<p>This week on <strong>Ship It Weekly</strong>, Brian looks at what happens when new interfaces create old responsibilities.</p><p>McKinsey patched a vulnerability in its internal AI tool Lilli, Kafka contributors are pushing a diskless-topics model that rethinks durability and replication in cloud environments, and Google officially closed Wiz acquisition in one of the biggest cloud-security moves. Plus: AWS is sunsetting Copilot CLI, Kubernetes launches an AI Gateway Working Group.</p><p><strong>Links</strong></p><p>McKinsey statement on Lilli</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://www.mckinsey.com/about-us/media/statement-on-strengthening-safeguards-within-the-lilli-tool">https://www.mckinsey.com/about-us/media/statement-on-strengthening-safeguards-within-the-lilli-tool</a></p><p>Kafka diskless topics proposal</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://cwiki.apache.org/confluence/display/KAFKA/The%2BPath%2BForward%2Bfor%2BSaving%2BCross-AZ%2BReplication%2BCosts%2BKIPs">https://cwiki.apache.org/confluence/display/KAFKA/The%2BPath%2BForward%2Bfor%2BSaving%2BCross-AZ%2BReplication%2BCosts%2BKIPs</a></p><p>Google completes acquisition of Wiz</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://blog.google/innovation-and-ai/infrastructure-and-cloud/google-cloud/wiz-acquisition/">https://blog.google/innovation-and-ai/infrastructure-and-cloud/google-cloud/wiz-acquisition/</a></p><p>AWS Copilot CLI end-of-support</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://aws.amazon.com/blogs/containers/announcing-the-end-of-support-for-the-aws-copilot-cli/">https://aws.amazon.com/blogs/containers/announcing-the-end-of-support-for-the-aws-copilot-cli/</a></p><p>Kubernetes AI Gateway Working Group</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://kubernetes.io/blog/2026/03/09/announcing-ai-gateway-wg/">https://kubernetes.io/blog/2026/03/09/announcing-ai-gateway-wg/</a></p><p>Amazon Bedrock observability for first-token latency and quota consumption</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://aws.amazon.com/about-aws/whats-new/2026/03/amazon-bedrock-observability-ttft-quota/">https://aws.amazon.com/about-aws/whats-new/2026/03/amazon-bedrock-observability-ttft-quota/</a></p><p>Cloudflare JSON responses and RFC 9457 support for 1xxx errors</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://developers.cloudflare.com/changelog/post/2026-03-11-json-rfc9457-responses-for-1xxx-errors/">https://developers.cloudflare.com/changelog/post/2026-03-11-json-rfc9457-responses-for-1xxx-errors/</a></p><p>Amazon S3 source-region information in server access logs</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://aws.amazon.com/about-aws/whats-new/2026/02/amazon-s3-source-region-information/">https://aws.amazon.com/about-aws/whats-new/2026/02/amazon-s3-source-region-information/</a></p><p>AWS Config adds 30 new resource types</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://aws.amazon.com/about-aws/whats-new/2026/03/aws-config-new-resource-types/">https://aws.amazon.com/about-aws/whats-new/2026/03/aws-config-new-resource-types/</a></p><p>Amazon Bedrock AgentCore Runtime stateful MCP server features</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://aws.amazon.com/about-aws/whats-new/2026/03/amazon-bedrock-agentcore-runtime-stateful-mcp/">https://aws.amazon.com/about-aws/whats-new/2026/03/amazon-bedrock-agentcore-runtime-stateful-mcp/</a></p><p></p><p>More episodes and show notes at</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://shipitweekly.fm">https://shipitweekly.fm</a></p><p></p><p>On Call Briefs at</p><p><a target="_blank" rel="noopener noreferrer nofollow" href="https://oncallbrief.com">https://oncallbrief.com</a></p>