All news in category “Vendor and Hyperscaler Watch”

🔁 Amazon Connect Global Resiliency now supports cross-region routing, enabling contacts arriving in one AWS region to be offered to the longest-available matching agent across two linked regions. Managers can view analytics and search contacts across both regions as a unified contact center, and both regions carry live traffic at all times to ensure configurations and integrations are continuously exercised. Customers retain control over traffic distribution and can shift new contacts and agents to a single region when needed.

🔒 AWS invited Upwind to join Security Hub Extended after customers repeatedly cited Upwind as a complementary solution. Upwind integrated deeply, offering runtime-first protection, pay-as-you-go pricing, and aligned go-to-market efforts that have driven strong joint deal activity. The integration enables unified findings in OCSF across build-to-runtime tools, simplified procurement on one AWS bill, and no custom integrations for customers.

🔔 Amazon Redshift now reads from and writes to Apache Iceberg v3 tables in your data lake, adding support for default column values, row lineage, and deletion vectors. Default column values simplify schema evolution by providing initial values when none are supplied. Row lineage exposes pseudo-columns for row identity and update sequence, enabling incremental and CDC workflows. Deletion vectors use compact compressed bitmaps to replace positional delete files, improving read/write performance for frequent updates and deletes.

🚀 Amazon EC2 R9g and R9gd instances powered by AWS Graviton5 processors are now generally available, targeting memory-intensive workloads such as databases, in-memory caches, real-time analytics, and containerized applications. R9gd adds local NVMe SSD storage for block-level needs. These instances claim up to 25% better compute performance versus Graviton4-based R8g/R8gd and offer enhanced cache and memory speeds. They run on the sixth-generation AWS Nitro System with the new Nitro Isolation Engine to improve workload isolation and are available in multiple US and EU regions.

🔒 Amazon Cognito now supports the GetClientToken API, enabling app clients to obtain access tokens for machine-to-machine authorization without requiring a user pool domain. The API lets an app client authenticate with its client ID and secret to receive access tokens for custom scopes on resource servers and integrates with AWS SDKs, AWS WAF, and VPC interface endpoints. The domain-based OAuth 2.0 client-credentials flow remains available, and the feature is live in all regions where Cognito user pools exist.

🔗 Azure Multicloud Interconnect simplifies private connectivity between Azure and AWS by providing high-bandwidth, cloud-native links that abstract multicloud networking complexity. It extends to Azure Private Link for an end-to-end private path and offers features such as MACsec security, four-nines availability, and scalable capacities up to 100 Gbps at GA. The collaboration with AWS implements a standardized Open API to enable faster provisioning, operational simplicity, and potential wider interoperability across hyperscalers and carriers.

🛡️ AWS Lambda recursive loop detection is now available in all commercial AWS Regions. This default-enabled guardrail detects and stops recursive invocations between Lambda functions and supported event sources like Amazon S3, Amazon SQS, and Amazon SNS, preventing runaway workloads and unexpected costs. When a loop is detected, Lambda halts processing and sends an AWS Health Dashboard notification with troubleshooting guidance. You can disable detection per function using the PutFunctionRecursionConfig API if intentional recursion is required.

🔍 This post explains how to plan and automate governance for AWS IAM Identity Center across an AWS Organization. It outlines integration with external IdPs, recommended delegation and IAM permissions, and naming conventions to improve discoverability. The article describes a sample solution that uses AWS CDK to deploy reporting and remediation stacks to discover Identity Center applications, generate CSV reports, and optionally enforce assignment policies. It emphasizes cross-team planning, detective controls, and testing before remediation.

🚀Amazon Aurora Serverless now delivers up to 30% better performance and improved scaling across additional AWS Regions: Asia Pacific (New Zealand), Asia Pacific (Thailand), Africa (Cape Town), Europe (Milan), and Mexico (Central). These upgrades apply to both Aurora PostgreSQL and Aurora MySQL and are provided in platform version 4 at no extra cost. New clusters and restores launch on platform version 4 automatically; existing clusters can upgrade via maintenance actions, restart, or blue/green deployments.

🛠️ The Data Agent Kit brings the Orchestration Pipelines framework directly into your IDE or CLI, offering a unified, open-source toolkit for building, deploying, and troubleshooting data pipelines. It provides a Data Engineering tab and an agentic skill that authors production-grade Apache Airflow® DAGs via natural language, paired with a declarative YAML DSL to remove Python boilerplate. The kit integrates with BigQuery, Managed Spark, Gemini Enterprise Agent Platform, and dbt to enable reproducible MLOps workflows and automated CI/CD deployment.

