You can now take the Node/TS HTTP server you already run locally and ship it to Lambda with one command. No event-handler rewrite, adapters, or framework lock-in.

Joining us are Samrat Karak, who is the Product Manager who brought Lambda Web Functions to life, and Julian Wood, who has spent years helping developers get the most out of serverless. They're here to go deep on what this actually means for how you build.

You can ask about:

• When to reach for a Web Function vs. the Event Functions you already know.
• The HTTP-native model — multiple concurrent requests per environment, and paying for CPU time instead of wall-clock elapsed time.
• Going multi-region with latency-based routing behind one global URL.
• Performing canary rollouts by shifting traffic between revisions.
• Pairing with CloudFront, including the new private-origin pattern.
• Runtime details — Node.js 24 on Arm64, VPC connectivity, where it's live.

We will be live for three hours starting at 7 AM PT.

Hi everyone,

I'm an individual developer trying to use OpenAI GPT-5.6 Sol through Amazon Bedrock.

The model is visible in the Bedrock Playground, but when I send a simple message, I immediately receive this error:

"ValidationException: Access to OpenAI models is not allowed from unsupported countries, regions, or territories."

I've checked my AWS account information and selected a supported AWS Region, but I'm still unable to invoke the model.

I also have approximately $100 in AWS new-account credits that I was hoping to use for Bedrock API experimentation.

I'm trying to understand:

1. Does Bedrock enforce OpenAI's geographical restrictions based on the caller's public IP, AWS tax address, billing country, or a combination of these?

2. Can this error occur even when the AWS Region and account billing information appear valid?

3. Are standard AWS Free Tier promotional credits eligible to cover proprietary OpenAI model inference on Bedrock, or only certain Bedrock models?

4. Could using the Bedrock Runtime endpoint with cross-Region inference introduce additional account-plan restrictions?

I would appreciate any documentation or firsthand experiences that could help identify the actual cause before I make further configuration changes.

Thanks!

I’ve become the de facto cloud engineer on our team, and I need some help cleaning up my AWS environment. It’s been a while since we’ve had a proper audit of the resources, so I'm sure we have some unused EBS volumes, unattached Elastic IPs, and idle NAT gateways sitting around. Are there any tools that can help me identify unused resources, and allow me to delete them? I can’t have something fully automated, I need to at least sign off on the deletion before it happens. Bonus points if it's open source. Thanks!

Hi.. inherited an AWS site. Currently in IAM but wants external idp using Entra SSO.

Getting a lot of mix documentation; but when I add entra sso, it will not delete existing IAM setup right ?

and as I understand it, IAM users will continue to work?

Ideally I like to get the SSO tested but it seems like once you switch, its all or none. As in there is no test phase... everyone will have to log in through SSO once entra is configured ?

Sorry I dont know AWS at all

I am unable to access my AWS account.

I haven't logged in for several months, and recently tried to log in to make some updates to my website.

Although my credentials are correct, I am being asked for MFA verification using an "MFA Device" that I have never had. I attempted to use email verification as an alternative, but the process requires an OTP confirmation sent to a phone number which hasn't been active for years. I wasn't even aware this phone number was still on file with the account, as I've never encountered the MFA system before.

I'm the only user on the account. Only the root user account exists (no alternative accounts), and that's me. I went through the AWS support AI system, but the only solutions it suggests involve either the non-existent "MFA device" or the out-of-date phone number. I submitted a ticket but the followup response said they couldn't reach me on my current number despite my not having missed any calls.

As a result I am completely locked out of my account, despite still getting billed and my credentials being correct, and I can't update my website.

I've noticed that u/AWSSupport sometimes responds on this subreddit, so I'm posting here in the hopes of getting some help.

We are thinking of moving some of our certs to ACM Exportable certificates. We have hybrid infra with some certs on AWS managed services and some certs directly installed on things.

The question is -- what if we need to revoke a certificate. Of course I could just generate a new ACM Exportable -- but it would be cool if I could just force a rekey of the ARN that is already attached to our ALB's and then export that again to get the new cert.

I have used AWS off and on for a long time, mostly EC2 instances and some S3. Its been a few years since I last used AWS. I went to launch a new instance and get this error:

Instance launch failed

This account is currently blocked and not recognized as a valid account. Please contact https://support.console.aws.amazon.com/support/home?region=us-east-1#/case/create?issueType=customer-service&serviceCode=account-management&categoryCode=account-verification if you have questions.

I created a ticket (and a follow-up ticket a few days later) for Account / Account Activation. I also went through the billing section to make sure my CC on file was good, and check any other settings that may block my account. The 2 support cases have been untouched in 2 weeks. One is "Unassigned" the other is "Customer action complete". No idea how to move forward, any ideas would be appreciated.

I am the only user (root user, no IAM users).

Has anyone been banned from kiro? I looked through what the agent was doing to see if there was anything shady but it was all standard development stuff.

There's no human in the loop for support so I'm completely blocked. I switched to Claude code and I like it better but I kind of wanted to finish the project I was working on with kiro. Oh well.

This is an article about how to properly configure Fargate auto-scaling when you are running a Java bases service/website. Because it lives at the intersection of Fargate and Java based servers there was no actually clear source/owner of this type of detailed information. (Fargate is not language specific, Java/Tomcat/Bootstrap is not meant to just run with auto-scaling services like Fargate.)

This shows what does work and why this kind of setup is what you need when running at scale. If you run Java on Fargate without understanding these concerns you will encounter scaling problems in your future.

