--- title: "Amazon hosts the Chinese AI model its own CEO is waiting to replace" description: "Andy Jassy put Z.ai's GLM 5.3 on Bedrock's six-to-eight-model shelf, called the platform gigantic, then said the West is hungry for a Western replacement. Z.AI's Singapore shares fell 8.62% the next day." publisher: "The Inference" section: "Model" published: 2026-11-01T17:21:04.035Z modified: 2026-11-01T17:21:04.035Z canonical: https://theinference.org/article/amazon-hosts-the-chinese-ai-model-its-own-ceo-is-waiting-to-replace language: en keywords: "Amazon, AWS, Open Weights, Z.ai, China" --- # Amazon hosts the Chinese AI model its own CEO is waiting to replace > Andy Jassy put Z.ai's GLM 5.3 on Bedrock's six-to-eight-model shelf, called the platform gigantic, then said the West is hungry for a Western replacement. Z.AI's Singapore shares fell 8.62% the next day. [Andy Jassy](https://theinference.org/markets/people/andy-jassy) used [Amazon](https://theinference.org/markets/companies/amazon)'s [third-quarter earnings call on October 29](https://finance.yahoo.com/technology/ai/articles/andy-jassy-says-west-very-233005253.html) to confirm that Bedrock, the company's model marketplace, now carries Z.ai's GLM 5.3 beside Moonshot's Kimi K3 and closed models from [Anthropic](https://theinference.org/markets/companies/anthropic) and [OpenAI](https://theinference.org/markets/companies/openai) [1]. GLM 5.3 is the open-weight model of [Z.ai](https://theinference.org/markets/companies), the Beijing lab known as Zhipu that Tsinghua professor [Tang Jie](https://theinference.org/markets/people) spun out of his university lab in 2019 [2]. Jassy called Bedrock's potential "gigantic," a service he wants to grow into something like EC2, AWS's core compute product [1]. ## The shelf that decides the money The economics sit on a narrow shelf. Jassy expects six to eight models to handle more than 95% of Bedrock workloads within two to three years [1]. GLM 5.3 holds one of those seats [1]. The same CEO said the Western world is "very hungry" for additional Western open models, and that he believes they will arrive over time [1]. On Jassy's own words, the seat is political as much as contractual: the host is openly waiting for a model it likes better. ## A month of security studies The seat also carries a record. [Anthropic's Frontier Red Team reported](https://thenextweb.com/news/glm-5-3-cyber-exploits-mythos-anthropic-safeguards) that GLM 5.3's safeguards can be bypassed in 64% to 100% of simulated tests, and that the model built working exploits in 50 of 410 benchmark attempts, six short of the 56 Anthropic's own guarded model managed [3]. NIST's Center for AI Standards and Innovation [called GLM-5.3 the most cyber-capable open-weight model released to date](https://theinference.org/article/amazon-starts-selling-zhipu-s-glm-5-3-after-anthropic-found-its-safeguards-bypassed-63-to-100-of-the-time), about four months behind the US frontier [3]. Days before AWS's call, [researchers reported the model exploited six versions of Firefox](https://cryptobriefing.com/glm-5-3-firefox-exploits-mozilla-patch/) working from security fixes that had not yet shipped, and Mozilla patched [4]. More than 1.3 million copies of the weights sit on [Hugging Face](https://theinference.org/markets/companies/hugging-face) and cannot be recalled [4]. AWS's wrapper protects customer inputs and outputs; it does not patch the weights [1]. ## The headline lands on the name anyway Two qualifications before the numbers scare anyone. The breach figures are Anthropic's, a competitor's, measured against its own model, and the Firefox work ended in a patch, not a breach [4]. And the name travels with or without a fault: [The Inference reported on October 27](https://theinference.org/article/cloudflare-s-own-disclosure-155-glm-5-3-responses-leaked-other-customers-data-and-z-ai-s-name-travels) that [Cloudflare](https://theinference.org/markets/companies/cloudflare) disclosed 155 GLM-5.3 responses leaking fragments of other customers' prompts, pinned the failure on Cloudflare's own cache configuration and the SGLang engine, not the model, and watched the headline land on Z.AI anyway [5]. That wrapper logic now sits inside AWS. ## The tape is already voting Z.AI's Singapore-listed shares closed at S$0.795 on October 30, down 8.62% in the session after the call, on a listing with no traded options [6]. That day is small against the bigger slide: the stock trades near $32 billion after an 81% fall from its June high [5]. Chosun reported [Chinese AI stocks deflating as semiconductor shares plummet](https://www.chosun.com/english/industry-en/2026/11/01/W5GKG2DMLNG3LC7AJPMLVOCL7A/) on November 1 [7]. [The STAR 50 index sits 40% below its July high, about $480 billion erased](https://247wallst.com/investing/2026/10/28/investors-who-piled-into-chinas-ai-boom-just-watched-about-480-billion-vanish-in-under-four-months-are-americas-ai-bulls-next/), and [Morgan Stanley](https://theinference.org/markets/companies/morgan-stanley) expects another 10% to 15% of downside in offshore Chinese stocks [8]. *Chart: **China's AI names sit 40% to 50% below their recent highs; Z.AI just had its worst day** Bar chart of percentage declines in China-linked AI stocks and indexes in late October 2026: STAR 50 minus 40 percent, KSTR ETF minus 42.63 percent, Unitree and Moore Threads about minus 50 percent each, and Z.AI minus 8.62 percent in one session.