A set of updates this week shortens the path from code to live service. Lambda now supports a "Web Function" form factor that runs a standard port‑listening server (Express, Fastify, Next.js, etc.) directly on Lambda, while S3 buckets and tables can be provisioned from the Vercel dashboard, EC2 burstable T8i instances are available in São Paulo, and Bedrock AgentCore policies are highlighted for agent governance. Each change impacts how we design, deploy, and secure workloads.
Lambda Web Functions: Deploy an HTTP server in minutes
The new Lambda Web Functions model lets you package a traditional web server and launch it with aws lambda-web deploy. The CLI returns a HTTPS endpoint in under a minute, eliminating the need for an API‑gateway adapter or custom event‑handler wrapper. The service runs on the same Firecracker isolation as classic Lambda functions, but adds two notable runtime behaviors:
- Up to 128 concurrent requests share a warm environment, so burst traffic no longer forces a one‑to‑one mapping of request to container.
- Billing is based on actual CPU time rather than wall‑clock duration, which can lower costs for workloads that spend most of their time waiting (SSR, API back‑ends, streaming inference).
Deploy flags such as --regions replicate the function across multiple regions and configure latency‑based routing behind a single global URL. Traffic can be split by revision weight for canary rollouts. The feature is live in five regions, runs Node.js 24 on Arm64, and supports VPC connectivity. CloudFront can now use a Web Function endpoint as an origin, simplifying edge‑to‑origin configurations.
S3 provisioning from Vercel and new bucket features
Vercel’s Marketplace now includes an integration that creates S3 general‑purpose buckets, S3 Tables, and S3 Vectors directly from the Vercel UI or its v0 configuration language. The integration authenticates using a short‑lived OIDC token exchanged at runtime for AWS STS credentials scoped to the specific resource, meaning no static keys are stored. This aligns the storage layer with the rest of the Vercel stack (Aurora, DynamoDB, OpenSearch Serverless) under a single AWS account and billing entity.
EC2 T8i instances in South America
The latest burstable T8i generation is now available in the São Paulo region. Compared to T3, T8i promises up to 30 % better price performance, up to 70 % higher compute capacity, and 2.4 × the EBS bandwidth, while retaining the same CPU‑credit model. Small instance sizes (t8i.micro, t8i.small) are covered by the Free Tier, making them a drop‑in upgrade for login gateways, CI runners, or low‑traffic services that previously used T3.
AgentCore policy enforcement for autonomous agents
AWS highlighted a governance model for Bedrock agents that separates policy enforcement from the agent’s own reasoning. Policies are applied at the gateway via AgentCore, preventing an agent from disabling its own controls. The model follows four decision points—scope, know, bound, observe—intended to replace per‑action human approvals that do not scale.
Related CloudNinjas coverage: AWS.
What This Means For Practitioners
Engineers should evaluate whether existing web services can be migrated to Lambda Web Functions to reduce infrastructure overhead and benefit from concurrent request handling and CPU‑time billing. When using Vercel, adopt the OIDC‑based S3 provisioning to avoid static credentials and simplify cross‑service billing. For workloads in South America, consider T8i instances for cost‑effective burst capacity. Finally, embed AgentCore policies early in any Bedrock‑based automation to enforce boundaries that cannot be overridden by the agent itself.
