December 15 – December 22, 2025

Security monitoring just became more streamlined with simplified enablement of AWS CloudTrail events directly in Amazon CloudWatch. This centralizes configuration across AWS Organizations, allowing CloudTrail events to flow alongside VPC flow logs and EKS control plane logs without creating trails. The new service-linked channels include built-in safety checks and termination protection, marking a meaningful step toward unified telemetry collection while reducing setup overhead.

Amazon API Gateway now supports MCP proxy integration, enabling existing REST APIs to become discoverable and usable by AI agents through Amazon Bedrock AgentCore. Dual authentication enforces agent identity verification on inbound requests and secure outbound connections, while semantic search helps agents select the most relevant tools. This capability raises the bar for secure API exposure in agentic workflows without requiring code changes or additional infrastructure.

AWS Lambda introduces durable functions, extending the serverless model to reliable multi-step applications and AI workflows. Built-in checkpointing, automatic failure recovery, and long-running waits (up to one year) eliminate the need for custom state management or external orchestration, letting teams focus on business logic rather than resilience code.

Database Savings Plans launch with up to 35% savings on a flexible commitment model, applying automatically across Amazon Aurora, RDS, DynamoDB, ElastiCache, DocumentDB, Neptune, Keyspaces, Timestream, and DMS. The plans support engine changes, instance family shifts, and regional moves while preserving discounts, offering a simpler path to cost optimization than traditional reserved instances.

Amazon OpenSearch Service brings automatic semantic enrichment to managed clusters, matching the Serverless capability and delivering context-aware search with minimal setup. By processing meaning during ingestion across 15 languages, it surfaces relevant results beyond exact keywords, suggesting broader adoption for knowledge bases, RAG patterns, and enterprise search without managing ML models.