify any conflicts or gaps that you may want to address. And there are new Amazon CloudWatch metrics to monitor EC2 instances exceeding IO performance. So these two new metrics, instance EBS IOPS exceeded check and instance EBS throughput exceeded check monitor if the driven IOPS or throughput is exceeding the maximum EBS IOPS or throughput that your instance can support. This is really useful. Like, am I trying to do what I just am not going to be successful in doing? This can make fixing things a lot quicker. And Amazon EBS This now supports volume clones for instance volume copies.

26:49So this new capability allows you to instantly create and access point in time copies of EBS volumes within the same AZ, accelerating software development workflows and being more agile. So with Amazon EBS volume clone, you can instantly create copies of volumes and access those copied volumes with single digit millisecond latency. So the difference here is it's really fast once you start to use them, which is a really cool improvement. it. Amazon S3 now generates Adibus CloudTrail events for S3 table maintenance operations. So anytime S3 tables automatically performs maintenance, it will tell you.

27:26And some other cool things to share. So we're going to talk about another new thing. This is a little Easter egg if you stayed with us all the way through. I know we talk about some of the cool stuff at the start. There's another cool thing to talk about as well. And this is a new launch of a capability that I think a lot of folks will use. I know I've been using this myself. This is Amazon QuickSuite. This is an agentic AI powered workspace. So you can think of it as like a whole bunch of teammates that can get you the answers you need around your business data. And you can do things like reporting.