Amazon Bedrock: security advisories, deprecations and releases

LLMJacking: threat actors monetize hijacked cloud LLM resources

Mandiant details LLMJacking campaigns where attackers steal cloud IAM tokens and LLM API keys, then run expensive inference workloads that can rack up six-figure bills in hours.

CVE-2026-40217

AgentCorruption: Single Prompt Collapses Cloud Security Model

AWS Bedrock AgentCore agents exposed IMDS via SSRF, allowing attackers to steal credentials and compromise the entire account with one prompt.

Beyond valid credentials: How exposed AWS keys are tested for Amazon Bedrock access

Attackers test exposed AWS credentials specifically against Amazon Bedrock APIs, not just generic AWS access.

OpenAI GPT-6.1 Terra now generally available on Amazon Bedrock

OpenAI's cost-optimized Terra model is live on Bedrock, scoring higher than GPT-5.6, matching GPT-6 Astra, running three times faster, and costing 50 percent less.

Amazon Bedrock adds GPT-5.6 (Terra, Luna) to bedrock-runtime in GovCloud

OpenAI GPT-5.6 models now run on bedrock-runtime in AWS GovCloud (US) with Responses, Converse, and Chat Completions APIs plus cross-Region inference.

Amazon Bedrock Canada cross-Region inference for Claude Haiku 5.5

Amazon Bedrock now supports Canada CRIS for Claude Haiku 5.5, keeping inference in ca-central-1 and ca-west-1 to meet Canadian data residency rules.

Web Search on AWS Bedrock adds domain filtering and user location

Web Search on AWS Bedrock now supports domain filtering and user location controls to refine search results used by model responses.

Amazon Bedrock Advanced Prompt Optimization now supports prompt shortening

New optional setting in Amazon Bedrock reduces prompt length while keeping evaluation scores the same or better.

Structured outputs for Claude models on Amazon Bedrock

Amazon Bedrock now returns schema-compliant JSON from all Claude models via bedrock-runtime and bedrock-mantle, eliminating custom parsing and retry logic.

Grok 4.7 available on Amazon Bedrock in AWS GovCloud (US)

SpaceXAI's Grok 4.7 frontier model is now accessible via Amazon Bedrock in AWS GovCloud (US) for coding, agentic tasks, and knowledge work.

Claude Haiku 5.5 now on Bedrock at 75% lower cost with effort controls

Claude Haiku 5.5 is available on Amazon Bedrock with lower cost, faster speed, and per-task intelligence controls.

Amazon Bedrock adds reasoning summaries for OpenAI models

Bedrock now returns human-readable reasoning summaries alongside OpenAI model responses, useful for debugging and transparency.

AWS Cost Explorer, Budgets, Dashboards support Bedrock product attributes

AWS Cost Explorer, Budgets, and Cost Management Dashboards now support grouping, filtering, and reporting Amazon Bedrock spend by model, provider, inference type, and feature.

OpenAI GPT-6.1 Sol now supports Ultrafast mode on Amazon Bedrock

AWS adds Ultrafast inference mode for GPT-6.1 Sol on Bedrock, aimed at latency-sensitive workloads.

Amazon Bedrock Managed Agents powered by OpenAI public preview

Managed agents run OpenAI models natively inside AWS, reusing existing identities, permissions, and governance.

Amazon Bedrock adds Claude Opus 5, Sonnet 5, Haiku 4.5 to India, South Korea, Singapore

Claude models are now available in India (Mumbai, Hyderabad), South Korea (Seoul) and Singapore (ap-southeast-1) with in-region inference.

Amazon Bedrock adds Claude Opus 5.5 and Sonnet 5 in UK (London)

Amazon Bedrock now offers in-region inference for Anthropic Claude Opus 5.5 and Claude Sonnet 5 in eu-west-2. Data stays in the UK region for compliance-sensitive workloads.

Observability patterns for AI agents on Amazon EKS

Shows two production-ready OpenTelemetry patterns for tracing LLM calls, tool use, reasoning chains and token costs for AI agents running on EKS.

Transform Bedrock Guardrails events into OCSF with CloudWatch

Step-by-step guide shows how to transform AWS Bedrock Guardrails intervention events into OCSF Detection Finding records and ingest them into the CloudWatch unified data store for SOC correlation with CloudTrail and VPC Flow Logs.