📈 BigQuery Graph brings native graph capabilities to the data warehouse, unifying ISO-standard GQL with SQL to run traversals natively at petabyte scale without ETL. Built on BigQuery, it inherits row- and column-level security, integrates with BigQuery ML and Gemini models, and supports cross-cloud Iceberg tables for virtual graphs. GA improves traversal performance, adds CALL and extended subquery support, and includes agentic tooling for modeling, conversational analytics, and auditable context graphs.

🔍 Amazon OpenSearch Service added 17 new Cluster Insights that diagnose root causes of Red and Yellow cluster status and offer actionable remediation steps. The insights cover resource exhaustion (JVM OOM, sustained CPU saturation) and configuration problems (zone imbalance, misconfigured replica counts). They automatically identify affected nodes and recommend fixes like resizing instances, increasing disk capacity, or correcting shard allocation.

🔎 AWS Agent Registry is now generally available, offering a private, governed catalog and discovery layer for agents, skills, tools, MCP servers, and custom resources across organizations. It provides semantic and keyword search, a browse experience, and access via the console, AWS CLI, and AWS SDK. Registry integrates with Amazon Bedrock AgentCore, Amazon Quick, and Kiro IDE, and exposes an MCP server interface for IDE queries. New enterprise features include infrastructure-as-code support, tagging, AWS RAM sharing, auto-discovery of AgentCore runtimes, and a Quick Connectors integration.

🔁 Amazon MSK Connect now allows restarting newly created connectors and their tasks to speed recovery for streaming data pipelines. The managed service for deploying and scaling Apache Kafka Connectors with Amazon MSK previously required deleting and recreating connectors after failures. You can now restart an entire connector and all tasks or selectively restart only failed tasks, and even restart healthy connectors to resolve transient issues or pick up external changes. The feature is available at no extra cost via the Console, AWS CLI, SDK, and CDK in all Regions where MSK Connect is provided.

🔗 AWS has announced the public preview of AWS Interconnect – multicloud, enabling managed private connections between AWS and Microsoft Azure. The preview expands the multicloud interoperability framework first introduced at re:Invent 2025, which includes an open specification for network interoperability. Azure adoption of the specification provides a single managed experience for customers connecting workloads across AWS and Azure in selected regions.

🚀 Amazon Web Services has added Europe (Zurich), Asia Pacific (Osaka), and Canada West (Calgary) to the regional availability for Amazon WorkSpaces Applications. Customers in these regions can now deploy and stream desktops and applications closer to end users to improve responsiveness and address data residency and compliance needs. WorkSpaces Applications is a fully managed application streaming service that handles infrastructure, scaling, and access on demand with pay-as-you-go pricing.

🛡️ Cloudflare today unveiled Adaptive Intelligence, a new non-deterministic bot detection engine designed to make attacks slow and costly rather than trying to keep every attacker out. It continuously retrains on live traffic, generates short-lived disposable rules, and learns from labeled corrections across the network to reduce attacker feedback. The approach complements behavioral validation and aims to balance protection with low false positives for real users.

🛡️ Anthropic expanded its Compliance API on August 11, 2026, to include local session transcript endpoints for Claude Code, improving visibility into what endpoint AI agents do. The new endpoints log text, tool_use, and tool_result blocks, capturing prompts, bash commands, reads/writes, and MCP interactions. However, transcripts alone don't prove intent or legitimacy, so organizations should combine managed settings, Compliance API logs, and endpoint telemetry like OpenTelemetry and EDR to form a practical governance model. Treat session transcripts as sensitive data and apply retention and detection controls.

🛡️ Microsoft has asked customers to ignore false notifications indicating "Microsoft Defender Antivirus is turned off" after recent Defender updates. The issue, affecting all supported Windows client and server versions including Windows 11 26H1 and Windows Server 2025, causes alerts to appear in the Windows Security app despite the antivirus functioning normally. Microsoft confirmed it is investigating and plans to roll out a fix in a future Defender update.

🛠️ AWS Secrets Manager now offers one‑click installation for the AWS Workload Credentials Provider (AWCP) on Amazon Linux and Windows, replacing a prior multi‑step build-from-source flow. Pre-built, code-signed binaries for Linux (x86_64, ARM64) and Windows (x64) are available via public download and the Amazon Linux repository, enabling one-command install on Amazon Linux EC2. AWCP resolves secrets from AWS Secrets Manager, caches them in memory, and exposes them via a local HTTP endpoint; it also retrieves certificates from AWS Certificate Manager. The feature is available in all Regions where Secrets Manager is offered at no extra charge beyond standard Secrets Manager pricing.