Cloud · Top stories
AWS updates sign-in experience with redesigned page and new account creation options
Amazon Web Services (AWS) is rolling out updates to its sign-in and sign-up experience, introducing a redesigned sign-in page and new options for creating and accessing AWS accounts. These changes aim to provide a more consistent user experience, though existing customers will continue using their current sign-in methods.
Cloudflare reportedly injects analytics JavaScript by default when nameservers are switched
A user reported that Cloudflare automatically injected a JavaScript analytics snippet into their website after switching nameservers to Cloudflare. This behavior requires users to opt-out manually through the Analytics dashboard rather than opting in.
AWS Releases Independent Assessment Report for Landing Zone Accelerator's C5:2020 Compliance
AWS has made an independent assessment report available on AWS Artifact for its Landing Zone Accelerator (LZA) solution, detailing its alignment with the C5:2020 cloud security compliance standard. This report helps organizations in Europe demonstrate compliance by showing how LZA implements security controls for "security in the cloud" aspects of C5:2020.
AWS releases Summer 2026 SOC 1 report covering 185 services for 12 months
Amazon Web Services (AWS) has released its Summer 2026 SOC 1 report, which covers 185 services for the period of July 1, 2025, to June 30, 2026. This report provides customers with compliance assurance for a full year, aiding in their architectural and regulatory requirements.
AWS London Region Renews UK Police-Assured Secure Facilities (PASF) Accreditation
The AWS Europe (London) Region has renewed its Police-Assured Secure Facilities (PASF) accreditation for Official-Sensitive data, confirming its compliance for UK law enforcement workloads. This renewal allows UK police and law enforcement organizations to continue using the AWS London Region for critical applications processing police data.
Fastmail adds EU data region option for email storage in Amsterdam
Fastmail now offers users the option to store their primary email data in a new EU data center located in Amsterdam. This change provides users with more choice regarding data residency, addressing concerns related to local laws and data proximity.
Little Rock residents and officials express outrage over two proposed datacenter projects
Two hyperscale datacenter projects, one by Google and another by Avaio, are facing local opposition in Little Rock, Arkansas, due to concerns over water and electricity usage. State legislation passed three years ago prevents local ordinances from banning datacenters, limiting the community's ability to block the developments.
Protesters Confront Verrus Representatives Over Proposed Salem Data Center
Protesters brought a guillotine to a Salem City Council meeting to oppose Verrus's proposed $5.1 billion Oakline at Mill Creek data center, leading to Verrus representatives being escorted out by police. Oregon Governor Tina Kotek subsequently terminated a deal to sell 32 acres of land for the project, forcing Verrus to revise its plans despite filing its application before a city-wide data center moratorium.
Carolina Cloud now pays SOFR-referenced interest on unused prepaid credits
Carolina Cloud has implemented a system to pay interest on customers' unused prepaid credits, calculated daily based on the Secured Overnight Financing Rate (SOFR). This change means that prepaid balances will accrue interest, which can then be spent on compute and storage services.
Best Buy adopts Google Cloud Workforce Identity Federation for AI workloads
Best Buy implemented Google Cloud's Workforce Identity Federation to manage access for thousands of backend users from Microsoft Entra ID, addressing risks and administrative friction in its expanding AI and analytics operations. This change allows developers to securely access cloud resources using existing Microsoft credentials, eliminating the need for separate identity stores and improving auditability and scalability.
Kubernetes Dashboard Archived in Favor of New Interface Headlamp
The Kubernetes Dashboard project has been archived to make way for Headlamp, a new interface offering enhanced functionalities including multi-cluster visibility and plugins. This replaces the traditional in-cluster Dashboard with an adaptable client application suitable for modern Kubernetes environments.
New data center and investments announced for Missouri community
A new data center in Montgomery County, Missouri, will create local jobs and support energy affordability initiatives. A $20 million Energy Impact Fund and workforce training programs will also be established to benefit the community.
Amazon CEO's Capex Explanation Boosts Stock, Influences Hyperscaler Market
Amazon CEO Andy Jassy provided a detailed explanation for the company's significant data center spending, stating clear line-of-sight to strong financial returns, which led to a substantial increase in Amazon's stock value. This explanation also positively impacted other hyperscaler stocks, including Alphabet, despite its earlier negative market reaction to similar capex increases.
