All news in category “Vendor and Hyperscaler Watch”

🐧 Amazon MQ now supports RabbitMQ 4.3, introducing quorum queue enhancements including compaction, expanded strict priority support, native delayed retries, and configurable consumer timeouts. The release also brings bug fixes and memory management improvements. Some legacy features—Transient non-exclusive queues, Global QoS, and Classic queues v1 storage—are removed. The new broker version is available on m7g instances and Amazon MQ will manage patch upgrades automatically.

🔔 AWS has announced general availability of second-generation single-rack AWS Outposts, a self-contained 42U rack integrating compute, storage, and networking for low-latency and space-constrained environments. The rack delivers up to 2,688 vCPU and 100 TB of Amazon EBS storage and supports the latest x86-powered EC2 instances, including M7i, M8i, C7i, C8i, R7i, and R8i, as well as Outposts accelerated networking instances. It provides a consistent experience with multi-rack Outposts using the same APIs, console, automation, governance, and security controls across AWS Regions and on-premises locations.

🚀 Amazon OpenSearch Serverless is now available within v0 by Vercel, enabling rapid creation of full-stack search and AI applications using natural language prompts. The integration provisions and indexes data into OpenSearch Serverless collections automatically, removes infrastructure management, and supports full-text and vector search for RAG workloads. Developers can provision resources in new or existing AWS accounts across multiple global regions via the v0 interface.

🔍 This post, the final entry in The Economics of Agent Optimization series, explains how AI agent governance makes consumption visible, bounded, and attributable to control costs. It outlines request-time token limits, project quotas, and Azure API Management’s AI Gateway observability to enforce limits and trace usage. The article also describes Microsoft Foundry’s emerging ROI features that map agent costs to business outcomes, enabling teams to measure value and prioritize optimizations.

🆕 Amazon Elastic Container Service (Amazon ECS) now supports IAM condition keys for CPU and memory on the RunTask and StartTask APIs, enabling administrators to enforce consistent resource limits across all task launch methods. Previously, ecs:task-cpu and ecs:task-memory were limited to RegisterTaskDefinition, CreateService, and UpdateService; the extension ensures IAM policy evaluation also applies when tasks are started with RunTask and StartTask. This change is available in all AWS Regions where ECS is offered at no additional cost, helping organizations prevent cost overruns and maintain resource-policy conformity.

🛡️ Microsoft Threat Intelligence outlines how attackers are leveraging AI brands like ChatGPT and Copilot to craft convincing phishing, malvertising, and malware campaigns that exploit urgency and trust. Microsoft Defender provides layered defenses—anti-phishing, Safe Links, Safe Attachments, and post-delivery filtering—and correlates signals across email, identities, endpoints, and SaaS to detect and disrupt multi-stage attacks. Attack disruption has contained tens of thousands of compromises monthly, illustrating the value of connected prevention, detection, and response.

🔒 Microsoft Azure outlines how resiliency must be integrated into modernization efforts, emphasizing design-time planning, continuous assessment, and recovery readiness. The post highlights tools like Azure Infrastructure Resiliency Manager, Azure Chaos Studio, and Azure Backup to reduce blast radius, validate failover, and protect recovery points. It positions resiliency as a continuous operational practice aligned to workload criticality and business outcomes.

🔔 Amazon Redshift RG instances, powered by AWS Graviton processors, are now available in the AWS Europe (Zurich) Region. RG instances deliver up to 2.4x better performance than previous-generation RA3 instances and offer a 30% lower price per vCPU. They include Redshift's custom vectorized data lake query engine for processing Apache Iceberg and Parquet on cluster nodes and support four sizes: rg.large, rg.xlarge, rg.4xlarge, and rg.12xlarge.

🔒 Enterprises are rapidly adopting AI coding tools, delivering major productivity gains while introducing new security challenges as agents gain the ability to act with human identities, modify systems, and access core resources. Traditional controls fail against shadow AI, agent-driven risky behavior, blurred attribution, and uncontrolled external connections and costs. A platform-centric approach is needed to discover shadow components, assess supply chain risk, protect identities and prompts, and govern data, actions, and spend.

🔒 Cloudflare’s 1.1.1.1 resolver now validates DNSSEC signatures created with the post-quantum algorithm ML-DSA-44, a NIST-standardized scheme. This step lets Cloudflare test large signature transport and downgrade-resilience at Internet scale while planning full post-quantum DNSSEC support by 2029. The update is automatic for users when zones publish the requisite DNSSEC records.

