Automation / DevOps / IaC

Firecrawl released pdf-inspector, a native Rust library designed to classify PDFs and extract text with position awareness in under 200ms. It intelligently distinguishes between text-based and scanned documents, allowing systems to skip expensive OCR services for the majority of cases. The tool supports selective OCR and provides bindings for Python, Node.js, and WebAssembly.

• Classifies PDFs as TextBased, Scanned, ImageBased, or Mixed in 10-50ms via sampling.
• Converts text-based PDFs to clean Markdown without requiring OCR processing.
• Native Rust core with bindings for Python, Node.js, and browser WebAssembly.
• Optimize pipelines by routing scanned docs to OCR and skipping text-based ones.

AWS has expanded support for Lambda recursive loop detection to all commercial AWS Regions, enabling this safety guardrail globally. The feature is enabled by default and automatically halts runaway workloads caused by misconfigured event sources like S3, SQS, or SNS that trigger functions which send events back to the original source. When a loop is detected, processing stops and an AWS Health Dashboard notification is sent with troubleshooting steps.

• Recursive loop detection is now available in all commercial AWS Regions.
• The feature is enabled by default to prevent runaway workloads and unexpected billing.
• It blocks loops triggered by S3, SQS, and SNS event sources.
• Operators receive AWS Health Dashboard notifications with troubleshooting guidance.
• No configuration change is required to benefit from this global expansion.

AWS has expanded Automated Security Response with an AI Toolkit that generates custom remediation code using any AI assistant, complete with built-in safety guardrails. The update also enables automatic remediation for findings from Amazon Inspector, GuardDuty, and Macie, while centralizing configuration via account, OU, region, and tags. Additionally, new multi-channel adapters for Email, Slack, Jira, and ServiceNow allow severity-based filtering and deadline enforcement for Security Hub alerts.

• AI Toolkit accelerates custom remediation development from weeks to hours with safety guardrails.
• Auto-remediation now covers findings from Inspector, GuardDuty, and Macie services.
• Centralized scoping allows configuration by account, OU, region, or resource tags.
• Multi-channel alerts support Email, Slack, Jira, and ServiceNow with deadline enforcement.

Amazon EMR on EKS now supports admission control for job runs, allowing you to set concurrent execution limits on virtual clusters. The StartJobRun API accepts backpressure signals to manage queues for jobs in PENDING or SUBMITTED states. This feature provides fine-grained control to prevent shared EKS clusters from being overloaded in multi-tenant environments.

• Set strict concurrency limits per virtual cluster to cap simultaneous job runs.
• Use backpressure signals in StartJobRun API to manage job queuing.
• Protect shared EKS clusters from resource exhaustion in multi-tenant setups.
• Gain visibility into jobs stuck in PENDING or SUBMITTED states via logical queues.
• Applies to open-source frameworks like Spark and Flink running on EMR on EKS.