The Need for Default Hard Budget Caps on Pay-by-Usage Services
The article argues for default hard budget caps on pay-by-usage services and APIs to prevent unexpected high costs from runaway services. It highlights that while soft caps exist, hard limits that cut off service after a set amount are necessary, especially with the rise of coding agents. AWS recently introduced a spend limit feature, though it is not yet generally available.
Microsoft Faces Scrutiny Over Data Center Community Investments and Tax Breaks
Microsoft is facing questions from communities regarding its local investments for new data centers, with critics pointing to a disparity between the company's "good neighbor" promises and the substantial state-level tax breaks it receives. The company has been vague about specific local investment amounts, while states like Georgia and Indiana forgo significant tax revenue to attract data center development.
Pine59 Migrates to Managed Airflow 3 on Google Cloud for Improved Data Pipeline Orchestration
Pine59, a location intelligence data provider, migrated its data pipeline orchestration to Managed Service for Apache Airflow (Gen 3) running Airflow 3 on Google Cloud. This transition improved processing speed, task scheduling, and stability for its data-intensive operations, including ML inference workloads.
Azure Workload Zone Resiliency: Component-Based Design for Two or Three Zones
Designing for Azure availability zones should be done component by component, not as a blanket rule for an entire workload. The decision to use two or three zones, or to rely on service-managed zone redundancy, depends on each component's specific needs to survive a single zone loss, balancing cost and complexity against protection requirements.
Planet Labs offers open satellite imagery feed for disaster response
Planet Labs provides an open Disaster Data feed containing satellite imagery of natural and man-made disasters. This feed, hosted on Cloudflare and compatible with DuckDB and QGIS, offers select images and metadata in Parquet and JSON formats to aid disaster response efforts.
Loudoun County, Virginia Transformed into Global Data Center Hub
Loudoun County, Virginia, once reliant on residential real estate, shifted its economy by attracting data centers to fill abandoned dot-com infrastructure. This transformation led to the county hosting approximately 250 data centers, becoming the world's densest concentration, and significantly increasing its commercial tax base.
Observability faces data storage challenges exacerbated by AI-generated telemetry
The observability industry struggles with cost-effectively storing and analyzing full-fidelity telemetry data, leading to incomplete system visibility. The rise of AI systems generating more logs, traces, and metrics is expected to worsen this existing data problem, increasing costs and blind spots for teams.
GoDaddy Migrates Analytics Infrastructure to Amazon Quick, Improving Performance and Efficiency
GoDaddy migrated its business intelligence infrastructure from a legacy BI tool to Amazon Quick over two years. This migration reduced dashboard rendering times from over 15 minutes to under 5 seconds, cut dashboard count by 50%, and saved 15,000 hours annually, making AI-powered self-service analytics accessible to employees.
Netflix Transitions from In-House to Open-Source Flink Autoscaler
Netflix is migrating its Apache Flink stream processing jobs from a proprietary autoscaling system to an open-source solution from the Apache Flink community. This transition addresses limitations of the in-house system, which was not designed for the complexity of newer workloads, and aims to consolidate operations on a single, more capable platform.
GitHub Outage Caused by Misconfigured Autoscaling Policy on Istio Sidecar
A recent GitHub outage was attributed to a misconfigured autoscaling policy on a service's Istio sidecar, which failed to scale correctly when the sidecar reached concurrency limits. This incident highlights the importance of comprehensive autoscaling metrics that account for all service components, not just the primary host service.
Mistral's Shift to MCP for Data Retrieval Requires Manual Migration and Raises Data Governance Questions
Mistral is transitioning its Vibe Work platform from an internal indexed data system to a new MCP (common interface) based retrieval method for Google Drive and SharePoint, requiring administrators to manually install replacements. This change moves data retrieval off-platform, raising concerns about data governance and how third-party connectors handle customer data and permissions.
Google Cloud introduces Governance Agent for automated data governance
Google Cloud has introduced the Governance Agent project, which aims to automate data governance by propagating metadata from upstream tables to downstream views. This initiative addresses the common problem of lost data context as data flows through pipelines, reducing the manual effort required for data documentation and tagging.
AWS Managed Microsoft AD Celebrates Ten Years of Enterprise Identity in the Cloud
AWS Managed Microsoft AD marks its tenth anniversary, reflecting on its evolution from a solution for running directory-aware workloads to a core identity service for thousands of enterprises. The service addressed the operational overhead of managing Microsoft Active Directory by providing a fully managed offering.