🔒 The FBI has published its first Cyber Strategy, outlining how the agency will investigate and disrupt cyber threat actors and impose costs on adversaries. The document, published on September 9, emphasizes proactive disruption of financially motivated criminals and state-sponsored actors, rapid victim support, expanded partnerships, and investment in AI-enabled tools and workforce training. It sets out four pillars: investigate and disrupt, support victims, increase partnerships, and enhance cyber capabilities.

🛰️ Amazon CloudWatch Network Monitoring now reports network health indicators for paths that traverse Transit Gateway inter‑Region peering using synthetic monitors. This extends previous NHI coverage that applied only to paths using AWS Direct Connect, enabling operators to determine whether performance degradation across a Transit Gateway peering link is caused by the AWS network. The indicator covers the AWS network path up to the Transit Gateway peering connection and is published to your CloudWatch account for dashboards and alarms. This feature is available in all Regions except AWS GovCloud (US) and China Regions.

🔒 AWS Elemental MediaLive now supports A/B forensic watermarking, allowing content owners to trace unauthorized redistribution of live video by producing two synchronized output variants with distinct transparent watermarks. These marks persist through re-encoding and screen capture and are assembled downstream into per-session sequences that identify the leak source. The feature follows the DASH-IF A/B watermarking spec (ETSI TS 104 002) and can be configured on CMAF Ingest output groups via the MediaLive API or console.

🔒 AWS Storage Gateway now supports FIPS 140-3 validated endpoints over AWS PrivateLink for Amazon S3 File Gateway, enabling private, FIPS-compliant traffic on the AWS network. Previously, FIPS endpoints were reachable only via the public internet. File Gateway and S3 can now be accessed through FIPS interface VPC endpoints, and gateways must run software version 2.1.10 or later to activate a FIPS PrivateLink endpoint.

🛠️ AWS Elemental MediaTailor introduces Yield Optimization to automatically monetize unused ad inventory during server-side ad insertion (SSAI) for livestreams. Available to publishers in the Amazon Publisher Services (APS) Streaming TV program, it stitches Amazon Ads into unfilled breaks with no additional infrastructure. Publishers retain control via category filters and price floors, and performance can be monitored through CloudWatch and the APS portal.

🎯 AWS Elemental Inference now generates real-time contextual metadata from live video streams, producing scene-level intelligence without requiring custom ML infrastructure. The capability runs in parallel with encoding to extract IAB taxonomy categories, GARM brand suitability signals, detected objects and actions, and shot and scene descriptions. Broadcasters and platforms can use the output for contextual ad decisioning, media asset enrichment, and content discovery via a serverless, fully managed AI service.

📰 AWS Elemental MediaTailor now supports Low-Latency HTTP Live Streaming (LL-HLS) ad insertion via HLS Interstitials, enabling advertisers to place ads into low-latency live streams without increasing viewer latency. MediaTailor uses cacheable ad playlists to maintain CDN-edge caching and moves ad decision logic off the manifest request path. This capability has been validated in production during large live sporting events and is available in all Regions where MediaTailor is offered.

🎬 AWS Elemental MediaPackage now offers Dynamic Multiview, a server-side feature that composes multiple live video sources into viewer-selected tiled layouts on demand. It delivers multi-angle and personalized experiences as standard HLS and DASH streams playable on modern devices without custom player development. The capability operates in the compressed domain without re-encoding, supports AVC/HEVC, DRM, SCTE-35 passthrough, and full-screen ad replacement.

🚀 Amazon Elastic VMware Service (Amazon EVS) is now available in Asia Pacific (Osaka), Asia Pacific (Taipei), Europe (Spain), and Israel (Tel Aviv). Amazon EVS runs VMware Cloud Foundation on EC2 bare-metal instances powered by AWS Nitro, enabling rapid VCF deployments and workload migration. The release supports VCF 9.0 and 9.1 and offers lower latency, improved compliance options, and enhanced resiliency for VMware workloads.

🛡️ Microsoft introduces a MITRE ATT&CK-aligned Cloud web applications threat matrix to help defenders map and prioritize threats against cloud-hosted web apps and serverless platforms. The framework organizes attack techniques across application code, managed runtimes, identities, deployment pipelines, and connected cloud resources to surface cross-layer attack paths. The blog describes selected techniques and actionable defensive priorities to reduce exposure in cloud-native environments.