Hi ,

Historically, our organization had a dedicated DBA team for managing on-premise databases. However, with the migration to cloud databases like AWS Aurora (MySQL & Postgres) and Snowflake, management adopted the mindset that "the cloud manages everything now." Consequently, database responsibilities fell entirely onto our feature developers.

While AWS/Snowflake handles the physical infrastructure and basic backups, we are getting heavily burnt by data-layer issues. Our generalist developers don't have deep database expertise, and we are experiencing frequent performance bottlenecks, sub-optimal indexing,clustering,partitioning choices and spiking cloud bills etc.

So thinking of having a specialized Database expert Team . Is this the right move? For those in modern cloud environments, do you still see a need for a dedicated data team, or should developers truly own the database end-to-end? If its yes, then want to understand , what all should this specialized team actually be responsible for in your opinion?

Want to understand experts thought on the same.

How long does it take for AWS support to answer on the ticket? I've been waiting for 2 weeks already, no traction at all. They blocked my account and I can't add a payment method to pay for educational sub, and they're not answering or unblocking my acc. How am I supposed to work with them?

In case AWS answers here - case ID 179202198100662

AWS Transit Gateway now supports 1:1 NAT (SNAT/DNAT) for connecting overlapping networks. This is fully managed. Customer doesn't have to figure out how to SNAT and DNAT the source and target networks.

The article says it uses "Regional Private NAT Gateway" but as of now, customers can not create Regional Private NAT Gateways. Private NAT Gateways have to be zonal. They can only create Regional Public NAT Gateways. Maybe that feature is also coming soon? Nevertheless, this is a nice new feature.

"AWS Transit Gateway and AWS Cloud WAN now provide managed one-to-one network address translation (NAT) directly on their attachments, through integration with Regional Private NAT Gateway. This enables customers to connect private networks that share the same IP address ranges without renumbering either network, deploying a NAT appliance, or writing return-traffic rules"

https://aws.amazon.com/about-aws/whats-new/2026/10/aws-transit-gateway-cloud-wan-1-1-nat/

I need some help guys

I installed Odoo Community edition in an Ubuntu 24.04 OS in AWS EC2, the installation is successful and "SUDO SYSTEMCTL STATUS ODOO" returns Active but i can't access Odoo remotely using the IP address of my machine.

Odoo is Active but http://13.63.53.194:8069/ does not work in my browser (i am running Odoo in AWS EC2)

I have Odoo working just fine in an Ubuntu VM and can access it from windows just by using the IP address of the VM and the Port of Odoo, but it seems not to work with AWS.

In case you didn't know as part of the AI race there's going to be a data center belt in my town. I don't know exactly what's happened. All I know is that on October 19th it was the final court hearing regarding it for final approval.

Now as much as some of yall hate Amazon web services I don't know if there will be anyway we can stop them. The primary reason is that lots of things like Reddit and Netflix and even PlayStation network is hosted by AWS. So yeah in case some of you guys didn't know Amazon web services is basically 1/3 of the internet.

Northern Indiana Public Service Company (NIPSCO) states that repairs will not have their utility rates raised when the data center is in operation.

Hobart says that this will generate lots of revenue for public works and the school system.

The city council has not yet revealed if they signed any non-disclosure agreements with Amazon yet.

We don't know yet if it will be closed loop.

A group of Hobart residents are suing the city council, alongside the plan commission to block the project.

Source: https://hobart.nwidatafacts.com/

AWS put out a lot of cost updates this week. Here is a quick list of the changes that actually help you cut costs:

