buildOne report1 publisher A DEV Community post explains AWS Lambda Web Functions, which run a plain Node.js HTTP server, and when to use them instead of event-handler Lambdas
AWS Lambda Web Functions let an ordinary Node.js HTTP server run on Lambda, listening on the port in AWS_LAMBDA_HTTP_ENDPOINT, a DEV Community post says. The author says it does not replace event-handler Lambdas and tested it with a streaming agent and simulated high-traffic services.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap−10
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher Hono apps can run on Lambda Web Functions with no adapter on Node.js 24 and Arm64
AWS Lambda Web Functions run a Hono server without an adapter and allow 128 concurrent requests per environment, a dev.to guide says. Billing, concurrency and endpoint auth differ from Event Functions, so fit needs a check before a backend moves.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap−10
- Incentives
- Not scored
- Confidence55
buildConfirmed2 publishers AWS Lambda now runs port-listening HTTP servers such as Express and Fastify, with up to 128 concurrent requests per environment. Billing moves to CPU time used, while memory is metered for the life of the environment.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+20
- Incentives70
- Confidence66
buildOne report1 publisher Python 3.15 lazy imports cut a 512 ms cold start to 32 ms on the route that skips boto3
Python 3.15's PEP 810 lazy imports cut a handler's health-check start from 512 ms to 32 ms in a dev.to benchmark that changed five import lines. The boto3 route fell only from 614 ms to 361 ms, so the gain depends on what a cold process runs first.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives30
- Confidence45
buildOne report1 publisher CDK's OAC setup for Lambda function URLs grants CloudFront one of the two permissions it needs
CDK grants CloudFront only one of the two permissions a locked-down Lambda function URL needs, according to an October 2026 update to a dev.to tutorial. The update also moves new functions to Node.js 24, as nodejs20.x lost security patches on 30 April 2026.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence40
buildOne report1 publisher Lambda's loop detection reaches eusc-de-east-1 covering only four services
AWS Lambda's recursive loop detection reached the European Sovereign Cloud on September 10, 2026, cutting S3, SQS and SNS chains at about 16 invocations. A dev.to analysis shows that loops through other services, old SDKs or wide fan-out still get through, so eusc-de-east-1 teams need limits of their own.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher Proxylity's WireGuard listeners now admit strangers and hand each packet to Lambda
Two properties shipped on June 3 remove the enrollment step and the synchronous wait that kept UDP and device provisioning off serverless AWS.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence55
buildConfirmed2 publishers AWS published a Bedrock AgentCore sample for agents that wake on S3 and scheduled events, capping each agent turn at Lambda's 15-minute timeout. Reviewers can take hours, so the sample stops the agent at every human checkpoint and restarts it from saved state.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+20
- Incentives70
- Confidence65
buildOne report1 publisher Lambda durable function replay turned a human-approved refund into an escalation
One developer's Lambda durable function executed 'escalate' after a human approved 'refund', because replay ran the uncheckpointed agent call a second time. Whatever a human signs off on has to be checkpointed with context.step so every replay returns the same value.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence60
buildOne report1 publisher Revoking one leaked S3 presigned URL takes down every URL its credential signed
AWS lets an S3 presigned URL live up to seven days, and anyone holding a leaked one can use it until it expires or its signer is revoked. Revoking the signer kills every URL it made, so short expiries and a bucket-level cap on signature age are the practical defence.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence50
Cursor's self-hosted agent workers still send file contents and diffs back to its cloud
Cursor now runs coding-agent tool calls on machines you own, but its documentation is explicit that the loop, the inference and the content the agent reads stay on Cursor's side, so what you get is reachability into your infrastructure while the data boundary stays with Cursor.
Publishers:cursor.com
Reality
- Evidence55
- Adoption20
- Hype gap+25
- Incentives85
- Confidence60
buildOne report1 publisher AWS lets one EventBridge custom bus serve every account in an organization through RAM
AWS launched an EventBridge custom bus that a whole organization shares through RAM, with 10,000 subscribers per bus by default. Platform teams can move onto it and retire the cross-account rules and bus-to-bus hops they wired by hand.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+20
- Incentives85
- Confidence60
buildOne report1 publisher Aderant's hourly Nova Lite job routed 109 support tickets with about 96% accuracy
Aderant's ticket analyzer, one Lambda calling Amazon Nova Lite each weekday hour, routed 109 tickets at about 96% accuracy for under $30 a month. The build is small enough to copy, but four misses in 109 tickets is a thin base for a rate another team should plan around.
Reality
- Evidence35
- Adoption15
- Hype gap+20
- Incentives80
- Confidence50
Scoped identity with iam:PassRole could potentially run as prod-admin via a Lambda function it creates, if unblocked by policy controls
Permission-by-permission review scores iam:PassRole, lambda:CreateFunction and lambda:InvokeFunction as controlled access, while path analysis sees one route to whatever the passed role holds. Three policy layers decide whether that route is live.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+8
- Incentives50
- Confidence55
buildOne report1 publisher Fanning 14,000 accounts across 500 Lambdas keeps BMW's daily cost forecast near $50 a month
BMW Group's CLEA forecasts hundreds of thousands of account-service pairs every day with Prophet on Lambda, then has to decide which of those deviations is worth an account owner's email. Compute runs about $50 a month.
Reality
- Evidence46
- Adoption58
- Hype gap+12
- Incentives72
- Confidence60
buildOne report1 publisher A Lambda transform lands blocked prompt injections in the same Athena catalog as CloudTrail
AWS has published a pipeline that pulls Bedrock guardrail traces out of model invocation logs, rewrites them as OCSF Detection Findings, and lands them in the CloudWatch store where analysts already query CloudTrail and VPC Flow Logs.
Reality
- Evidence58
- Adoption22
- Hype gap+12
- Incentives76
- Confidence60
buildOne report1 publisher A DynamoDB outbox pushes the deduplication work into the consumer's transaction
miruky's console walkthrough puts an order and its outbox event in one DynamoDB transaction, then fails the consumer on purpose to show why redelivery is the consumer's problem. The whole exercise is priced under $5 in us-east-1.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap−10
- Incentives22
- Confidence60
buildOne report1 publisher Conditional PutItem claim on orderId blocks duplicate charges from repeated SQS messages
SQS standard queues and Lambda event source mappings both deliver at least once, and that guarantee is about the envelope. A lab in us-east-1 sent the same 150-real order four times and logged four charges.
Reality
- Evidence56
- Adoption
- Not scored
- Hype gap−8
- Incentives22
- Confidence62
buildOne report1 publisher Step Functions bills every retry attempt as its own state transition
An engineer who runs Camunda 8 in production priced the AWS alternative from its docs and found the billing unit is the state transition, so the same order costs more on the days its steps have to retry and roll back.
Reality
- Evidence52
- Adoption20
- Hype gap+18
- Incentives35
- Confidence55
buildOne report1 publisher Native AOT beat SnapStart's .NET cold start by 44.5% over five samples each
AWS does not offer SnapStart on the Native AOT managed runtime, so this test compared two runtimes as well as two features, and that missing combination is also why the numbers map onto a real deployment choice.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives20
- Confidence55
Earlier coverage
- AWS lets coding agents write the first access rules in a new account
Security · September 16, 2026 · One report1 publisher
- Committing $10 an hour locks in $87,600 of spend for the year
Build · September 11, 2026 · One report1 publisher