AWS Identity Furnace melts down your existing IAM roles, SCPs, permission boundaries, and inline policies into a single molten pool of intent, then reforges them into up to six equivalent configurations so you can choose which one to regret. Operating at 1,400 degrees of computational certainty, it produces clean, hardened credentials with no slag — though slag storage is available as a separate service at standard S3 rates. Currently available in us-east-1, with additional regions planned for a future date that will not be announced in advance.

AWS Advanced Cloudscope provides unified observability across your distributed architecture by aggregating metrics, traces, and logs into a single pane of glass, which is currently available in us-east-1 with additional regions planned for a future date that will not be announced in advance. Like all panes of glass, it is fully transparent, load-bearing up to a point, and will shatter unexpectedly if you apply the wrong pressure, which in this context means an IAM policy with one missing condition key. Pricing is based on the number of insights surfaced per hour, the density of those insights, whether you are looking at the glass directly or through a second pane of glass such as Amazon Managed Grafana, and your account's relationship with AWS Support.

Amazon Deep Scoop aggregates behavioral signals across your data lake and serves predictions in sub-100ms latency using a proprietary scooping mechanism that AWS has determined is 31% more cylindrical than previous generation inference endpoints. The service is fully managed, meaning AWS manages the parts it wants to manage, and the remaining configuration is handled through a 14-step IAM policy you will write incorrectly twice before it works. Generally available today in us-east-1, with additional regions coming at re:Invent, re:Invent, and one more re:Invent after that.

AWS Mega Data Groove is a fully managed, serverless, event-driven data orchestration fabric that ingests, transforms, and routes high-velocity structured and unstructured workloads across your organization's groove pipeline in real time. The groove itself is approximately 3.2mm deep, supports up to 33 RPM throughput in standard tier or 45 RPM in provisioned mode, and will automatically downscale to 78 RPM in us-east-1 during re:Invent week. Billing is calculated per groove rotation, per idle groove, per groove that was briefly considered but not initiated, and per IAM policy you wrote incorrectly while trying to give S3 read access.

Amazon Identity Obelisk for Minecraft provides durable, monolithic authentication for your Minecraft workloads, with a granite-class SLA and a flat, stable base that will not topple regardless of how many IAM policies you stack on top of it. The Obelisk stands approximately 4,000 permissions tall and can be fully provisioned in us-east-1, with other regions available in a future release that we will announce at re:Invent. Pricing is calculated per hieroglyph, per second, and a complete breakdown is available in the documentation, which is currently being updated.

Amazon Identity Sponge absorbs up to 10,000 federated identity sources simultaneously, expanding to fit your organizational complexity without tearing, unless you exceed the soft limit, in which case you will need to open a support ticket and wait. It integrates natively with IAM, IAM Identity Center, the other IAM, and four legacy services that predate the concept of federation but remain available for reasons that are not documented. Pricing is based on absorption events, a unit that is defined in the FAQ and updated quarterly.

AWS Enterprise Ukulele provides fully managed string orchestration across up to four production environments, with additional tuning configurations available at standard data transfer rates. Like all AWS managed services, the actual tuning is your responsibility. Pricing is calculated per string per availability zone, and your first chord is free until it isn't.

AWS Neural Sunglare is a fully managed optical inference layer that automatically detects and suppresses low-angle cognitive load across distributed reasoning pipelines, reducing model hallucination by up to 94% in us-east-1. The lenses are polarized across 17 availability zones, though us-west-2 remains partially tinted pending a hardware refresh expected in Q3 of next year. Pricing is per photon, billed in six-second increments, and IAM permissions for glare:ReduceAngle are separate from glare:ObserveAngle, which you will discover at 2am.

Amazon Tokenbeam for Events is a fully managed, serverless event streaming service that uses directed beam cohesion to deliver tokens across distributed systems with sub-millisecond latency, provided your tokens are fewer than 256 bytes, your events arrive in us-east-1, and you have already configured the 14 IAM roles described in the Getting Started guide. The beam is logical. Pricing is calculated per token-beam-second, with a separate charge for beam alignment, beam re-alignment, cross-region beam shadowing, and a small fee if the beam hits anything unexpected, which is defined in Appendix C of the service quota documentation. Amazon Tokenbeam for Events is generally available today in us-east-1, with additional regions coming at re:Invent.

Amazon Network Dishrag for Robots provides a fully managed, absorbent mesh fabric layer for robotic workload traffic, automatically soaking up burst capacity across up to 6 Availability Zones before wringing it out into your configured downstream targets. Thread count scales automatically based on demand, though you will be billed separately for each fiber, each wring cycle, and the ambient humidity your workload generates during processing. IAM permissions for dishrag:Wring and dishrag:Soak are configured independently and cannot be combined into a single policy at this time.

