#office-hours - September 2026

aws.amazon.com/about-aws/…/aws-lambda-full-iam-resource-based-policies

This security improvement lets you edit a Lambda function's resource-based policy. Before, you had to call the lambda:AddPermission API method to add single statements, and all those did was Allow specific principals to lambda:InvokeFunction . For an analogy, compare the expressiveness of security group rules (allow only) and Network Access Control List rules (allow or deny).

CloudFormation: AWS::Lambda::Permission → AWS::Lambda::ResourcePolicy

Terraform: aws_lambda_permission → aws_lambda_policy (proposed in terraform-provider-aws issue 49691 ; not implemented as of v6.62 ; you could use terraform-provider-awscc for now)

Benefits:

• You can use IAM condition keys to intelligently target principals that can invoke a Lambda function.
• You can make permission to invoke a Lambda function exclusive (for example, exclusive to the event source mapping from one particular SQS queue) by adding a Deny statement to complement an Allow statement in the same resource policy or in an identity-based (IAM user or role) policy. Before, you would have needed a Service Control Policy to prevent unintended IAM users and roles from invoking particular Lambda functions.
Exclusive permission to invoke a Lambda function is now practical, but I need to check whether old restrictions on role trust (assume role) policies for the Lambda service have been relaxed so it's practical to make an IAM role exclusive to a Lambda function.

https://nvd.nist.gov/vuln/detail/cve-2026-85046

https://engineering.atspotify.com/2026/9/portal-by-spotify-cut-my-claude-code-token-usage-by-90

https://packagemain.tech/p/gitignore-everything-by-default

Radical idea

Hot off the press: aws.amazon.com/about-aws/…/aws-lambda-90-minute-function

https://runs-on.com/docs/observability/cli/#roc-logs

Please, please, please, let this be true. macrumors.com/2026/09/14/siri-can-be-swapped-out-for-chatgpt-claude

GitHub Actions can now run local actions without requiring a checkout.
github.blog/changelog/2026-07-30-reference-same-repository-actions-with-self-repository-syntax

cc @Michal Tomaszek thanks!

https://www.wired.com/story/hackers-flock-camera-data-shows-how-system-works/

https://www.cloudx.ai/posts/setup-go

https://www.wired.com/story/an-undercover-google-analyst-infiltrated-a-notorious-supply-chain-hacking-gang/

https://unbiasedheadlines.com/article/fake-github-repos-for-lastpass-and-39-other-brands-are-pushing-malware-that-kills-145-security-tools

https://www.anthropic.com/claude-opus-5-5

https://stripe.dev/blog/meet-stripes-knowledge-ai-platform

aws.amazon.com/about-aws/…/ec2-t8i-instances-ga

People speculated that EC2 "burstable" performance instances were on the way out, with nothing new in the t instance type family since t4g was introduced in September, 2020. Here we are, with t8i after 6 years! General performance improvements and an Intel CPU come at a small premium.

As of 2026-09-23, for 512 MiB of RAM and a fraction 2 vCPUs, the on-demand price per instance-hour in the us-east-1 region is:

• 0.624¢ t8i.nano (about $4.50 per month)
• 0.520¢ t3.nano (under $4 per month)
• 0.420¢ t4g.nano (about $3 per month)

benchmarked the new t8i instance types. Very good price/perf ratio for small CI jobs it seems runs-on.com/benchmarks/aws-ec2-instances/t8i.medium

https://www.docker.com/blog/manufacturing-trust-for-ai-agents-keynote/

https://www.usestable.com/

https://www.newyorker.com/magazine/2026/09/28/is-ai-above-the-law

https://lnkd.in/p/g7TdQKdZ

https://github.com/git-bug/git-bug

https://btrblocks.com/blog/s3_is_the_future_and_the_past/

https://news.ycombinator.com/item?id=49893876

I'm not sure this is even conceivable, but... Imagine the bootstrap problem of intelligence systems going down, when no one knows how to bring them back up without the system itself walking them through it... Like if power and intelligence were to go down in a Carrington-class event in 10 years...

Like what would happen to individuals ten years from now who are trying to live if AI suddenly became inaccessible

Of course we all know most humans are useless and unable to survive outside our culture, but the difference is that I'm trying to picture is the individual trying the reason through challenges. The version of this that has been obvious to me up to now is that the individual didn't have the knowledge to look after themselves. But I guess it feels different to conceive of them not having the ability to fully reason on their own...?

To not just lack the objects of intelligence, but the very process of it...

Wow, 16 year old white hat hacker breaches Microsoft analytics endpoint with full access to something like 17 trillion records. https://blog.faav.net/how-i-couldve-accessed-17-trillion-microsoft-records