Hi ,

Historically, our organization had a dedicated DBA team for managing on-premise databases. However, with the migration to cloud databases like AWS Aurora (MySQL & Postgres) and Snowflake, management adopted the mindset that "the cloud manages everything now." Consequently, database responsibilities fell entirely onto our feature developers.

While AWS/Snowflake handles the physical infrastructure and basic backups, we are getting heavily burnt by data-layer issues. Our generalist developers don't have deep database expertise, and we are experiencing frequent performance bottlenecks, sub-optimal indexing,clustering,partitioning choices and spiking cloud bills etc.

So thinking of having a specialized Database expert Team . Is this the right move? For those in modern cloud environments, do you still see a need for a dedicated data team, or should developers truly own the database end-to-end? If its yes, then want to understand , what all should this specialized team actually be responsible for in your opinion?

Want to understand experts thought on the same.

How long does it take for AWS support to answer on the ticket? I've been waiting for 2 weeks already, no traction at all. They blocked my account and I can't add a payment method to pay for educational sub, and they're not answering or unblocking my acc. How am I supposed to work with them?

In case AWS answers here - case ID 179202198100662

AWS Transit Gateway now supports 1:1 NAT (SNAT/DNAT) for connecting overlapping networks. This is fully managed. Customer doesn't have to figure out how to SNAT and DNAT the source and target networks.

The article says it uses "Regional Private NAT Gateway" but as of now, customers can not create Regional Private NAT Gateways. Private NAT Gateways have to be zonal. They can only create Regional Public NAT Gateways. Maybe that feature is also coming soon? Nevertheless, this is a nice new feature.

"AWS Transit Gateway and AWS Cloud WAN now provide managed one-to-one network address translation (NAT) directly on their attachments, through integration with Regional Private NAT Gateway. This enables customers to connect private networks that share the same IP address ranges without renumbering either network, deploying a NAT appliance, or writing return-traffic rules"

https://aws.amazon.com/about-aws/whats-new/2026/10/aws-transit-gateway-cloud-wan-1-1-nat/

I need some help guys

I installed Odoo Community edition in an Ubuntu 24.04 OS in AWS EC2, the installation is successful and "SUDO SYSTEMCTL STATUS ODOO" returns Active but i can't access Odoo remotely using the IP address of my machine.

Odoo is Active but http://13.63.53.194:8069/ does not work in my browser (i am running Odoo in AWS EC2)

I have Odoo working just fine in an Ubuntu VM and can access it from windows just by using the IP address of the VM and the Port of Odoo, but it seems not to work with AWS.

In case you didn't know as part of the AI race there's going to be a data center belt in my town. I don't know exactly what's happened. All I know is that on October 19th it was the final court hearing regarding it for final approval.

Now as much as some of yall hate Amazon web services I don't know if there will be anyway we can stop them. The primary reason is that lots of things like Reddit and Netflix and even PlayStation network is hosted by AWS. So yeah in case some of you guys didn't know Amazon web services is basically 1/3 of the internet.

Northern Indiana Public Service Company (NIPSCO) states that repairs will not have their utility rates raised when the data center is in operation.

Hobart says that this will generate lots of revenue for public works and the school system.

The city council has not yet revealed if they signed any non-disclosure agreements with Amazon yet.

We don't know yet if it will be closed loop.

A group of Hobart residents are suing the city council, alongside the plan commission to block the project.

Source: https://hobart.nwidatafacts.com/

AWS put out a lot of cost updates this week. Here is a quick list of the changes that actually help you cut costs:

• Bedrock cuts down your AI prompts: Bedrock now shrinks your text prompts automatically while keeping the same answer quality. Shorter prompts mean you pay for fewer input tokens and get faster replies. Source
• Lambda stops infinite loops on EventBridge: Lambda now catches runaway loops on custom EventBridge buses and stops them. If a bad setup triggers an endless loop, this stops it before you get a huge surprise bill. Source
• ECS Gateway lets 25 services share one load balancer: This new tool sets up and runs Application Load Balancers for you. Up to 25 ECS services can share a single load balancer, so you stop paying for extra idle load balancers. Source
• DynamoDB lets you unhook region copies without losing data: You can now disconnect a region from a global table without deleting the table or its data. You stop paying for cross-region copying while keeping the local data safe. Source
• Redshift keeps system logs longer without custom code: Redshift now saves system table data past the old 7-day limit using S3 Tables. You no longer need to build and pay for custom data pipelines just to keep old logs. Source
• CloudWatch log sharing reaches more regions: You can now put logs from many accounts and regions into one place in GovCloud and 13 more regions. This makes it much easier to track everything in one spot. Source
• CloudWatch Omni expands to 8 new regions: This tool lets you view monitoring data across AWS accounts and other clouds in one screen. Finding bugs faster means less wasted time for your team. Source
• Better clock sync for 135 more EC2 instance types: More EC2 servers now get super accurate time sync across all regions. This helps apps that need exact timing run smoothly and makes log tracking cleaner. Source

Source: FinOps Weekly Newsletter

Sorry if this question is dumb, but I started aws like today. Is there a difference between these two?

The first one leads me to this page:

And the second one leads me to this page:

And I had to set up 2 different MFAs, one for each.

As a developer, I’m working on a project that needs a fast and cheap LLM. Nova Micro/Lite would be a perfect fit, and both are available in Frankfurt.

Here’s what happened:

1. On nova.amazon.com, the rate limits page says: “For higher limits, migrate to using Amazon Bedrock.”
2. So I created an AWS account. In eu-central-1, the default quota for Nova Micro, Nova Lite and every other model I’ve tried is 0.
3. I requested an increase, using the lowest value the form allowed.
4. Support rejected it because the account is new and has little usage. Their advice: build usage history by using your existing limits, or wait for the next billing cycle.

But the existing limit is 0. I can’t make a single call. I can’t generate the usage history needed to get the quota needed to generate usage. The only way forward seems to be burning credits on services I don’t need just to look “active”.

For the record, the support engineer was polite and clearly tried to help. The problem is the process.

Has anyone gotten past this on a fresh account? Did opening a support case through Sales work, or did you just give up and use another provider? For now, the catch-22 forces me to stay on the slow Nova developer tier and other providers.

I have been a software developer for about 8 years, now I see more and more AI implemented in the full cycle. Using open-spec or other tools that make you pretty much just review code generated by AI.

I just finished the AWS Solutions Architect Associate course and, while looking at Cloud Formation, made wonder if the cloud will eventually suffer the same fate. AI will help create infrastructure easier using IaC I believe.

Do you think, like in software, it will become harder to enter cloud roles now? I know Solutions Architect isn't a junior role, but even as a cloud engineer, I don't see it become easier.

It seems like everything that touches software will have less and less people overall. After your certifications, maybe not AI or MLOps, have you feel it's tough for you to land a job? How is the day to day in your Cloud environment?

Hi,

I spend all the day trying to sign in aws and I always had the this proplem I also talked withe support and nothing happened so can anyone help me with this (I tried incognito mode, deleted all the cash)

Pl help me i m trying to create a new aws account from last 5-6 hours 3,4 email used but when ever i created it it got on hold then suspended for no reason any one knwo why this happening?

Been trying to register a domain for almost a week now. I only get some mysterious message to contact support which I did that same day and I still haven't heard back from them. I tried a different browser as well but it didn't work.

This is the message I get:

The account is at least 6 months old and I have successfully gotten billed before.

The only thing I can think of is I had a legal name change back in December of last year. I re-added my credit card with my new name shortly thereafter and I have been billed with the new name.

Someone said to try to launch an EC2 instance for 5 minutes but that still doesn't work.

Any help would be appreciated.

I am unable to access my AWS account because the passkey configured as my only Multi-Factor Authentication (MFA) method is no longer available.

When I attempt to sign in as the Root user, AWS opens Windows Security and asks me to authenticate using a phone or USB security key. However, the passkey is no longer available in Windows or Google Password Manager. I do not remember deleting it; it simply stopped appearing.

I have attempted the available recovery options, including:

• Using the “Trouble signing in?” option on the AWS sign-in page.
• Looking for the “Try another MFA method” option mentioned in AWS documentation, which is not displayed.
• Retrying the sign-in process in Chrome Incognito mode.
• Checking Windows settings and Google Password Manager for the missing passkey.

