Applying the Aneristic Principle to matters of AWS and IT infrastructure. Facts my own.
Düsseldorf
Joined January 2019
- Tweets2.9K
- Following600
- Followers425
- Likes8.3K
Pinned Tweet
For the 6,000+ #AWS service API endpoints, awsipv6.neveragain.de shows which endpoints support #IPv6 by default, and which require additional client configuration. Important when considering an IPv6-only VPC.
New: Daily updates and a list of recent changes.
Apparent Order retweeted
If you use @OVHcloud look at this urgently
Si vous avez téléchargé aujourd'hui la dernière version de CLI d'OVHcloud, merci de la mettre à jour à nouveau très rapidement. Sinon effacer. Il s'agit de repo:
github.com/ovh/ovhcloud-cli
La version CLI de 14h47 a été compromise par un hacker. Nous l'avons détecté et bloqué à 16h21. Merci au client qui nous a remonté le souci. La version compromise est v0.11.0 v0.12.0 v0.13.0 v0.14.0 v0.15.0.
La version v0.10.0 et la future 0.16.0 est clean.
On vient de finit les premières vérifications et aucun autre repo n'est affecté. Nous avons aussi retracé l'incident. Le hacker a utilisé le compte github d'un des développeurs et a ajouté un binaire dont le job est récupérer les secrets sur le disque. La qualité du binaire est médiocre mais il peut aller jusqu'au bout. Si vous êtes concernés, merci de changer tous les secrets sur votre disque.
On continue les recherches sur le binaire et on va publier les détails additionnels sous peu.
AWS Bedrock – data retention mode "none":
Docs: "Zero data retention. No request or response data is written to durable storage by AWS"
Blog: "We may store and review flagged content ... even when mode is none"
Only one of these can be correct.
Links for these:
Docs – docs.aws.amazon.com/bedrock/…
and
Blog (July 2026) – aws.amazon.com/blogs/securit…
Additionally, per docs.aws.amazon.com/bedrock/…, Amazon "may also file a report with the National Center for Missing and Exploited Children (NCMEC) or a relevant authority" for flagged input or output.
Cloudfront: "Now, with this launch, customers can configure their VPC origins as dual-stack and get end-to-end IPv6 without sacrificing security." aws.amazon.com/about-aws/wha…
“never deleting this app”
Some more #AWSLambda Web Function fun. My buddy @darkosubotica was, well, flexing a bit with his 1994 NCSA httpd 1.3 server running in a web function. So, I flexed back with my IBM's 1980s mainframe operating system, MVS 3.8j, running on an emulated System/370 accessed through a live 3270 inside a web function. Who won?
Self-hosted inference is the way. Or find yourself an actually trustworthy inference provider. Otherwise, Compliance™️ will eat you alive, and rightfully so, in this case.
“Apple HomeView is not available for sale in the European Union, as Siri AI is currently unavailable in iOS in the EU.”
Apparent Order retweeted
Lambda Web Functions were released today. I got carried away and wrote three blog posts about them.
1: A collection of technical tidbits.
2: They're not actually Node.js-only, you can run Go/Rust.
3: They're cheaper than Event Functions at processing events.
1/4
I'm happy to report that AWS Lambda Web Functions does IPv6 ingress! By default! Without extra endpoints! I'm so happy I could have a drink 🥹 (it's 7 am)
The IPv6 egress story is like regular Lambda: Dual-stack for VPC deployments, IPv4-only otherwise.
Other notes after a few minutes of looking around:
- 2 GB / 2 vCPU, fixed (for now?)
- idle time is *not* billed; CPU is billed per environment, not per request (one environment handles up to 128 concurrent requests)
- Memory is always billed while an environment is alive, meaning that even with zero requests active, charges happen – but it will scale to zero when there are no requests for some time
- deployment modes: "Home Region" (simple regional endpoint), replicated (multiple regional endpoints) and "Multi-Region", which adds a global load balancer with latency-based routing – apparently free of charge?!
- only "Home Region" supports VPC mode, understandably
- apparently we're back to zip-deployment-only (for now)
- limited regions (for now)
- Cloudfront support from the start including OAC
- pricing is hard to compare; per-request charge is much more expensive, but overall, it might work out to be similar for many workloads
- Nodejs24 only, so they didn't just productize Lambda Web Adapter (and its predecessors 🤘) but some more runtime-specific magic seems to be involved
- this launch kinda explains why they killed App Runner
- regular Lambda Functions are now called Event Functions (name change only)
- AWS Blog post: aws.amazon.com/blogs/aws/ann…
YES! It's out it's out, I am SO excited for this! #AWSLambda Web Functions are a game changer! A true HTTP request handler and Each execution environment handles multiple requests simultaneously (up to 128 concurrent requests per environment). Multi-region deploy, and so much more! -> aws.amazon.com/blogs/aws/ann…
Apparent Order retweeted
Having long been aware of those tech bros who read my work as utopian porn, where they’ve taken that doesn’t exactly surprise me.
Apparent Order retweeted
🚀 Meet Strands Decider 2B, a small open source decision model built for fast experimentation and local development: strandsagents.com/blog/intro…
It's part of a new class of decision models. Unlike reasoning models that generate open-ended text, Strands Decider 2B picks between options and assigns confidence scores. Decision models are faster and more capable at a given size, always produce an answer from the selected options, and can run with very low latency.
Strands Decider 2B is a 2 billion parameter model that runs on a local CPU or GPU and can return answers to meaningful questions in tens of milliseconds. On accuracy and calibration, it ranks second among public models in its ~2 billion parameter class, and first among those that share their full training recipe.
We're already seeing early success with model routing, tool selection, guardrails, evals, and hybrid agents that pair LLMs for the hard calls with decider models for the rote ones. Grab the code on GitHub and the latest snapshots on HuggingFace, and tell us what you build.
This space is super early and we are experimenting with different variants of these models, so give it a spin and give us feedback!
Didn't see that coming – but this "microcredential" two-hour browser lab exam is actually easy with zero Bedrock experience *if* you know some other AWS services well.
Nice experience overall, would recommend for a "guided first contact" with several Bedrock components.
I really want the AWS European Sovereign Cloud to succeed, but blog posts like this one aren’t exactly helping with that.
"AWS European Sovereign Cloud: Demonstrating an independent operation".
The operational team, composed entirely of EU residents within the EU, will execute the exercise using only the hardware and software resources of the AWS European Sovereign Cloud.
aws.amazon.com/de/blogs/secu…
I'm starting to think US tech wants revenge on Europe. The price markup for Frankfurt/eu-central-1 used to be ~15% ±5%. Today's AWS EventBridge launch prices event ingress at +31%. Event egress is +42%.
And btw, EUSC is usually another 10-15% on top of eu-central-1.
Apparent Order retweeted
Amazon EMR 7.14 on EKS now supports IPv6 Amazon EKS clusters
aws.amazon.com/about-aws/wha…
