Project
Amazon CloudFront is AWS's content delivery network (CDN), caching and routing web content, video, and APIs through edge locations worldwide.
AWS Lambda now runs port-listening HTTP servers such as Express and Fastify, with up to 128 concurrent requests per environment. Billing moves to CPU time used, while memory is metered for the life of the environment.
Reality
CDK grants CloudFront only one of the two permissions a locked-down Lambda function URL needs, according to an October 2026 update to a dev.to tutorial. The update also moves new functions to Node.js 24, as nodejs20.x lost security patches on 30 April 2026.
Reality
Cloudflare reports origin handshake retries falling by a factor of fourteen, though its own 30% miss rate cannot produce a 52% baseline. What does transfer is post-quantum key agreement arriving with nobody configuring it.
Reality
AWS WAF's Bot Control can now answer an AI agent with an HTTP 402 and payment instructions. The action runs only on CloudFront distributions, and AWS says the classification behind it is probabilistic and should be tested first.
Reality
Aurora Serverless v2 idles at about $43 a month at its 0.5-ACU floor, close to three times the whole $15 EC2 box being retired, so the read path became a SQLite file in S3 and the writes went to DynamoDB.
Reality
A dev.to walkthrough CNAMEs a customer subdomain to platform storage and keeps every permission in the signature. Its sample onboarding code puts the tenant check before the presign call, where it belongs.
Reality
The features AWS announced before IBC 2026 move layout composition and ad stitching inside the encoding pipeline. That retires integrations broadcasters built themselves and leaves them to verify a 97% saving on their own bill.
Reality
AWS traced the July 16 CloudFront failure to a capacity limit in one Frankfurt availability zone. The customers it knocked offline had adopted the feature that failed as a security control, not a routing one.
Reality
A dev.to writeup reduces the storage choice to a property test on the calling code. The part worth arguing about is when each wrong answer shows up: on the first query, or at 10 million files.
Reality
A team dropped GoAccess because its panels never cross, then spent the engineering effort where it actually lands: keeping ingestion at 44.5 MB regardless of file size.
Reality
Two disclosed DoS techniques turn HTTP/3-to-HTTP/1.1 conversion at six major CDNs into up to 350x load on the origin, with no configuration change by the customer.
Reality
Amazon Bedrock AgentCore payments is generally available with stablecoin wallets, per-session spend caps and a second payment protocol. What is left to solve is approval, not code.
Reality
ACM stops offering email validation in new Regions on Jan 1 2027, blocks new requests on March 31, and stops renewing on Sept 30. The in-place switch to DNS keeps the certificate ARN.
Reality