CloudFormation Express ⚡, EKS Rollbacks ☸️, AI Guardrails 🔐

AWS CloudFormation Express mode speeds up infrastructure deployments by giving developers and AI agents deployment confirmation in seconds ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌  ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ 

Sign Up |Advertise|View Online TLDR TLDR DevOps 2026-07-06 📱 News & Trends Upgrade Amazon EKS clusters with confidence using Kubernetes version rollbacks (4 minute read) Amazon EKS now supports Kubernetes version rollbacks, letting teams reverse failed cluster upgrades within seven days without rebuilding the cluster. The feature gives platform teams a safer upgrade path by making Kubernetes version changes reversible when workloads, add-ons, or compatibility checks fail after an upgrade. Accelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express mode (4 minute read) AWS CloudFormation Express mode speeds up infrastructure deployments by giving developers and AI agents deployment confirmation in seconds, reducing the iteration loop for infrastructure changes. It is available in all commercial AWS Regions at no additional cost and is positioned around faster infrastructure iteration for agent-assisted and human-driven workflows. Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402 (7 minute read) Cloudflare opened the waitlist for Monetization Gateway, which lets site owners charge for access to web pages, datasets, APIs, or MCP tools behind Cloudflare without building their own payments stack. Charges settle over the x402 protocol, making this a new edge-infrastructure primitive for paid agent, crawler, and API access. 🚀 Opinions & Tutorials Reduce CDN log costs with searchable archives (9 minute read) Teams handling high-volume CDN logs use Datadog Observability Pipelines to route raw logs to object storage while sending metrics to Datadog, reducing indexing costs and normalization across providers. How data sovereignty is changing cloud native infrastructure design (6 minute read) The EU's proposed Cloud and AI Development Act (CADA) introduced a four-tier sovereignty framework in June 2026 that's pushing regulated enterprises to build sovereign cloud platforms using Kubernetes for orchestration, OpenStack for infrastructure, and GitOps for operational consistency rather than relying on hyperscalers. European organizations, including national rail operators, major banks, and telecoms, are already deploying these open-source stacks to enforce sovereignty requirements through architecture and policy-as-code, addressing jurisdictional control concerns that extend beyond data residency to include operational independence and supply chain transparency. Better Models: Worse Tools (12 minute read) Newer Anthropic models appear to be getting worse at reliably following some non-Claude-Code tool schemas, even when they understand the task and generate the correct edit content. Armin Ronacher traces failures in Pi's nested edit tool to model/tooling mismatch, arguing that post-training on a forgiving closed-source harness like Claude Code can teach models to rely on aliases, ignored extra fields, and schema “slop,” making strict grammar-constrained tool invocation more important for custom agent harnesses. 🧑‍💻 Resources & Tools Gastown (GitHub Repo) Gas Town is an open-source multi-agent orchestration system that coordinates multiple AI coding assistants (Claude Code, GitHub Copilot, Gemini, and others) working simultaneously on different tasks while preserving their work state through git-backed storage that survives crashes and restarts. The system includes a three-tier watchdog for agent health monitoring, a Bors-style merge queue called the Refinery for processing completed work, and a federated network called the Wasteland that lets multiple Gas Town instances share work and build portable reputation scores. Planning-with-files (GitHub Repo) A new open-source tool called "planning-with-files" brings persistent, crash-proof planning to AI coding agents by storing task plans, findings, and progress in markdown files on disk—mirroring the context engineering approach used by Manus, the AI agent company Meta acquired for $2 billion in December 2025. The v3.0.0 release adds autonomous and gated modes with a completion gate that prevents agents from stopping prematurely, and the tool now works across 60+ AI coding platforms, including Claude Code, Cursor, and Codex CLI through the SKILL.md standard. 🎁 Miscellaneous Securing agentic AI with perimeter guardrails: What's new in VPC Service Controls (3 minute read) Google Cloud introduced new VPC Service Controls capabilities for AI agents, including agent identity-based access rules, Model Context Protocol attributes, and native Gemini Enterprise Agent Platform integration to strengthen network-level security and prevent data exfiltration from compromised autonomous workloads. Configure Azure Pipelines app in ghe.com (3 minute read) Migrating Azure DevOps pipelines to GitHub Enterprise Managed Users requires manually installing the Azure Pipelines GitHub App via a hidden URL, since OAuth setup fails without prior installation. After installing and linking the service connection, pipelines can be rewired to GitHub repos through Azure Pipelines source configuration. ⚡ Quick Links [Technical demo] Managing on-demand macOS environments (Sponsor) Orka automates macOS VMs with Kubernetes, making Apple CI/CD faster, scalable, and easier to manage. See it live on July 16 at 11 AM EDT. Register for the free webinar See your serverless: introducing the Headlamp plugin for Knative (4 minute read) The Headlamp Knative plugin streamlines Kubernetes serverless operations with unified management of Knative resources. Work In Progress Rust (10 minute read) Rust's strictness helps correctness, but it can slow down early development when every error path, ownership issue, or unfinished branch has to be resolved before the happy path is clear. Love TLDR? Tell your friends and get rewards! Share your referral link below with friends to get free TLDR swag! https://refer.tldr.tech/3b85ceef/10 Track your referrals here. Want to advertise in TLDR? 📰 If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us. Want to work at TLDR? 💼 Apply here, create your own role or send a friend's resume to jobs@tldr.tech and get $1k if we hire them! TLDR is one of Inc.'s Best Bootstrapped businesses of 2025. If you have any comments or feedback, just respond to this email! Thanks for reading, Kunal Desai & Martin Hauskrecht Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.