What Happened
AWS updates reported on October 2, 2026 span deployment controls, platform versions, agent connectivity and monitoring:
- Amazon ECS: Services using VPC Lattice now support built-in blue/green, linear and canary deployments across VPCs and accounts, with validation hooks, alarm-driven rollback and bake time. AWS did not specify a launch date. [1]
- AWS Health: A new version catalog shows support timelines for Amazon RDS, EKS and Lambda. It is available in the Health Dashboard; API access requires an eligible support plan. [2]
- Amazon EKS: EKS and EKS Distro now support Kubernetes 1.37. The Metrics API and Dynamic Resource Allocation device taints and tolerations are generally available; HPA scale-to-zero for object or external metrics is beta and enabled by default. [3]
- Aurora DSQL: Partial indexes can use a WHERE condition to index qualifying rows rather than an entire table. [4]
- AWS Brazil: A new distribution program automates eligible non-Brazilian ISVs’ SaaS license sales to Brazilian customers, including local invoicing and tax handling. [5]
- AWS MCP Server: The managed agent interface has expanded to Singapore, Sydney, Tokyo, Ireland, London and Oregon, bringing it to eight Regions. [6]
- AgentCore Gateway: MCP, OpenAPI and HTTP proxy targets can now use TLS certificates signed by private CAs when connected through VPC Lattice. [7]
- ElastiCache for Valkey: Node-based clusters now publish OpenTelemetry metrics to CloudWatch. Standard monitoring runs every 60 seconds; optional detailed monitoring offers selected metrics every 15 seconds. [8]
Why It Matters to Businesses
The immediate opportunities are narrower, safer releases and earlier upgrade planning. ECS traffic shifting can reduce the blast radius of a bad deployment, while the Health catalog gives teams a way to plan supported-version upgrades before account-specific end-of-support notices arrive. Kubernetes 1.37 and partial indexes offer useful capabilities, but each needs workload-level testing before adoption. [1][2][3][4]
Kimbodo Engineering Perspective
These are controls to integrate, not switches to enable everywhere. A canary is useful only when alarms measure customer impact; a smaller partial index helps only when queries match its predicate. Likewise, running an MCP server in a nearby Region may improve latency and request locality, but it does not by itself establish where downstream AWS services process or store data. [1][4][6]
How We Would Implement It
- Inventory ECS services, supported software versions and EKS clusters; put upgrade deadlines and Kubernetes 1.37 compatibility checks into the delivery backlog. [1][2][3]
- Pilot ECS canaries on one service with lifecycle validation, CloudWatch rollback alarms and a measured bake time before expanding the pattern. [1]
- Benchmark Aurora DSQL partial indexes against representative queries and writes. Enable detailed Valkey metrics only for signals that justify 15-second resolution. [4][8]
- For agents reaching private APIs, configure AgentCore Gateway’s private-CA trust and VPC Lattice path; test certificate rotation, target authorization and failure behavior. [7]
Risks, Costs and Security
Check Region availability and support-plan requirements before designing around these capabilities. Detailed Valkey monitoring adds CloudWatch charges for selected metrics, alarms and PromQL queries, even though ElastiCache adds no charge. Restrict agent API permissions, protect private-CA material in S3 or Secrets Manager, and verify data-residency requirements across the full request path—not just the MCP server Region. [2][6][7][8]
Where Kimbodo Comes In
Kimbodo builds and operates this in production for businesses — see our AI Application Development practice, or Estimate My AI Application.
Sources
- [1] Amazon ECS adds Amazon VPC Lattice support for blue/green, linear, and canary deployments
- [2] AWS Health introduces the version catalog for software lifecycle management
- [3] Amazon EKS and Amazon EKS Distro now support Kubernetes version 1.37
- [4] Amazon Aurora DSQL now supports partial indexes
- [5] AWS Brazil automates distribution of non-Brazilian software product licenses to Brazilian customers
- [6] The AWS MCP Server is now available in six additional AWS Regions
- [7] AgentCore Gateway supports private TLS certificates for VPC endpoints
- [8] Amazon ElastiCache for Valkey now supports OpenTelemetry metrics and detailed monitoring
