Automation / DevOps / IaC

AWS has introduced a preview of KNFSD File Cache, an open-source Apache-2.0 tool designed to cache NFS exports from diverse sources like on-premises filers, Amazon FSx, or other clouds. By storing frequently accessed data in memory and local NVMe, it serves large compute fleets at local VPC speeds, avoiding repeated high-latency trips to the source. The solution supports NFS v3 and v4.1/v4.2 protocols and can front multiple source servers simultaneously.

• Reduces latency for large compute fleets by serving cached files at local VPC speed
• Aggregates exports from on-prem, AWS FSx, and multicloud sources over Interconnect
• Leverages local NVMe and memory caching to minimize cross-link data transfers
• Open-source Apache-2.0 license allows flexible deployment within AWS environments

AWS Control Tower Account Factory for Terraform (AFT) now supports automatic re-application of account customizations when accounts are moved between Organizational Units. This update eliminates the previous manual overhead and reduces configuration drift risks associated with OU transitions. The feature is enabled by setting aft_customization_triggers to account_move, skipping bootstrap and provisioning phases for faster execution of global and account-level customizations.

• Set aft_customization_triggers = ["account_move"] to enable auto-reapplication.
• Reduces operational overhead by removing manual triggers for OU moves.
• Skips bootstrap/provisioning, running only global and account-level customizations.
• Prevents configuration drift by ensuring accounts stay consistent with OU policies.
• Available immediately in AFT deployments with the updated configuration.

Amazon CloudWatch introduces coding agent insights to help engineering leaders measure the value of AI coding tools. The feature integrates with the Claude Apps Gateway for AWS to automatically collect telemetry from Claude Code, Codex, and GitHub Copilot without extra instrumentation. It leverages OpenTelemetry metrics to present agent performance alongside existing operational data in CloudWatch.

• Automated telemetry collection from Claude Code, Codex, and GitHub Copilot via CloudWatch.
• No additional instrumentation required; leverages existing OpenTelemetry metrics.
• Enables leadership to assess ROI, identify high-impact teams, and right-size token budgets.
• Provides visibility into delivery acceleration and access expansion needs.

AWS has updated the EC2 describe-ami response to include any AWS Systems Manager Parameter Store parameters linked to a public AMI. This eliminates the previous need to manually search namespaces to find configuration aliases. The feature allows engineers to easily discover and reference parameters that resolve to the latest AMI version.

• Public AMI metadata now exposes associated SSM parameters directly.
• No manual namespace search required to find configuration aliases.
• Simplifies infrastructure updates by referencing version-resolving parameters.
• Available to all customers at no extra cost in all regions.

AWS Backup has extended its logically air-gapped vault capability to six additional regions, including Taipei, Malaysia, New Zealand, Thailand, Mexico Central, and Canada West. This feature allows for the storage of immutable, isolated backups that are locked by default and encrypted with either AWS or customer-managed keys. Operators can now back up directly to these vaults, copy data across accounts and regions, and share access via Resource Access Manager.

• Logically air-gapped vaults now support six new regions for enhanced geographic redundancy.
• Backups are immutable and locked by default to prevent unauthorized modification or deletion.
• Encryption supports both AWS-owned keys and customer-managed keys for compliance control.
• Vault access can be protected during account compromise using Multi-party approval workflows.

Max Körbächer argues that internal development platforms fail when teams focus solely on infrastructure rather than treating the platform as a product. He highlights the critical need for a product mindset to drive adoption and align with user needs. The presentation outlines how to measure success using DevEx and SPACE metrics while managing technical debt and community engagement.

• Avoid infrastructure-first thinking; treat internal platforms as products with users.
• Adopt a clear product mindset to ensure platform adoption and value delivery.
• Measure platform success using DevEx and SPACE metrics, not just uptime.
• Actively manage technical debt and foster a community for long-term health.
• Align team incentives with platform goals to drive sustainable engineering practices.