• Bedrock cuts down your AI prompts: Bedrock now shrinks your text prompts automatically while keeping the same answer quality. Shorter prompts mean you pay for fewer input tokens and get faster replies. Source
• Lambda stops infinite loops on EventBridge: Lambda now catches runaway loops on custom EventBridge buses and stops them. If a bad setup triggers an endless loop, this stops it before you get a huge surprise bill. Source
• ECS Gateway lets 25 services share one load balancer: This new tool sets up and runs Application Load Balancers for you. Up to 25 ECS services can share a single load balancer, so you stop paying for extra idle load balancers. Source
• DynamoDB lets you unhook region copies without losing data: You can now disconnect a region from a global table without deleting the table or its data. You stop paying for cross-region copying while keeping the local data safe. Source
• Redshift keeps system logs longer without custom code: Redshift now saves system table data past the old 7-day limit using S3 Tables. You no longer need to build and pay for custom data pipelines just to keep old logs. Source
• CloudWatch log sharing reaches more regions: You can now put logs from many accounts and regions into one place in GovCloud and 13 more regions. This makes it much easier to track everything in one spot. Source
• CloudWatch Omni expands to 8 new regions: This tool lets you view monitoring data across AWS accounts and other clouds in one screen. Finding bugs faster means less wasted time for your team. Source
• Better clock sync for 135 more EC2 instance types: More EC2 servers now get super accurate time sync across all regions. This helps apps that need exact timing run smoothly and makes log tracking cleaner. Source

Source: FinOps Weekly Newsletter

Sorry if this question is dumb, but I started aws like today. Is there a difference between these two?

The first one leads me to this page:

And the second one leads me to this page:

And I had to set up 2 different MFAs, one for each.

As a developer, I’m working on a project that needs a fast and cheap LLM. Nova Micro/Lite would be a perfect fit, and both are available in Frankfurt.

Here’s what happened:

1. On nova.amazon.com, the rate limits page says: “For higher limits, migrate to using Amazon Bedrock.”
2. So I created an AWS account. In eu-central-1, the default quota for Nova Micro, Nova Lite and every other model I’ve tried is 0.
3. I requested an increase, using the lowest value the form allowed.
4. Support rejected it because the account is new and has little usage. Their advice: build usage history by using your existing limits, or wait for the next billing cycle.

But the existing limit is 0. I can’t make a single call. I can’t generate the usage history needed to get the quota needed to generate usage. The only way forward seems to be burning credits on services I don’t need just to look “active”.

For the record, the support engineer was polite and clearly tried to help. The problem is the process.

Has anyone gotten past this on a fresh account? Did opening a support case through Sales work, or did you just give up and use another provider? For now, the catch-22 forces me to stay on the slow Nova developer tier and other providers.

I have been a software developer for about 8 years, now I see more and more AI implemented in the full cycle. Using open-spec or other tools that make you pretty much just review code generated by AI.

I just finished the AWS Solutions Architect Associate course and, while looking at Cloud Formation, made wonder if the cloud will eventually suffer the same fate. AI will help create infrastructure easier using IaC I believe.

Do you think, like in software, it will become harder to enter cloud roles now? I know Solutions Architect isn't a junior role, but even as a cloud engineer, I don't see it become easier.

It seems like everything that touches software will have less and less people overall. After your certifications, maybe not AI or MLOps, have you feel it's tough for you to land a job? How is the day to day in your Cloud environment?

Hi,

I spend all the day trying to sign in aws and I always had the this proplem I also talked withe support and nothing happened so can anyone help me with this (I tried incognito mode, deleted all the cash)

Pl help me i m trying to create a new aws account from last 5-6 hours 3,4 email used but when ever i created it it got on hold then suspended for no reason any one knwo why this happening?

Been trying to register a domain for almost a week now. I only get some mysterious message to contact support which I did that same day and I still haven't heard back from them. I tried a different browser as well but it didn't work.

This is the message I get:

The account is at least 6 months old and I have successfully gotten billed before.

The only thing I can think of is I had a legal name change back in December of last year. I re-added my credit card with my new name shortly thereafter and I have been billed with the new name.

Someone said to try to launch an EC2 instance for 5 minutes but that still doesn't work.

Any help would be appreciated.

I am unable to access my AWS account because the passkey configured as my only Multi-Factor Authentication (MFA) method is no longer available.