* *Percentage decline from recent peaks, as reported October 28 to 31, 2026. STAR 50 measured from its July high; KSTR from the June 30 close; Unitree and Moore Threads reported as having lost roughly half their value since August and July, shown as estimates; Z.AI is the single October 30 session, the day after Amazon's earnings call. Different measurement windows. Sources: 24/7 Wall St (October 28, 2026); Yahoo Finance (October 30, 2026, close). [8][6]* ## The case for the model The other side has names on it. [Nvidia](https://theinference.org/markets/companies/nvidia) chief [Jensen Huang](https://theinference.org/markets/people/jensen-huang) called Chinese models "excellent" and argued their adoption raises demand for his chips [1]. Eric Schmidt put China six months behind the US but warned free open-weight models could win developing markets [1]. Tang Jie [told the World Laureates Forum](https://www.scmp.com/tech/tech-trends/article/3372834/self-improving-ai-key-step-towards-agi-safety-key-zai-founder) that recursive self-improvement, AI improving AI, is Z.ai's "main research problem" on the road to AGI, and that GLM-5.3 helped optimize its own inference infrastructure for Chinese chips at a scale not done before [2]. One model, serving Western shelves and the domestic silicon bloc. ## Two tickets, two assumptions Two things settle the seat: whether a Western open model reaches Bedrock's shelf inside Jassy's two-to-three-year window [1], and whether GLM 5.3 survives the next round of security studies [3][4]. The next scheduled readings are the January free float of about 178 million Z.AI shares and the next red-team report [5]. A buyer of HZAD.SI holds the seat and the risk of losing it, and assumes cheap Chinese open weights keep winning Western shelves. A buyer of AMZN holds the toll booth and collects whichever model sits there, including the Western one its own CEO is waiting for [1]. ## Takeaway Bedrock's six-to-eight-model shelf is where the money concentrates, and Jassy has put GLM 5.3 on it while saying the West is hungry for the model that takes its seat; the seat now carries a red-team record and a falling stock. ## Sources 1. [Benzinga via Yahoo Finance, Andy Jassy Says West Is 'Very Hungry' For More Western Open Source AI Models as Amazon Adds China's Kimi and GLM to Bedrock, 31 October 2026](https://finance.yahoo.com/technology/ai/articles/andy-jassy-says-west-very-233005253.html) 2. [South China Morning Post, Self-improving AI the key step towards AGI but safety is key: Z.ai founder, 1 November 2026](https://www.scmp.com/tech/tech-trends/article/3372834/self-improving-ai-key-step-towards-agi-safety-key-zai-founder) 3. [The Next Web, Anthropic says China's GLM-5.3 nearly matches Mythos at cyber exploits, 1 October 2026](https://thenextweb.com/news/glm-5-3-cyber-exploits-mythos-anthropic-safeguards) 4. [Crypto Briefing, GLM-5.3 exploits Firefox vulnerabilities, prompting a Mozilla patch, 29 October 2026](https://cryptobriefing.com/glm-5-3-firefox-exploits-mozilla-patch/) 5. [The Inference, Cloudflare's own disclosure: 155 GLM-5.3 responses leaked other customers' data, and Z.AI's name travels, 27 October 2026](https://theinference.org/article/cloudflare-s-own-disclosure-155-glm-5-3-responses-leaked-other-customers-data-and-z-ai-s-name-travels) 6. [Yahoo Finance Canada, Z.AI Co., Ltd. (HZAD.SI) Options Chain, close of 30 October 2026](https://ca.finance.yahoo.com/quote/HZAD.SI/options/) 7. [Chosun Ilbo (English edition), Chinese AI Stocks Deflate as Semiconductor Shares Plummet, 1 November 2026](https://www.chosun.com/english/industry-en/2026/11/01/W5GKG2DMLNG3LC7AJPMLVOCL7A/) 8. [24/7 Wall St., Investors Who Piled Into China's AI Boom Just Watched About $480 Billion Vanish in Under Four Months, 28 October 2026](https://247wallst.com/investing/2026/10/28/investors-who-piled-into-chinas-ai-boom-just-watched-about-480-billion-vanish-in-under-four-months-are-americas-ai-bulls-next/) --- Amazon hosts the Chinese AI model its own CEO is waiting to replace — The Inference. Canonical: https://theinference.org/article/amazon-hosts-the-chinese-ai-model-its-own-ceo-is-waiting-to-replace