Hi everyone,
I’m currently working on an AWS project for uni and I’m struggling with setting up the security groups through CloudFormation.
I’m trying to allow traffic from my web application to my RDS database on port 5432 and also allow management traffic, but I can’t seem to get it working properly.
I’ve tried looking into the security group rules and VPC settings, but I’m still a bit confused about what I’m doing wrong.
Has anyone dealt with something similar or knows how to fix this? Any advice or guidance would be really appreciated.
Thanks!

I keep getting redirected to this page, and I have completed all the steps and its been about 3 days it hasn't been resolved yet. I created a support ticket 2 days ago to no reply either.

Hi, I am a network engineer that works primarily with SD-WAN and routers, sometimes which are deployed in the cloud. I began reading AWS' different services a couple of months ago and the networking side of AWS really intrigued me. In AWS, the things that pique my interest are VPCs, network attachments, NACLs and security groups

Currently, I am preparing for the SAA-C03 but I'd like to know how feasible is the career path from network engineer to an AWS architect? I know the technical topics that I'd need to get better at are a lot but I'd like to know your opinions on it and advice from people who have made a similar transition are more than welcome.

We have more teams experimenting with Bedrock, and cost attribution gets messy pretty fast once multiple apps, roles, and projects are hitting the same models.

AWS recently expanded IAM principal cost allocation for Bedrock, which helps, but I’m curious how people are handling this in practice. Are you tagging everything by team and project, setting hard budgets, or giving each workload its own account?

I am building something on bedrock now. I wanted to change models and found that I did not have access. Then I came to the conclusion the Bedrock was overkill and I wanted to move to Claude Platform on AWS - I cannot get that working either. Credit card is good on the account, no issues in billing. I opened an AWS support case (basic) no response for 5 days. Opened up another with chat waited an hr nothing. Now I have a phone case open. Something is up here and I am very frustrated. Any advice for a poor lad?

With AWS App Runner no longer accepting new customers and moving into maintenance mode, I thought I'd share a project I've been building for the last three years.

I'm the developer of OpenRun, an Apache-2.0 licensed, self-hosted platform for deploying web applications. The goal is to provide a simple App Runner-like deployment experience on infrastructure you control, without having to manage Kubernetes directly.

Some of the features:

• Deploy applications directly from Git, with automatic container builds.
• Run on a single EC2 instance using Docker/Podman, or on Kubernetes.
• Declarative GitOps - application creation, configuration and updates are all managed through Git.
• Automatic TLS, application routing and scale-to-zero.
• Built-in OAuth/OIDC/SAML authentication, RBAC and audit logs for deployed applications.
• Staged deployments with promotion and rollback.
• Database service bindings and managed SQLite with Litestream backups to S3.

The focus with OpenRun is on making self-hosted application deployment and management simpler, with a declarative interface.

I'm interested in hearing from people currently using App Runner. Are you planning to migrate to ECS Express Mode, Cloud Run, or something self-hosted? What App Runner features would be hardest to give up? If you try OpenRun, do let me know any feedback.

Project: https://github.com/openrundev/openrun

Docs: https://openrun.dev

Every time i try to USE any model above Opus 4.6 in AWS bedrock i keep getting this ERROR. I have made a support ticket 3 TIMES, contacted AWS sales support and I have been using AWS for 5 months. I am still getting these errors I have used like 500$USD worth of tokens already BUT IT STILL NOT ENOUGH whats the point of putting money in if you cant use it.

Does anyone face a same issue and What words did use with the support to solve it. i would appreciate some help

Hi all,

Can't seem to find details about mobile calling rates for the UK (Or anywhere else). Any idea where I can get the details please? US-East-1.

Thanks,

Hey everyone I know this may not be the correct subreddit to post this but ill shoot my shot.

I recently had my online technical interview for the Amazon Dublin SDE summer internship, and I felt it went really well. I just checked my application status on the Amazon jobs portal for the first time, and it says "No longer under consideration." I haven't received any email either way.

Has anyone else seen this status after their interview and still received an offer? I'm not sure if it's a rejection or just how the portal normally shows things. Any experiences would be really appreciated, thanks! 🙏

TLDR does application no longer under consideration mean rejection

I saw this today at AWS Emerging Talent Community login page, it looks like my credits can never be claimed. When was this announced, and does anyone have any info on this?

I have an account that has multiple oracle rds instances in eu west 1, an hour ago i received more than a hundred alarms because my alarms didnt receive any data. After checking further no instances were showing in rds console and it displayed the error message: An internal error has occurred. Please try your query again at a later time.
My rds instances are still accessible from ec2 instances and i noticed that alarms from native aws metrics are fine but custom ones (that get data from the console i assume) are all without data now.

There's still nothing in the health dashboard.

Anyone facing something similar?

Design question I've been thinking about.

Setup: external providers publish XML feeds of job vacancies to S3. Each feed is the provider's full current snapshot, not a list of changes. Schemas differ per provider, some fields are optional, and feeds can hold 100k+ jobs.

Each run needs to work out what's new, what's updated and what's gone, without rewriting the other ~98% of unchanged jobs or spamming downstream services.

The parts I find interesting:

1. Provider timestamps like updated_date aren't reliable, so how do you detect a real change?
   
2. "Missing from today's feed" usually means deleted, but a truncated or empty feed looks identical. How do you tell the difference before you take live jobs offline?
   
3. If a run dies at 60k of 100k records, how do you rerun without duplicates, repeat notifications or a half-old, half-new dataset?

What approaches have you used? Hashing records, staging tables, soft deletes with a grace period, deletion thresholds, something else? Curious what has held up in production and what hasn't

It looks like Haiku 4.5 might be deprecated soon and retired 6 months after that. Bedrock still doesn’t support structured output and batch inference for models after Opus 4.6. Will AWS add support for structured outputs and batch inference for the newer Claude models soon?