AWS adds sandbox environments, network scanning in Security Hub, and Hugging Face integration in SageMaker Studio

AWS Builder Center marked its first anniversary with expanded features and usage metrics. Launched on July 9, 2025, the platform evolved from a community hub into an ecosystem including sandbox environments, workshops, Spaces, and a Builders’ Library. As of July 13, 2026, the center hosted 6,448 articles from 5,548 authors with more than 10.4 million page views. Community engagement included 99,226 badges awarded since March 2026 and 565 submitted wishes, with 10 shipped and 20 on the near-term roadmap. Sandbox environments were introduced as pre-provisioned, free AWS accounts active for 8 hours, designed to support workshop exercises without requiring personal accounts, credit cards, or manual cleanup. Users can request one sandbox per week.

AWS Security Hub added Network Scanning, a capability that identifies resources reachable from the public internet by probing them externally. It complements existing network reachability findings by detecting actual reachability, not just misconfigurations. The feature discovers public IP addresses, virtual machines, and load balancers across AWS and Azure environments, identifies open ports, and determines services running behind them. Each reachable port generates a Security Hub finding with evidence, which Security Hub Exposures correlates with other findings to assess broader risk. Network Scanning is included with Security Hub Essentials at no additional cost and is on by default for new customers, while existing customers can enable it per account, Region, or organization via configuration policy. Security Hub also extended unified security management to Microsoft Azure, monitoring Azure VMs, container images, Function Apps, and identities for misconfigurations, internet exposure, and software vulnerabilities, with findings presented in a unified prioritized view.

Amazon SageMaker Studio integrated with Hugging Face to enable one-click model deployment and customization. Users can select a supported model on Hugging Face and choose “Customize on SageMaker AI” or “Deploy on SageMaker AI” to open the corresponding workflow page with the model pre-loaded. New customers receive a SageMaker Studio environment created in seconds with pre-configured permissions for serverless model customization, including fine-tuning with custom reward functions for reinforcement learning, model evaluation, and deployment to SageMaker or Bedrock endpoints. Verified customers receive default GPU access to G5, G6, and G4dn instances without requesting quota increases, and quota utilization is visible inside Studio.

EKS Auto Mode and ECS Managed Instances reduced GPU management fees for accelerated instance types beginning July 1, 2026. G-series fees decreased by 35%, while P-series and AWS Trainium fees decreased by 60%. The reductions apply automatically to existing clusters and require no customer action. EKS Auto Mode supports automatic parallel image pulling on GPU instances with local NVMe storage and accelerator-aware node repair. ECS Managed Instances provides GPU metrics through Amazon CloudWatch Container Insights and automatic health monitoring for GPU hardware failures.