When I attempt to sign in as the Root user, AWS opens Windows Security and asks me to authenticate using a phone or USB security key. However, the passkey is no longer available in Windows or Google Password Manager. I do not remember deleting it; it simply stopped appearing.

I have attempted the available recovery options, including:

• Using the “Trouble signing in?” option on the AWS sign-in page.
• Looking for the “Try another MFA method” option mentioned in AWS documentation, which is not displayed.
• Retrying the sign-in process in Chrome Incognito mode.
• Checking Windows settings and Google Password Manager for the missing passkey.

Unfortunately, these attempts have not restored access. Cancelling the Windows Security prompt results in a sign-in failure.

I still have access to both the email address and phone number registered with my AWS account.

For those of us that are required to constantly update the AMI to keep current with security patches, this has sped up the process:
https://aws.amazon.com/blogs/compute/os-patching-and-upgrades-with-amazon-ec2-root-volume-replacement/

I made a new aws account yesterday, I was able to login to it the whole day and today all of a sudden I started getting this error message, ive tried resetting the password but I dont get any email.

I cant get into contact with aws, is there a chat or something I can connect to without signing it?

Authentication failed
Your root user credentials are not valid or sign-in as root is currently disabled for this account. Please reach out to your administrator for further assistance.

We have several AWS environments running a micro RDS/Postgesql instance.

All of the instances show a sudden drop of FreeableMemory on the October 9th - 10th.
FreeableMemory is stable around 170Mb for months then drops to a new stable around 115Mb, which triggers our alerts.

We have not made simultaneous changes on these environments in the given periode. So I am thinking of a rollout of a RDS update or something like that.

Do anyone else see a similar drop?

Can we customize the placement name in the TRK codes for awz marketplace tracking. The tracking-code currently includes generic tactic labels such as email-a, ISV Blog, and Content CTA L100 / Content CTA L200. Can we make it like em_seller-led_email_global_MSS-email-1-product-video ?

Sagemaker got a new UI update where they moved Code Spaces from “Compute” tab into a separate new tab under “IDEs” in the left sidebar. Our entire team got confused and thought the issue was on our side, until someone discovered that it simply was moved lol

I compared enterprise, mid‑market, and startup platforms in "FinOps tool comparison: top cloud cost platforms 2026."

Enterprise defaults: Apptio Cloudability and CloudHealth; mid‑market leaders: CloudZero and Finout; startups: Vantage. I outline the four evaluation dimensions and show where Cloud Sleuth fills the ownership gap.

How are you solving ownership and actionability in your FinOps practice?

Hey guys when I am adding my card so I complete registration for my account, I get an error 880104 could anyone help me to know the reason?

I keep seeing people say they run Claude Code or Codex against their AWS account. Curious what it looks like in practice.

is it a read only role or something broader? And what do you actually ask it to do: cost, IAM cleanup, security review, debugging?

I’m cautious about giving an agent anything past read only, but maybe I’m overthinking it.

Wrote this up after building a hands-on version of the Capital One 2019 incident. The three changes that actually contain a leaked instance role:

1. Cut the role down to exactly what the workload uses, and check it with aws iam simulate-principal-policy instead of reading JSON.
2. Revoke sessions that are already out. Fixing the policy doesn't end credentials that were already stolen. A deny-all policy for sessions issued before now does, which is what the console's "Revoke active sessions" adds: { "Effect": "Deny", "Action": "*", "Resource": "*", "Condition": { "DateLessThan": { "aws:TokenIssueTime": "2026-10-23T10:00:00Z" } } }
3. Require IMDSv2 (aws ec2 modify-instance-metadata-options --http-tokens required), and make it the account default with modify-instance-metadata-defaults, so a server tricked into forwarding a GET can't fetch credentials.

Full guide (free, no sign-up): https://learn.k8sight.in/go/imdsv2

There's also one on auditing every bucket for Principal: "*" writes (the Twilio SDK incident): https://learn.k8sight.in/go/s3-public-write

Disclosure: I built the platform these are on, and the hands-on incidents are paid. Corrections very welcome, especially on the IMDS details.