What's New with AWS — April 2026: The Month in Review
A themed roundup of every headline launch AWS shipped in April 2026 — the GA of AWS's first frontier agents, a deep wave of Anthropic/Claude milestones, AWS Interconnect reaching general availability, and a run of serverless, storage, and security releases. Every item links back to the original announcement.
April 2026 was a heavily AI-flavored month. The marquee moment was AWS's first two frontier agents — the DevOps Agent and Security Agent — reaching general availability, but close behind was a dense run of Anthropic milestones: Claude Opus 4.7 and the gated Claude Mythos Preview arriving in Amazon Bedrock, Claude training on AWS Trainium and Graviton, and Claude Cowork landing in Bedrock. Networking got a headline too, with AWS Interconnect reaching GA.
Below is a roundup of the month's most notable launches, grouped by theme. Every item links straight to its original announcement.
The Headline: Frontier Agents Go GA
At re:Invent 2025 AWS introduced the concept of frontier agents — agents that work autonomously across many steps until a job is done. In April, the first two reached general availability after preview.
AWS DevOps Agent (GA) devops
An autonomous teammate for cloud operations — investigating incidents, reducing time to resolution, and heading off issues before they happen. Preview customers reported up to 75% lower MTTR and 3–5× faster resolution; at Western Governors University, resolution dropped from hours to minutes. Works across AWS, multicloud, and on-prem.
AWS Security Agent (GA) security
Continuous, context-aware penetration testing brought into the development lifecycle, operating like a human pen tester. LG CNS estimated 50%+ faster testing and ~30% lower costs with significantly fewer false positives.
Anthropic on AWS: A Deepening Collaboration
Claude Opus 4.7 in Amazon Bedrock bedrock
Anthropic's most intelligent Opus model — 64.3% on SWE-bench Pro and 87.6% on SWE-bench Verified — running on Bedrock's next-gen inference engine with adaptive thinking, high-resolution image support, and the full 1M-token context window. Available at launch in N. Virginia, Tokyo, Ireland, and Stockholm.
Claude Mythos Preview in Amazon Bedrock bedrock
Anthropic's most sophisticated model to date, available as a gated research preview through Project Glasswing. Mythos introduces a model class focused on cybersecurity — identifying sophisticated vulnerabilities and analyzing large codebases. Access is limited to allowlisted organizations, prioritizing internet-critical companies and open-source maintainers.
Claude Cowork in Amazon Bedrock, plus Claude on Trainium & Graviton bedrock
AWS and Anthropic deepened their collaboration: Anthropic is now training its most advanced models on AWS Trainium and Graviton, co-engineering at the silicon level with Annapurna Labs. Claude Cowork is now deployable inside your Bedrock environment for team-based AI workflows, and a unified Claude Platform on AWS was announced as coming soon.
Meta signs agreement to power agentic AI on AWS Graviton graviton
Meta will deploy AWS Graviton at scale — starting with tens of millions of cores — to power CPU-intensive agentic AI workloads like real-time reasoning, code generation, search, and multi-step task orchestration.
AI, Agents & Bedrock
Bedrock AgentCore — managed harness, CLI, and skills agentcore
Go from idea to working agent faster: a managed harness (preview) runs an agent from just a model, system prompt, and tools with no orchestration code (exportable to Strands code later), plus a new AgentCore CLI that deploys with infrastructure-as-code (CDK now, Terraform coming) across 14 Regions.
AWS Agent Registry (preview) agentcore
A private catalog in Bedrock AgentCore for discovering and governing AI agents, tools, skills, MCP servers, and custom resources — with semantic/keyword search, approval workflows, and CloudTrail audit trails, queryable from the console, CLI, SDK, and as an MCP server.
Bedrock AgentCore Evaluations (GA) agentcore
Systematically evaluate agent quality and behavior in production, now generally available.
Amazon Bedrock cost allocation by IAM user and role bedrock
Tag IAM principals with attributes like team or cost center, activate them in Billing, and see model-inference spend flow into Cost Explorer and the Cost and Usage Report — clear line of sight into AI spend by team, project, or department.
AWS Transform in Kiro and VS Code transform
The agentic migration and modernization factory is now available as a Kiro Power and a VS Code extension, running custom transformations (Java/Python/Node.js upgrades, SDK migrations) from your IDE with job state shared across web, CLI, and IDE.
AWS Transform Custom — automated codebase analysis (GA) transform
Automated codebase analysis for custom transformations reaches general availability, helping teams understand and modernize large, unfamiliar codebases.
SageMaker AI — optimized generative-AI inference recommendations sagemaker
Automatically identify optimized deployment configurations — instance type, container, and inference parameters — taking the guesswork out of tuning inference infrastructure for cost and latency.
Networking
AWS Interconnect is now generally available networking
Two managed private-connectivity capabilities hit GA. Multicloud gives Layer 3 private connections between AWS VPCs and other clouds (Google Cloud now; Azure and OCI later in 2026) over private backbones with MACsec encryption — with the spec published on GitHub under Apache 2.0. Last Mile auto-provisions 4 redundant connections across 2 locations, configures BGP, and offers 1–100 Gbps adjustable from the console, launching in US East (N. Virginia) with Lumen.
Amazon ECR pull-through cache — referrer discovery and sync ecr
The pull-through cache now automatically discovers and syncs OCI referrers (signatures, SBOMs, attestations) from upstream registries, so image-signature verification and SBOM workflows work without client-side workarounds.
