354: US-Tirefire-1 lives up to its Stellar Reputation

Welcome to episode 354 of The Cloud Pod, where the weather is always cloudy! This week was sort of a tire fire for the cloud, with US-East-1 losing power, TanStack Supply chain being hit with an impressively creative attack, and Linux getting hit with a second vulnerability in as many weeks. But it’s not all bad news – Microsoft finally figured out we don’t want (or need) Copilot in EVERYTHING, and Anthropic introduced dreaming via Claude managed agents. There’s even more where that came from, plus an aftershow, so let’s get started! Titles we almost went with this week IAM Not Messing Around With AI Agent Security  Redis Who? Valkey 9.0 Crashes the Cache Party US-EAST-1 Loses Power Again, Architects Say Told You So HTTP 402 Payment Required Now Actually Required for Bedrock Agents  ElastiCache Finds Your Data With Vectors and Vibes Stop Squinting at Logs and Let AI Do It GKE Nodes Finally Stop Taking the Scenic Route AWS MCP Server Goes GA So Your AI Stops Lying AI Agents Now Snitching on Your Sloppy Security Code TanStack Supply Chain Worm Trusted SLSA and Lied I wonder if Claude is dreaming about how bad my code is US-EAST-1 Loses Power Again, The CloudPod Say Told You So Will my credit card company accept my agent bought it as a fraud reason?  Extended RDS and Cloud SQL is a TAX without representation Boston SQL Party – Throw your Extended RDS overboard Everyday is a bad day for Cyber Security Azure Scale Sets Finally Let Your VMs Grow Up From 200 to 1000 VMs Without Starting Over Availability Sets Pack Their Bags for Scale Sets A big thanks to this week’s sponsors: There are many cloud cost management tools out there, but only Archera provides insured commitments. It sounds fancy, but it’s really simple. Archera gives you the cost savings of a 1 or 3-year AWS Savings Plan with a commitment as short as 30 days. If you do not use all the cloud resources you have committed to, Archera will literally cover the difference. Other cost management tools may say they offer “insured commitments”, but remember to ask: Will you actually give me my rebate? Because Archera will.  Check out thecloudpod.net/archera to schedule a demo today.  Follow Up 01:26 Microsoft Cuts Copilot Bloat Microsoft is actively removing Copilot integrations from products where adoption was low or user feedback was negative, including Gaming Copilot on Xbox and several Windows 11 entry points in Photos, Widgets, and Notepad. The scale of the Copilot sprawl became concrete when a tech commentator counted 81 distinct Copilot products, a figure that circulated internally at Microsoft and drew attention from staff. Microsoft executive Jacob Andreou publicly acknowledged the need to cut underperforming Copilots before deleting the post, signaling an internal shift toward consolidation under a single combined consumer and enterprise Copilot organization. The financial case for trimming Copilots is direct: Microsoft noted during its most recent earnings that running certain Copilots was compressing margins, particularly free integrations in Windows where no additional revenue offsets the inference costs. The products Microsoft is choosing to retain, such as Microsoft 365 Copilot, which saw 33 percent growth in paying users last quarter...