What Changed in AWS AI and Cloud Operations: AgentCore CLI 1.0, Faster Lambda Starts and New Agent Controls

What Happened

On October 28, 2026, AWS announced updates across AI tooling, application infrastructure and operations. Two related EKS and ECS updates were described as available on October 29.

• AI agents: Amazon Bedrock AgentCore CLI 1.0 is generally available as @aws/agentcore 1.0.0. It adds resource invocation by ID or ARN, an interactive shell, guided workflows and harness export; existing projects can use agentcore migrate. Amazon Quick also introduced smart approvals for agent actions that existing policies mark “ask.” Consequential actions still require user review. [2][5]
• Lambda: Seekable OCI (SOCI) lazy loading is available for OCI-image Event Functions on Lambda Managed Instances. AWS reports startup-time reductions of up to 70% for large images. A separate Durable Execution Telemetry Exporter sends execution history to destinations including CloudWatch Logs, S3 and OpenSearch Service, with redaction and sampling options. [3][7]
• Data and recovery: OpenSearch Serverless added time series collections for logs, metrics, traces and events, with configurable movement from hot to warm storage and up to 100 TB of hot storage per collection. AWS Backup restore testing now supports Amazon Redshift recovery points. RDS for Oracle added the September 2026 Monthly Recommended Patch for 19c and 26ai, targeting versions 19.0.0.0.ru-2026-07.mrp-2026-09.r2 and 26.0.0.0.ru-2026-07.mrp-2026-09.r2. The patch includes Oracle’s September security update and time zone file DST version 46. [4][11][1]
• Containers and identity: EKS Auto Mode now manages infrastructure for Kubernetes Gateway API Gateway and HTTPRoute resources. The EKS Dashboard added fleet-wide certificate-authority rotation status on October 29. ECS Managed Instances added automatic cross-instance and Spot consolidation on October 29. IAM Identity Center’s Identity Store now publishes user, group and membership change events to EventBridge. [9][6][8][13]
• Enterprise workflows and purchasing: OpenAI and ServiceNow announced plans to bring OpenAI models and agents into ServiceNow and ServiceNow workflows into ChatGPT and Codex, without a rollout date. AWS Marketplace and Amazon Business introduced a connected storefront; software purchases remain on the AWS invoice, while physical-goods selections open an authenticated Amazon Business cart. [10][12]

Why It Matters to Businesses

These releases address different operational bottlenecks rather than forming one migration. SOCI can improve startup behavior for large Lambda images, while ECS consolidation may lower compute spend; neither benefit should be assumed without workload measurements. AgentCore CLI 1.0 changes developer workflows, and Quick’s approvals affect how agent actions are reviewed. Identity events, durable-function telemetry and restore tests provide more evidence for access audits, incident investigation and recovery planning. [3][8][2][5][13][7][11]

Kimbodo Engineering Perspective

The useful distinction is between features that expose information and features that change behavior. EKS certificate visibility and Identity Store events can be introduced alongside existing processes. Automatic ECS consolidation, Quick smart approvals and a new routing API warrant explicit acceptance tests because they can affect placement, authorization decisions or traffic. EKS Gateway API support does not require replacing working Ingress configurations. [6][13][8][5][9]

How We Would Implement It

• Inventory affected accounts, Regions and workloads first. Pin AgentCore CLI 1.0.0 in development tooling, run agentcore migrate in a test project and verify deployment and resource-invocation commands before changing CI pipelines. [2]
• For large Lambda container images, publish a SOCI index to ECR, deploy a new function version and compare startup latency against the existing image. Enable durable-function exports only for the execution fields and destinations needed by operations. [3][7]
• Test Gateway and HTTPRoute rules in a non-production EKS Auto Mode environment, including weighted and cross-namespace routing. Review ECS placement and Spot interruption metrics after consolidation. [9][8]
• Route Identity Store events through EventBridge to auditable downstream handlers; schedule Redshift restore tests and validate the restored resource before test cleanup. Stage the Oracle patch against application compatibility and time-zone-sensitive data before production rollout. [13][11][1]

Risks, Costs and Security

Quick smart approvals are on by default, but they do not override denials or grant access; administrators should still review which actions are classified “ask” and inspect CloudTrail records. Durable-function exports can contain inputs and outputs, so apply redaction, destination access controls and retention limits. EventBridge usage, provisioned load balancers and stored telemetry can incur charges even where a feature has no additional feature fee. The ServiceNow–OpenAI announcement should not be treated as a deployable integration until availability and controls are specified. [5][7][13][9][10]

Sources

1. [1] Amazon RDS for Oracle now supports September 2026 Monthly Recommended Patch
2. [2] Amazon Bedrock AgentCore CLI version 1.0 is now available
3. [3] AWS Lambda supports Seekable OCI (SOCI) lazy loading for Lambda Managed Instances
4. [4] Introducing time series collections for the next generation of Amazon OpenSearch Serverless
5. [5] Quick now supports smart approvals for agentic actions
6. [6] Amazon EKS Dashboard now provides fleet-wide visibility into certificate authority (CA) rotation
7. [7] AWS Lambda durable functions now exports live telemetry for execution insights
8. [8] Amazon ECS Managed Instances adds cross-instance and Spot consolidation
9. [9] Amazon EKS Auto Mode now supports Kubernetes Gateway API
10. [10] OpenAI and ServiceNow expand partnership across enterprise workflows
11. [11] AWS Backup adds restore testing support for Amazon Redshift
12. [12] Announcing the AWS Marketplace and Amazon Business unified storefront
13. [13] AWS IAM Identity Center's Identity Store now supports change notifications through Amazon EventBridge