Amazon CloudFront — SHA-256 for signed URLs and cookies cloudfront
Signed URLs and signed cookies now support SHA-256, a stronger hashing option for securing private content delivery.
Compute & Serverless
Amazon EC2 C8in and C8ib instances (GA) ec2
On custom 6th-gen Intel Xeon Scalable processors and 6th-gen Nitro cards — up to 43% higher performance than C6in. C8in offers 600 Gbps networking (highest among enhanced-networking EC2), C8ib up to 300 Gbps EBS bandwidth, scaling to 384 vCPUs.
AWS Lambda can mount S3 buckets as file systems (S3 Files) lambda
Functions can perform standard file operations on S3 data without downloading it first. Built on Amazon EFS, multiple functions can share a common workspace — especially useful for AI/ML pipelines where agents persist memory and share state across steps.
Amazon ECS — Managed Daemons for Managed Instances ecs
Run sidecar-style daemon workloads (monitoring, logging, security agents) on ECS Managed Instances without managing the underlying host.
Amazon EKS Hybrid Nodes gateway eks
Automates networking between your EKS cluster VPC and pods on Hybrid Nodes — no need to make on-prem pod networks routable. Enables pod-to-pod traffic across cloud and on-prem, control-plane-to-webhook comms, and ALB connectivity, at no additional charge.
Storage & Data
Amazon S3 Files — buckets as file systems s3
Transforms S3 buckets into shared file systems connecting any AWS compute directly to your S3 data. Built on EFS, it delivers full file-system semantics with low latency, caches active data, and provides multiple TB/s of aggregate read throughput — accessible via both file-system and S3 APIs simultaneously, no migration.
Amazon Aurora Serverless — up to 30% better performance aurora
A smarter scaling algorithm for workloads where tasks compete for resources — busy APIs and agentic AI apps with bursts and long idle windows — with up to 30% better performance and still scaling to zero. Available in platform version 4 at no extra cost.
Aurora DSQL connector for PHP dsql
A PHP connector (PDO_PGSQL) that auto-generates IAM tokens, handles SSL, manages connection pooling, and offers opt-in optimistic-concurrency retry with exponential backoff.
Amazon OpenSearch Service — Managed Prometheus and agent tracing opensearch
A unified observability platform consolidating metrics, logs, traces, and AI-agent tracing — native Prometheus with PromQL, RED metrics, and OpenTelemetry GenAI semantic conventions for LLM execution visibility, so teams correlate slow traces to logs without tool-switching.
Amazon EBS Volume Clones ebs
Create instant, point-in-time copies of EBS volumes that are immediately usable without waiting for data transfer — handy for dev/test refreshes, DR testing, and CI/CD acceleration.
Security & Identity
AWS Secrets Manager — hybrid post-quantum TLS secrets-manager
Hybrid post-quantum key exchange using ML-KEM protects secrets against current and future quantum threats — automatically enabled in Secrets Manager Agent 2.0.0+, Lambda Extension v19+, and the CSI Driver 2.0.0+.
Amazon Q — document-level access controls for Google Drive amazon-q
Enforces document-level permissions for Google Drive knowledge bases, combining indexed ACL replication for fast pre-retrieval filtering with real-time permission checks at query time.
Management, Operations & Sustainability
New AWS Sustainability console — Scope 1–3 in one place sustainability
Programmatic access, configurable CSV reports, and Scope 1–3 emissions reporting consolidated in a single console.
CloudWatch — OpenTelemetry Container Insights for EKS (preview) cloudwatch
OpenTelemetry-based Container Insights for Amazon EKS, giving standardized, vendor-neutral container observability.
Amazon WorkSpaces Advisor — AI-powered troubleshooting workspaces
A generative-AI admin tool that analyzes WorkSpaces Personal configurations, detects problems automatically, and provides actionable recommendations to restore service and optimize performance.
Quantum
Amazon Braket adds Rigetti's 108-qubit Cepheus QPU braket
Access to Rigetti's Cepheus-1-108Q — the first 100+ qubit superconducting processor on Braket, built from twelve 9-qubit chiplets with CZ gates. Supports Braket SDK, Qiskit, CUDA-Q, and Pennylane, with pulse-level control.
Learning & Community
AWS microcredentials are now free training
Hands-on, scenario-based assessments (configure, troubleshoot, and optimize in a live AWS environment) are now available at no cost through AWS Skill Builder in all supported countries.
Kiro startup credits program returns kiro
Kiro is relaunching startup credits, offering eligible early-stage companies up to a year of Kiro Pro+ across three tiers (Starter, Growth, Scale) for 2–30 users, with rolling global applications.
The Month in a Paragraph
April 2026 was the month AWS's agent strategy got real: the first two frontier agents — the DevOps Agent and Security Agent — reached general availability, with preview customers already reporting sharply lower incident-resolution times and faster security testing. Running right alongside was an unusually deep stretch of Anthropic milestones: Claude Opus 4.7 arriving in Amazon Bedrock with a 1M-token context window, the gated Claude Mythos Preview for cybersecurity work, Claude Cowork inside Bedrock, and Claude now training on AWS Trainium and Graviton — plus a Meta agreement to run agentic AI on Graviton at scale. Networking had its own headline in the GA of AWS Interconnect (multicloud and last-mile private connectivity), and the serverless and storage stack kept improving with S3 Files, a faster Aurora Serverless, EKS Hybrid Nodes gateway, and new C8in/C8ib instances. The through-line for the month was unmistakable: making agents — and the infrastructure, governance, and models behind them — first-class on AWS.