Disaggregated Systems Driven by Cloud Economics and Network Advances
Murat Demirbas, from MongoDB Research and formerly AWS, discussed the rise of disaggregated systems, emphasizing that cloud economics and advancements in high-speed networking are the primary drivers. This architectural shift decouples compute and storage to address their inherent mismatches and optimize costs for cloud providers and users.
AWS Workload Credentials Provider enables cross-account secret retrieval
AWS introduced features in the Workload Credentials Provider for cross-account secret retrieval and latency reduction via prefetching. This allows faster access to secrets, improving application performance across multiple AWS accounts.
Amazon QuickSight Introduces Backup Strategy for BI Assets
Amazon QuickSight now allows the backup of BI assets using the AssetsAsBundle APIs to safeguard against data loss. Implementing this strategy is crucial for organizations relying on QuickSight for critical decisions, especially in regulated industries.
FileJump offers lifetime 2TB cloud storage plan for $59
FileJump has launched a lifetime plan providing 2TB of cloud storage for a one-time fee of $59. This plan includes zero-knowledge encryption and a drag-and-drop interface, making it an affordable option for new users seeking secure data storage.
Developer Criticizes AWS Cognito for Documentation and SDK Inconsistencies
A developer recounts a negative experience using AWS Cognito for startup authentication, citing issues with confusing documentation and breaking changes in the Amplify JavaScript SDK. The developer suggests that Cognito's complexity and lack of clear guidance make it unsuitable for their needs despite its cost benefits.
Hyperscaler AI Infrastructure Spending: Growth, Profitability, and Efficiency
The article analyzes financial data from major cloud providers (AWS, Google Cloud, Azure) to assess the financial implications of their AI infrastructure spending. It concludes that growth is accelerating, profitability scales with size, and capital expenditure efficiency is improving, countering criticisms about excessive spending.
Startups should avoid Kubernetes for initial infrastructure, says Render CEO
Anurag Goel, CEO of Render, argues that most startups do not need to begin by managing Kubernetes and cloud infrastructure. This perspective suggests a shift towards simpler deployment models for early-stage companies, potentially influencing infrastructure choices in the startup ecosystem.
Opinion: On-premise systems are seeing renewed interest due to AI fraud and data control concerns
Some companies are reconsidering on-premise infrastructure, moving away from the cloud-first strategy that dominated the last decade. This shift is driven by increasing concerns over AI-driven fraud and the desire for greater control over critical infrastructure and sensitive data, especially for enterprise AI applications.
Google Cloud DMS enables SQL Server disk shrinking for Cloud SQL instances
Google Cloud's Database Migration Service (DMS) now supports Cloud SQL for SQL Server as a source, allowing for continuous, low-downtime replication between Cloud SQL instances. This functionality enables operational patterns like shrinking persistent disks for SQL Server databases within Google Cloud, reducing storage costs after data purges or one-time storage spikes. The process involves using DMS to replicate to a smaller target instance, then switching applications to the new instance.
AlloyDB AI Enables Zero-Downtime Embedding Model Upgrades
AlloyDB AI provides features for upgrading vector embedding models without service interruption. It addresses challenges like re-embedding data, mathematical incompatibility between models, index rebuild overhead, and potential user experience degradation during the upgrade process.
Securing Amazon Quick Access to On-Premises Data with AWS PrivateLink
This guide details how to connect Amazon Quick to on-premises data sources privately using AWS PrivateLink, bypassing the public internet. This method helps enterprises meet regulatory compliance and reduce security risks by keeping sensitive data within controlled network boundaries.
Downgrading User Roles in Amazon Quick for Security and Cost Optimization
Amazon Quick supports downgrading user roles to enforce the principle of least privilege and optimize costs. This practice involves reducing a user's permissions from Admin or Author to Reader when their responsibilities change or they only consume dashboards, which also impacts pricing.
Implementing Multi-Environment Access for Claude Platform on AWS
This post details how to set up multi-environment access for Claude Platform on AWS (CPonAWS), covering authentication for AWS workloads, developer laptops, and external services. It outlines a three-account architecture to manage a single CPonAWS subscription across different environments while maintaining isolation.
BMW Group uses AWS-based system to detect cloud cost anomalies across 14,000 accounts
BMW Group developed Cloud Efficiency Analytics (CLEA), an in-house FinOps system on AWS, to monitor and detect cost anomalies across its 14,000 cloud accounts. This system forecasts expected cloud spend and alerts account owners daily when actual spending deviates from patterns, helping manage cloud costs effectively.