OffNet Newsroom

Daily topic roundup

AWS

Tuesday, July 21, 2026 · 8 stories, curated & summarized — click any story for the source.

AWS has published Loom as an open-source reference platform designed to govern AI agents across enterprise environments. Built on Strands Agents and Bedrock AgentCore Runtime, the implementation enforces security through RFC 8693 token exchange for identity propagation within delegated actor chains. The platform supports config-driven deployments that avoid runtime code generation and mandates strict tagging for resource management.

  • Loom is a reference implementation, not a managed service, for governing AI agent fleets.
  • Identity propagation uses RFC 8693 token exchange across delegated actor chains.
  • Deployments are config-driven, eliminating the need for runtime code generation.
  • Mandatory tagging is enforced to ensure consistent resource governance.
  • Base stack relies on Strands Agents and Bedrock AgentCore Runtime.

DoorDash deployed Entity Cache, a transparent proxy caching layer within its service mesh, to eliminate redundant service-to-service calls. Built on Envoy and Valkey, the system handles over 1.5 million requests per second while maintaining 99.99999% availability. The architecture relies on event-driven invalidation and robust failure handling to sustain high performance.

  • Envoy and Valkey form the core stack for high-throughput microservice caching
  • Event-driven invalidation ensures data consistency without polling overhead
  • Transparent proxy design reduces application-level caching complexity
  • 99.99999% availability achieved through rigorous failure handling mechanisms
BY THE NUMBERSDoorDash Entity Cache Throughput1.5millionRequests per second handledTransparent proxy using Envoy and Valkey

AWS Data Exports now includes structured product metadata for Amazon Bedrock within Cost and Usage Reports. This update provides consistent attributes like model provider, inference type, and pricing unit to simplify cost attribution. Teams can now query this data via Athena or load it into warehouses without custom parsing logic.

  • Eliminates need for custom parsing of varied Bedrock metadata in CUR 2.0 exports.
  • Standardized fields include model provider, name, pricing unit, and inference type.
  • Enables precise cost attribution by separating input vs output token charges.
  • Supports FinOps by unifying Bedrock spend under a single product family name.
TRADE-OFFBedrock Metadata Before and AfterOld CUR ExportsVaried metadata formatsRequires custom parsingHard to attribute costsNew StandardStructured product metadataConsistent attributes providedSimplifies cost attributionvs

AWS CloudTrail now supports selective logging of network activity events generated by VPC endpoints based on the IAM user identity making the API call. This enhancement allows engineers to configure selectors that capture specific events, such as access denied attempts from untrusted identities, while excluding routine traffic from safe lists. The feature helps reduce logging costs and noise by focusing data perimeter strategies on high-value security scenarios.

  • Filter VPC endpoint network logs by IAM user identity to reduce noise.
  • Log only access denied events for untrusted users to save costs.
  • Exclude routine traffic from trusted identities to improve signal-to-noise ratio.
  • Supports data perimeter strategies by focusing on critical security events.
CHECKLISTOptimize CloudTrail LoggingFilter VPC endpoint logs by IAM identityLog only access denied events for untrusted usersExclude routine traffic from trusted identitiesFocus on critical security events for data perimeter

Amazon Managed Service for Apache Flink has updated to support Apache Flink version 2.3. The release introduces adaptive partition selection to manage backpressure more effectively under uneven load conditions. It also enhances change data capture pipelines by improving the handling of out-of-order updates and adding new SQL functions for stream conversion.

  • Adaptive partition selection reduces backpressure issues during load spikes.
  • CDC pipelines gain better correctness for out-of-order update handling.
  • New SQL functions simplify conversion between changelog and standard streams.
  • Managed service simplifies setup, operation, and scaling of Flink apps.
HOW IT WORKSFlink 2.3 Key Improvements1Adopt Flink 2.32Manage Backpressure3Enhance CDC Pipelines4Simplify Stream Conversion
AWS What's New awsdatabase

EC2 R8i instances expand to Stockholm and Zurich regions

AWS has made R8i and R8i-flex instances available in the Europe (Stockholm, Zurich) regions. These instances utilize custom Intel Xeon 6 processors to deliver up to 20% higher performance than R7i instances. Specific workloads see significant gains, including 30% faster PostgreSQL performance and 60% faster NGINX web application speed.

  • R8i instances are now deployed in Stockholm and Zurich regions for low-latency access.
  • PostgreSQL databases can see up to 30% performance improvement over R7i instances.
  • NGINX web applications benefit from up to 60% speed gains on this new hardware.
  • Custom Intel Xeon 6 processors provide 2.5x more memory bandwidth than previous generations.
  • R8i-flex offers a flexible alternative for varied workload requirements.
COMPARISONR8i Performance GainsPostgreSQL30%NGINX60%

AWS has launched EC2 I8ge instances in GovCloud US-East and US-West, bringing storage-optimized compute powered by Graviton4 processors. These instances provide up to 60% better compute performance than Graviton2-based predecessors and leverage third-generation Nitro SSDs for faster local NVMe storage. The configuration supports up to 120TB of local storage with significantly reduced I/O latency and variability compared to Im4gn instances.

  • I8ge uses Graviton4 for up to 60% compute improvement over Graviton2 instances.
  • Up to 120TB local NVMe storage with third-gen Nitro SSD technology.
  • Delivers 55% better storage performance per TB compared to Im4gn instances.
  • Reduces storage I/O latency by 60% and variability by 75% versus Im4gn.
COMPARISONI8ge vs Im4gn Performance GainsCompute Perf.60%Storage I/O Latency60%Storage Perf/TB55%I/O Variability75%

Amazon OpenSearch Service now allows users to migrate from legacy OpenSearch Dashboards to the new OpenSearch UI with a single click. This feature supports both managed domains and serverless collections, automatically transferring tenants and saved objects without manual recreation. The new interface is designed as a zero-downtime, serverless tool for unified observability across multiple data sources. This reduces operational complexity by preserving existing configurations during the transition.

  • One-click migration preserves tenants and saved objects from legacy Dashboards.
  • Supports migration for both OpenSearch domains and serverless collections.
  • Eliminates manual recreation of thousands of saved objects.
  • New OpenSearch UI offers zero-downtime, serverless unified observability.
  • Reduces operational overhead when switching to the new interface.
CHECKLISTMigration Steps SimplifiedInitiate one-click migration from legacy DashboardsTransfer tenants and saved objects automaticallyVerify zero-downtime transition completedConfirm unified observability is active