What happened
Amazon Web Services has extended EC2 Auto Scaling's Instance Refresh feature to work natively within CloudFormation via a new AutoScalingInstanceRefresh update policy. When stack properties require instance replacement, CloudFormation now triggers the refresh automatically rather than requiring a separate manual action, and engineers gain access to capabilities such as in-place root volume replacement during the process. Separately, Cloudflare has enabled post-quantum authentication on connections between its network and customer origin servers, covering both Authenticated Origin Pulls and Custom Origin Trust Store configurations. The company describes this as an initial milestone in a broader rollout of PQ authentication across its full product suite.
Why it matters for your business
For teams running workloads on AWS, the CloudFormation integration means fleet updates can now be fully expressed as infrastructure-as-code without stitching together separate automation to trigger a refresh afterward — reducing toil and the risk of human error during deployments. Operations and platform engineering teams gain more consistent, auditable rollouts that respect existing scaling policies and health checks. On the security side, Cloudflare's post-quantum move is a concrete step toward protecting origin traffic against the cryptographic threats that capable quantum computers would eventually pose to today's TLS-based authentication. Organizations that rely on Cloudflare for edge delivery should begin auditing their origin authentication configurations now so they are positioned to adopt PQ defaults without scrambling when the broader rollout arrives.
What to watch next
Cloudflare has signaled that post-quantum authentication will extend to additional products over time, making it worth monitoring their changelog for expansion beyond origin-pull scenarios to areas such as API Gateway and Zero Trust tunnels. On the AWS side, teams should evaluate whether existing CloudFormation templates can be refactored to adopt the new update policy, particularly for Auto Scaling groups that currently rely on manual or Lambda-triggered refresh workflows. Broader industry movement toward NIST-standardized post-quantum algorithms means both developments are likely to accelerate over the next twelve months.