CloudWatch supporting org-wide rules to automatically enable VPC flow logs is nice, but the fact that it's limited to CWL log groups as a target is a deal-breaker.
I want S3 destinations. The docs even tease the possibility!
I was sitting in the airport and had an idea for a Lambda MicroVM use-case: building Docker images, right from your laptop(ish). So you can do something like this:
docker buildx build --builder lambda --push -t aidansteele/example-image .