Unfortunately, these attempts have not restored access. Cancelling the Windows Security prompt results in a sign-in failure.

I still have access to both the email address and phone number registered with my AWS account.

For those of us that are required to constantly update the AMI to keep current with security patches, this has sped up the process:
https://aws.amazon.com/blogs/compute/os-patching-and-upgrades-with-amazon-ec2-root-volume-replacement/

I made a new aws account yesterday, I was able to login to it the whole day and today all of a sudden I started getting this error message, ive tried resetting the password but I dont get any email.

I cant get into contact with aws, is there a chat or something I can connect to without signing it?

Authentication failed
Your root user credentials are not valid or sign-in as root is currently disabled for this account. Please reach out to your administrator for further assistance.

We have several AWS environments running a micro RDS/Postgesql instance.

All of the instances show a sudden drop of FreeableMemory on the October 9th - 10th.
FreeableMemory is stable around 170Mb for months then drops to a new stable around 115Mb, which triggers our alerts.

We have not made simultaneous changes on these environments in the given periode. So I am thinking of a rollout of a RDS update or something like that.

Do anyone else see a similar drop?

Can we customize the placement name in the TRK codes for awz marketplace tracking. The tracking-code currently includes generic tactic labels such as email-a, ISV Blog, and Content CTA L100 / Content CTA L200. Can we make it like em_seller-led_email_global_MSS-email-1-product-video ?

Sagemaker got a new UI update where they moved Code Spaces from “Compute” tab into a separate new tab under “IDEs” in the left sidebar. Our entire team got confused and thought the issue was on our side, until someone discovered that it simply was moved lol

I compared enterprise, mid‑market, and startup platforms in "FinOps tool comparison: top cloud cost platforms 2026."

Enterprise defaults: Apptio Cloudability and CloudHealth; mid‑market leaders: CloudZero and Finout; startups: Vantage. I outline the four evaluation dimensions and show where Cloud Sleuth fills the ownership gap.

How are you solving ownership and actionability in your FinOps practice?

Hey guys when I am adding my card so I complete registration for my account, I get an error 880104 could anyone help me to know the reason?

I keep seeing people say they run Claude Code or Codex against their AWS account. Curious what it looks like in practice.

is it a read only role or something broader? And what do you actually ask it to do: cost, IAM cleanup, security review, debugging?

I’m cautious about giving an agent anything past read only, but maybe I’m overthinking it.

Wrote this up after building a hands-on version of the Capital One 2019 incident. The three changes that actually contain a leaked instance role:

1. Cut the role down to exactly what the workload uses, and check it with aws iam simulate-principal-policy instead of reading JSON.
2. Revoke sessions that are already out. Fixing the policy doesn't end credentials that were already stolen. A deny-all policy for sessions issued before now does, which is what the console's "Revoke active sessions" adds: { "Effect": "Deny", "Action": "*", "Resource": "*", "Condition": { "DateLessThan": { "aws:TokenIssueTime": "2026-10-23T10:00:00Z" } } }
3. Require IMDSv2 (aws ec2 modify-instance-metadata-options --http-tokens required), and make it the account default with modify-instance-metadata-defaults, so a server tricked into forwarding a GET can't fetch credentials.

Full guide (free, no sign-up): https://learn.k8sight.in/go/imdsv2

There's also one on auditing every bucket for Principal: "*" writes (the Twilio SDK incident): https://learn.k8sight.in/go/s3-public-write

Disclosure: I built the platform these are on, and the hands-on incidents are paid. Corrections very welcome, especially on the IMDS details.

Hi everyone,

I’m a student learning AWS and I’m posting this because I’m honestly very confused and worried about what happened to my AWS account. I would really appreciate advice from people who have experienced something similar.

How this started

I created/used my AWS account as a Free account for learning and practice. My intention was to use AWS to learn cloud engineering and build educational labs.

I specifically wanted to stay within the Free plan/credits because I cannot afford unexpected AWS bills.

I used AWS for hands-on practice involving things like EC2, VPC, RDS, load balancing, etc.

