Skip to content

Framework

AWS Cloud Development Kit

AWS CDK is an open-source framework for defining cloud infrastructure in code, synthesized into CloudFormation templates for deployment.

Known aliases

  • AWS CDK
  • aws-cdk
  • AWS Cloud Development Kit
  • CDK
  • Cloud Development Kit

Current stories

buildOne report1 publisher

OpenSearch Serverless NextGen can sleep after ten idle minutes and takes 10 to 30 seconds to wake

OpenSearch Serverless NextGen, S3 Vectors and DynamoDB vector indexing now all scale to zero on AWS, where OpenSearch's old floor was about $200 a month. A developer who deployed all three from one CDK project says it is hard to look past NextGen.

Publishers:dev.to

Reality

Evidence40
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence50
buildConfirmed2 publishers

EventBridge's relaunched buses let other AWS accounts attach their own subscribers through RAM

AWS has relaunched EventBridge event buses so other accounts, granted access through Resource Access Manager, can attach their own subscribers. Teams that built eventing layers around the old same-account rule now have a managed alternative, though its owner sees subscriber accounts and not their targets.

Publishers:dev.to infoq.com

Reality

Evidence62
Adoption
Not scored
Hype gap+12
Incentives45
Confidence66
buildOne report1 publisher

CDK's OAC setup for Lambda function URLs grants CloudFront one of the two permissions it needs

CDK grants CloudFront only one of the two permissions a locked-down Lambda function URL needs, according to an October 2026 update to a dev.to tutorial. The update also moves new functions to Node.js 24, as nodejs20.x lost security patches on 30 April 2026.

Publishers:dev.to

Reality

Evidence35
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence40
buildConfirmed3 publishers

AWS's Well-Architected Agent reviews live accounts across 65+ services against goals teams declare

AWS opened a preview of Well-Architected Agent, a service that reads live accounts across 65+ services and ranks fixes against goals each team declares. The review becomes a job run against the real environment, and every fix comes back as code or commands for the team to apply.

Perspective Coverage

3 publishers
Builder
Builder 45%
Operator
Operator 43%
Investor
Investor 12%

Reality

Evidence55
Adoption10
Hype gap+25
Incentives70
Confidence60
buildOne report1 publisher

Trane put a tool gateway between its HVAC agent and telemetry from millions of assets

AWS says Trane's engineers cut a 20-minute dashboard workflow to a 20-second question in three to four weeks. The multiple rests on timings Trane ran with its own technicians, and the durable part is where the tool calls execute.

Publishers:aws.amazon.com

Reality

Evidence34
Adoption26
Hype gap+32
Incentives82
Confidence56
buildOne report1 publisher

A kprobe on tcp_connect killed an npm postinstall's curl inside AWS CodeBuild

Tetragon ran inside a CodeBuild GitHub Actions runner and killed /usr/bin/curl when a dependency's postinstall script tried to reach a non-loopback address. The control needs a pinned host kernel and privileged mode.

Publishers:dev.to

Reality

Evidence58
Adoption12
Hype gap+5
Incentives22
Confidence55
buildOne report1 publisher

Sharing long-term memory across two agents comes down to the actorId you write under

A dev.to walkthrough gives a Nova Sonic voice agent and an Amplify AI Kit chat agent one long-term memory in Amazon Bedrock AgentCore Memory, where every record is filed under an actorId and a sessionId. Both channels already had short-term context.

Publishers:dev.to

Reality

Evidence58
Adoption12
Hype gap+14
Incentives52
Confidence58
buildOne report1 publisher

A workflow_run listener reads the shutdown-signal line before it retries a dead CI job

On a self-hosted spot runner, an instance AWS reclaimed and a genuinely broken test both produce the same red X, so this pipeline reads the raw job log for four host-only strings and re-runs only the jobs the host killed.

Publishers:dev.to

Reality

Evidence64
Adoption10
Hype gap−10
Incentives18
Confidence58
buildOne report1 publisher

One Lambda fans a query into a prefix match and a 512-dimension cosine search

DynamoDB vector search has been generally available since August 5, 2026. A walkthrough of a serverless search engine shows what a single Lambda actually buys with it, and what choosing 512 dimensions commits a catalogue to.

Publishers:dev.to

Reality

Evidence58
Adoption18
Hype gap+8
Incentives45
Confidence45
buildOne report1 publisher

A console fix to an over-broad IAM role reverts on the owning team's next deployment

IAM Access Analyzer already names the unused permissions and writes the tightened policy. A new AWS pattern sorts each finding by how the role was created and files the fix as a pull request or an issue.

Publishers:aws.amazon.com

Reality

Evidence58
Adoption
Not scored
Hype gap+12
Incentives65
Confidence55
buildOne report1 publisher

AWS ships one TTL knob for agent memories its own guidance gives three different clocks

The AgentCore lifecycle stack defaults episodic memory to 90 days, while the same post recommends 30 to 60 days for summaries and 6 to 12 months for semantic facts. The default is a placeholder to fork before production.

Publishers:aws.amazon.com

Reality

Evidence55
Adoption
Not scored
Hype gap+15
Incentives78
Confidence62
buildOne report1 publisher

Curator approval gates every record AWS Agent Registry shows a consumer

AWS now ships a first-party catalog for agents, tools, skills and MCP servers, moving the hard part off building them and onto whoever keeps the records current and clears the approval queue, a staffing question as much as a platform one.

Publishers:aws.amazon.com

Reality

Evidence46
Adoption28
Hype gap+24
Incentives88
Confidence57
buildOne report1 publisher

ECS Express Mode bakes 5% of traffic for three minutes before it shifts the rest

Express Mode turns a container image and two role ARNs into an HTTPS service on Fargate. The engineering question it leaves behind is which of its inherited defaults match your workload and which will quietly fight it.

Publishers:thenewstack.io

Reality

Evidence45
Adoption
Not scored
Hype gap+25
Incentives88
Confidence55
buildOne report1 publisher

Partial batch failures: the handler is fine, the mapping decides

A correct-looking batchItemFailures handler is inert unless the event source mapping agrees. One dev.to write-up grades the code-versus-mapping mismatch higher than the missing setting, and says why.

Publishers:dev.to

Reality

Evidence54
Adoption12
Hype gap+8
Incentives74
Confidence56
buildOne report1 publisher

AWS's phone-ordering host is really an MCP wiring diagram with no retry button

AWS puts a Claude-powered Connect agent on a real phone number and reaches the restaurant backend over MCP. The unforgiving part is the pause the caller hears while that happens.

Publishers:aws.amazon.com

Reality

Evidence46
Adoption
Not scored
Hype gap+28
Incentives88
Confidence55
buildOne report1 publisher

CDK now validates every synthesized template, and your synth logs will say so

The default rule set ships on in warning mode from aws-cdk-lib v2.261.0. Strict mode is one context key away, and the exit-code change on declined prompts is the quieter risk.

Publishers:dev.to

Reality

Evidence58
Adoption34
Hype gap+8
Incentives62
Confidence56
buildOne report1 publisher

Two NAT Gateways nobody asked for: review cloud bills at 100x, not at this month

A June 2026 AWS audit found the biggest fixed line was a framework default, not a feature. The test that caught it was pricing each charge at 100x usage instead of today's.

Publishers:dev.to

Reality

Evidence34
Adoption16
Hype gap+14
Incentives38
Confidence41