The attacker logged in with valid credentials. GuardDuty now watches what they query next.
GuardDuty RDS Protection now flags data exfiltration and destruction inside Aurora and RDS PostgreSQL. Detection moved into the data layer; the scarce part is engineers who can read both the query and the threat.
Read the post →AWS just turned the Well-Architected review into an agent. Someone still has to ship the fixes.
The Well-Architected Agent preview ranks fixes by business goal, reviews Terraform, CDK, and CloudFormation, and ships SSM runbooks. Analysis just got cheap; the engineers who can judge and land the changes did not.
Read the post →Your AI agent looks healthy and gives the wrong answer. AWS just built CloudWatch Omni for that.
CloudWatch Omni is GA: agent traces, 17 built-in quality evaluators, OpenTelemetry-native tracing, and DevOps Agent investigations in one place. Green dashboards no longer prove an agent works, and a new engineering profile follows.
Read the post →Serverless just stopped being ephemeral. AWS gave Lambda 90 minutes and a memory.
A 6x timeout increase on Lambda Managed Instances, Graviton5 support, S3 Files direct read, and durable checkpointing for Pydantic AI agents — all in one week. The 15-minute mental model is over, and the serverless hiring profile changes with it.
Read the post →AWS just made multicloud a managed product. Here's who you'll need to run it.
AWS Interconnect – multicloud now reaches Microsoft Azure in preview, alongside OCI and Google Cloud. The end of do-it-yourself cross-cloud networking — and the bilingual network, security, and placement-minded engineers it puts in demand.
Read the post →EC2 just turned 20 — and "EC2 skills" have been reinvented five times
From m1.small in one region to 1,200+ instance types, custom silicon, and AI infrastructure. What two decades of EC2 reinvention reveal about the cloud engineers worth hiring in 2026.
Read the post →Frontier AI just joined the blue team: OpenAI Daybreak lands on Amazon Bedrock
Daybreak Blue and Daybreak Red bring governed frontier AI to security teams on Bedrock — vulnerability discovery, detection engineering, incident response. The engineering profile the AI-native security era demands.
Read the post →AWS just shipped the guardrails for production AI agents. Here's who you'll need to run them.
Dogwood, AgentCore temporal policies, Agent Plugins, dedicated runtimes, vector search in DynamoDB — AWS is building the governance layer for AI agents, and a new engineering profile to go with it.
Read the post →AWS retired Bedrock Agents. Here's what the AgentCore era means for your cloud team.
The Bedrock Agents → AgentCore shift, decoded — and the GenAI, agent-orchestration, and platform engineers it puts in demand for enterprises and AWS consulting partners.
Read the post →Welcome to the Fastwater Cloud Staffing blog
What we'll cover here: AWS talent-market intelligence for consulting partners, migration firms, and enterprises — from GenAI engineers to FinOps analysts.
Read the post →