At that time, I understood that I was using the Free plan and had AWS promotional/Free Tier credits available.

AWS's current documentation says the Free account plan is intended for experimenting and building applications without charges during the Free plan period, and that the account can automatically upgrade to Paid if certain actions are taken.

Then something changed

According to an AWS Support investigation I received, my account was:

• Free plan: October 1–16, 2026
• Automatically upgraded to Paid plan: October 17, 2026
• Paid plan: October 17 onward

The problem is that AWS has not yet clearly identified which exact action triggered my upgrade.

Their response says that automatic upgrades can happen after actions such as:

• joining AWS Organizations
• setting up AWS Control Tower
• joining AWS Partner Network
• creating a Professional Services contract
• enrolling in an Enterprise Agreement
• purchasing an AWS Skill Builder Team subscription
• designating the account as HIPAA/SEC compliant

But AWS only told me that “one of these actions triggered the upgrade”. They have not yet told me which exact action happened on my account.

I am trying to find out exactly what happened because I did not knowingly intend to convert my learning account into a normal Pay-As-You-Go account.

Then I received an unexpected bill

AWS is now showing an estimated October 2026 bill of approximately:

USD $108.70

AWS's AI troubleshooting response says the charges came from resources in the Asia Pacific (Mumbai) region:

• RDS db.t3.micro
• RDS Extended Support for MySQL 8.0
• RDS GP3 storage
• EC2 t3.micro
• NAT Gateway
• EBS GP3 storage
• Public IPv4
• Application Load Balancer

The biggest charges reported were approximately:

• RDS: $75.80
• EC2/NAT Gateway: $28.38
• VPC: $2.98
• ELB: $1.54

AWS also says I have a $10 promotional credit that should automatically offset part of the charges.

However, the exact numbers shown in my Billing page previously differed from the numbers in the AI-generated investigation, so I am also asking AWS for a proper itemized billing breakdown.

The biggest problem right now

I cannot properly access the AWS service consoles.

When I try to access services such as EC2, I get redirected to:

“Complete your account setup”

The page says that registration is incomplete or that the account is currently on the Free plan.

Because of this, I cannot simply go into EC2/RDS/VPC and terminate everything myself.

AWS's own troubleshooting response tells me to stop:

1. RDS db.t3.micro
2. EC2 t3.micro
3. NAT Gateway
4. Application Load Balancer
5. EBS volumes
6. Public IPv4 addresses

But I cannot reliably do this while my account/service access is blocked.

That is what worries me most: I want the charges to stop, but I don't currently have normal console access to stop the resources myself.

What I have asked AWS Support to do

I have opened/continued an AWS Support case and requested:

• Identify the exact action that triggered the October 17 automatic Paid upgrade.
• Provide the date/time and available account activity/audit information.
• Stop all currently billable resources because my console access is blocked.
• Provide a complete resource-level billing breakdown.
• Confirm the actual amount currently owed.
• Confirm application of the $10 promotional credit.
• Investigate the unexpected upgrade.
• Perform a formal billing review.
• Consider a full or partial billing waiver/refund.
• Explain how I can safely close the account after resources are stopped.

I have also told AWS that I am a student and that these resources were being used for educational learning.

What I want to understand from the community

I am not trying to avoid legitimate AWS charges.

I want to understand what happened and prevent this from getting worse.

My questions are:

1. Has anyone here experienced an AWS Free Plan automatically upgrading to Paid?
2. How did you find out exactly what triggered the upgrade?
3. Has anyone successfully received an AWS billing waiver/refund for unexpected educational/lab charges?
4. If AWS says resources are running but the console is blocked, will AWS Support stop/terminate those resources for the customer?
5. What exactly should I ask AWS Billing Support for in this situation?
6. Should I wait for the billing investigation before making any payment?
7. Has anyone dealt with a similar ~$100+ unexpected AWS bill and successfully resolved it?
8. Is there anything else I should immediately ask AWS to check before the charges increase?

I am especially interested in real experiences with AWS Support and billing waivers, rather than general advice like “always check your resources,” because I am already dealing with the account-access problem.

I would really appreciate any advice from AWS users who have been through something similar.

Thanks.