What AWS’s Latest AI and Cloud Releases Change for Agents, Data Platforms and Recovery

What Happened

In updates dated November 12–13, 2026, AWS announced changes across identity, agent runtimes, databases, data processing, networking and recovery. The most consequential changes for production AI systems affect delegated access, runtime behavior and restore procedures.

Agents and identity

• Amazon Cognito added OAuth 2.0 token exchange under RFC 8693. Services and agents can obtain tokens with narrower scopes and a single audience instead of forwarding a user’s original token; an optional actor token identifies the intermediary. It is available on Essentials and Plus plans. [1]
• New Amazon Bedrock AgentCore runtimes default to the next-generation runtime in 19 Regions as of November 13. Sessions use isolated Firecracker microVMs and scale to zero when idle. Existing runtimes stay unchanged unless migrated with platformVersion set to V2; V1 retains the previous runtime. [16]
• The EC2 Image Builder console now includes AWS DevOps Agent assistance for diagnosing up to 50 failed pipelines and preparing resource configurations for review. [10]

Data and application platforms

• Graviton5-based R9g instances are generally available for Aurora PostgreSQL- and MySQL-compatible databases and RDS for PostgreSQL, MySQL and MariaDB in four Regions. RDS for SQL Server also added M8id and R8id instances with local NVMe storage for tempdb in 13 Regions. [2] [8]
• AWS Glue added an “Auto” version setting for Spark jobs, with compatibility checks and consent before a newer runtime is used. Managed Service for Apache Flink added enhanced snapshots for Flink 1.20 and later, including state export and cross-Region restore. [13] [15]
• Amazon MWAA added IAM Identity Center access controls and multi-team DAG visibility; the underlying Airflow multi-team feature remains in preview. AWS Quick Enterprise added connector-specific permissions for creating, updating and sharing structured data sources. [3] [6]
• FSx for Lustre cut the minimum provisioned throughput for new Intelligent-Tiering file systems from 4,000 to 1,000 MBps, and minimum metadata performance from 6,000 to 1,500 IOPS. [11]

Operations and recovery

• AWS Backup added EBS Snapshots Archive support for logically air-gapped vaults and YAML-defined resource modifiers for EKS restores. Cloud WAN added BGP community handling on Direct Connect attachments. [12] [14] [7]
• Amazon Connect Cases added case merging and linking; SNS push notifications expanded to Hyderabad, Melbourne, Zurich and AWS GovCloud (US-East); and Route 53 Domains added self-service restoration for eligible expired or recently deleted domains. [4] [5] [9]

Why It Matters to Businesses

Token exchange offers a cleaner least-privilege pattern for agents acting for users, while AgentCore V2 changes the startup and billing profile of new deployments. AWS reports sub-two-second P75 startup for a 2 GB image, compared with 29.7 seconds previously; teams should validate that result against their own images and traffic. [1] [16]

The data and recovery releases could remove operational work, but they do not eliminate testing. Glue may leave jobs that need code changes on their current version, and restored Flink or EKS workloads still need application-level validation. [13] [15] [14]

Kimbodo Engineering Perspective

We would prioritize changes by failure mode rather than adopt them together. Delegated tokens and recovery controls warrant security review first. AgentCore V2, R9g and new SQL Server instance types warrant representative load tests: vendor performance figures and larger instance limits are not substitutes for workload-specific latency, throughput and cost measurements. [1] [16] [2] [8]

How We Would Implement It

• Agent access: map each backend API to an allowed audience and scope, use Cognito token exchange at the intermediary, and test that backend authorization rejects the original or an over-scoped token. Record actor identity where the optional act claim is used. [1]
• Runtime rollout: deploy a canary AgentCore runtime with platformVersion V2, compare startup latency, memory billing and error rates with V1, then migrate existing runtimes explicitly. [16]
• Data changes: benchmark R9g or M8id/R8id against current instances; enable Glue Auto on noncritical jobs first; and test Flink snapshot export and restore before relying on it for recovery. [2] [8] [13] [15]
• Recovery: rehearse an EKS restore with resource modifiers and verify every rewritten IAM role, endpoint and image URI. Separately test EBS archive retrieval against the required recovery time. [14] [12]

Risks, Costs and Security

Availability and charges vary by feature and Region. Enhanced Flink snapshots incur GB-month storage charges; EBS archive requires an eligible backup schedule and a warm-storage period; and Route 53 restoration depends on each TLD’s recovery window and typically costs more than renewal. [15] [12] [9]

Do not treat shared access as automatic isolation: review MWAA team permissions and the preview status of its multi-team dependency. Likewise, restrict who can use Quick connectors or approve agent-prepared infrastructure changes, and test Cloud WAN route policies before allowing tagged routes to propagate into production networks. [3] [6] [10] [7]

Sources

1. [1] Amazon Cognito now supports OAuth 2.0 token exchange
2. [2] Amazon Aurora and RDS now support Graviton5-based R9g database instances
3. [3] Amazon MWAA now supports fine-grained access control with IAM Identity Center and multi-team environments
4. [4] Amazon Connect Customer supports merging and linking related cases in the agent workspace
5. [5] Amazon SNS now supports push notifications in four additional AWS Regions
6. [6] AWS Quick enhances granular governance with the ability to restrict structured data sources
7. [7] AWS Cloud WAN now supports BGP communities on Direct Connect attachments for routing policy
8. [8] Amazon RDS for SQL Server now supports M8id and R8id instances
9. [9] Amazon Route 53 Domains now supports self-service restore for expired and deleted domains
10. [10] EC2 Image Builder console now integrates with the DevOps Agent for troubleshooting and resource creation
11. [11] Amazon FSx for Lustre lowers the entry cost of Intelligent-Tiering file systems by 75%
12. [12] AWS Backup adds logically air-gapped vault support for Amazon EBS Snapshots Archive
13. [13] AWS Glue announces automatic version upgrades for Apache Spark jobs
14. [14] AWS Backup now supports resource modifiers for Amazon EKS restores
15. [15] Amazon Managed Service for Apache Flink introduces enhanced snapshots
16. [16] The next generation AgentCore runtime is now the default