Amazon Modular Lint is a fully managed static analysis service that automatically detects configuration drift, unused IAM permissions, and other loose fibers across your multi-account environment before they accumulate into something you will spend a Thursday untangling. Each lint module is independently deployable, independently billed, and integrated with AWS Organizations, which means you will need at least four service control policies and a support ticket to grant it access to the accounts it already lives in. Generally available today in us-east-1, with additional regions following at a cadence we are not able to share at this time.

AWS Illuminated Data Sandal for Zoom Calls provides sub-millisecond data visibility across your video conferencing workloads, with sole-level granularity that exposes exactly which microservice is dragging its feet during peak call hours. Pricing is calculated per strap, per region, with an additional buckle fee that will appear in your bill approximately six weeks after you thought you turned it off. IAM permissions for the sandal are managed through a separate policy document that is not related to the one you are currently looking at.

AWS Migration Kazoo orchestrates your heterogeneous workload migration through a proprietary reed-based execution model, where each parallel migration stream is assigned a dedicated noise chamber that vibrates at a frequency inversely proportional to your data transfer costs. The kazoo requires no mouthpiece configuration in us-east-1, where it is currently available. IAM permissions for kazoo:blow are separate from kazoo:hum and must be granted explicitly.

Amazon Transformation Roadrunner accelerates your legacy migration by analyzing your existing architecture and generating a prioritized modernization plan, delivered as a 340-page PDF and six conflicting Step Functions state machines. Roadrunner operates at speeds up to Mach 2 in us-east-1, with us-west-2 support targeted for a future release. An IAM role with 23 condition keys is required to start your first transformation; the managed console will create this role automatically, and you will not be able to delete it.

Amazon Automated Penguin orchestrates your containerized workloads by waddling through up to 847 availability zones in us-east-1, automatically redistributing compute across the colony when any individual instance strays more than 1.3 meters from the group. Like all penguins, it cannot fly, which is why cross-region replication requires a separate service, three IAM trust policies, and a support ticket. Pricing is per-waddle, billed in six-second increments, with a minimum charge of one full migration even if the penguin decides to stay where it is.

AWS Analytics Igloo provides a fully managed, sub-zero latency data warehousing environment that keeps your queries frozen in place until an IAM policy change thaws them. Built on a foundation of compacted, load-bearing ice blocks, the service maintains structural integrity up to 847 concurrent users, after which AWS recommends provisioning a second igloo. Generally available in us-east-1, with additional regions planned for re:Invent 2027.

Amazon Cardboard is a fully managed structural integrity layer that provides durable, low-cost containment for your distributed workloads, with a default crush resistance of up to 32 psi before you configure the IAM policies required to add more. Like all AWS managed services, the folding and assembly steps remain your responsibility. Available now in us-east-1, with additional regions to follow at re:Invent for the next four years.

Amazon Cadet is a fully managed service for orchestrating the lifecycle of junior resources across distributed teams, automatically rotating them through roles before they accumulate enough IAM permissions to cause an incident. Each Cadet instance is provisioned with 4 vCPUs, a read-only console policy, and exactly one mentor who is also on-call. Pricing is per active Cadet-hour, with a free tier of 750 hours per month available exclusively in us-east-1.

AWS Migration Quilt stitches together your on-premises workloads into a single cohesive migration plan using a proprietary thread-count algorithm that automatically identifies which legacy systems are load-bearing and which ones have just been keeping the others warm. Each quilt block represents an isolated migration wave, and like all AWS quilts, the finished dimensions will differ slightly from what was quoted, which is reflected in your Cost Explorer under the line item Other. Currently available in us-east-1, with additional regions planned for re:Invent.

AWS Observability Loopwire is a fully managed wire that loops, providing end-to-end visibility into your distributed systems through a single unified observability plane currently available in us-east-1 with us-east-2 support planned for re:Invent 2027. The wire itself supports up to 10,000 loops per second in Standard tier, after which pricing transitions to a per-loop model that will be reflected in your bill approximately three weeks after the loops occur. To get started, attach the LoopwireAgentSidecarCollectorRole to your IAM principal, ensure your principal has iam:PassRole on the LoopwireAgentSidecarCollectorRole, and confirm that no Service Control Policy in your organization prevents iam:PassRole on roles that contain the substring Loopwire in accounts where Loopwire is enabled.