All news in category “Vendor and Hyperscaler Watch”

🚀 AWS Lambda now supports scalable network bandwidth for functions outside a VPC with 2 GB+ memory, enabling throughput to scale from 625 Mbps at 2 GB up to 3,000 Mbps at 10 GB. This reduces transfer times for latency-sensitive and high-volume data-processing workloads, helping lower execution time and per-invocation cost. Enable the feature via AWS Service Quotas under the Network bandwidth per execution environment quota; it is available at no additional charge in all commercial Regions.

🔒 AWS announced integrations that extend AWS Continuum into developer coding environments by partnering with Anthropic and OpenAI. The Preview of Continuum for code vulnerabilities delivers on-demand vulnerability discovery, contextual prioritization, sandbox validation, and remediation directly within coding assistants like Claude Code, Codex, and Kiro. Continuum orchestrates multiple models and tool integrations as a harness to select the best model per task and return prioritized, contextual fixes to developers, collapsing multi-team workflows into a single outcome.

🟦 Amazon Keyspaces (for Apache Cassandra) is now available in the Canada West (Calgary) Region (ca-west-1), enabling customers to build Cassandra-compatible applications with lower latency and keep data within the Region to satisfy residency requirements. Amazon Keyspaces is a scalable, highly available, managed Apache Cassandra–compatible service that is serverless and billed based on usage. This expansion helps organizations in Canada deploy low-latency, high-throughput applications using CQL without managing Cassandra clusters.

🛠️ AWS Glue Data Quality introduces a new observation mode that reduces false positives and better handles irregular data arrival intervals for notebook and exploratory workflows. The mode uses a constant baseline instead of linear trend extrapolation to avoid over-alerting, improving accuracy and reducing noise. Additionally, anomaly detection for Glue ETL jobs is now offered at no extra charge across all AWS commercial and GovCloud (US) regions.

🔒 Today Amazon Cognito launches provisioned limits in the console to let teams self-service authentication rate adjustments in minutes. The feature separates an account-level maximum (managed via Service Quotas) from a provisioned limit you pay for and control in the Amazon Cognito console, enabling rapid scaling for events like Black Friday. It supports granular RPS adjustments, programmatic APIs, and cost optimization by billing only for provisioned capacity above defaults.

🔍 AI Insights in AWS Marketplace explains product pricing directly on listings, showing what pricing units map to, how costs scale with usage, and how multiple pricing dimensions combine. It cites sources drawn from the seller's Marketplace listing and public website so buyers can verify explanations. The feature is live in most listings across commercial AWS Regions and sellers can request edits via the Contact Us link.

🆕 Amazon Web Services announces general availability of native vector search for Amazon DynamoDB. The feature enables indexing and approximate nearest neighbor searches over embeddings with single-digit millisecond latency and 99%+ recall at any scale, including trillions of vectors. You can store embeddings alongside other attributes, choose a model to generate vectors (including Amazon Bedrock models), create vector indexes, and apply attribute filters. DynamoDB vector search preserves serverless benefits—no infrastructure management, zero downtime, and pay-as-you-go—supporting use cases such as agent memory retrieval, semantic search, recommendations, and personalized advertising.

🔒 Palo Alto Networks announces Prisma AIRS integration with Claude Enterprise to enforce zero-trust, real-time data protection and runtime threat inspection across Claude surfaces. The integration leverages existing Enterprise DLP policies, using an encrypted KVM to verify requests and returning synchronous allow or deny verdicts before prompts reach the model. This enables consistent governance, immediate policy updates, and consolidated auditing within existing dashboards.

🔒 KuppingerCole’s 2026 Leadership Compass identifies a shift in CNAPPs toward unified platforms that secure cloud and AI workloads. The report names Microsoft a Leader across Overall, Product, Innovation, and Market for Defender for Cloud, citing its integrated approach to cloud, data, identity, and AI risk. The post highlights risk-based attack path analysis, AI security posture management, and agentic AI support for detection, prioritization, and remediation.

🚀 UiPath re-architected its infrastructure to support agentic AI and high-scale intelligent document processing by moving from isolated clusters to a shared Google Cloud GPU fleet. The company balances A3 (NVIDIA H100) instances for training with G4 (NVIDIA RTX Pro 6000) instances for inference, using Google Cloud AI Hypercomputer and Dynamic Workload Scheduler to secure predictable capacity. This shared-fleet approach maximizes utilization, reduces costs, and lets engineering teams focus on model performance rather than infrastructure.

🔎 This article explains how shifting from a monolithic data pipeline to a sharded hub-and-spoke architecture reduces the impact of "noisy neighbor" tenants. The Hub acts as a lightweight router while Spokes provide isolated processing with Pub/Sub buffers between them. The design enables independent scaling, fault isolation, tiered pipelines for priority tenants, and spoke-level best practices such as DLQs, strict connection pooling, and asynchronous I/O.

🔔 Today AWS Glue Data Catalog preview adds two features: exporting catalog metadata to S3 Tables and enabling semantic search for catalogs encrypted with customer managed AWS KMS keys. Exported metadata — including glossary terms, custom attachments, and descriptions — is written to the managed aws-catalog S3 table bucket in Apache Iceberg format, enabling SQL queries, auditing, and time travel in engines like Amazon Athena and third-party tools. These capabilities are available in US East (N. Virginia), US East (Ohio), US West (Oregon), and Europe (Ireland); S3 Tables usage follows S3 pricing.

🔒 AWS IAM Identity Center now lets administrators choose whether to enable AWS account access management when creating a new instance. This option permits using Identity Center solely for managing access to AWS applications, without provisioning access to AWS accounts. The setting is available during initial configuration, does not affect existing instances, and can be changed later via instance settings or the UpdateInstance API. The capability is available in all Regions where IAM Identity Center is offered.

🚀 Amazon Aurora Serverless now provides a faster initial scale-up, delivering up to 12 ACUs within one second and continuing to scale up to 256 ACUs as workloads grow. This capability, enabled by default on platform versions 3 and 4, is well suited for agentic AI and bursty applications because clusters automatically scale down to zero when idle. Existing clusters on versions 1 and 2 can upgrade to platform version 4 to take advantage of the improvement. Check platform version in the AWS Console or via the RDS API to confirm eligibility.

🛡️ Cloudflare describes WriteGuard, a centralized policy, attribution, and auditing layer for MCP servers now available in private beta. It sits between MCP clients and tool handlers to classify calls by risk, attach agent attribution, scrub audit events, and block dangerous actions before execution. The post explains how WriteGuard integrates with existing identity flows, per-tool configuration, and an asynchronous audit Worker to make agentic writes visible and controllable across MCP-connected systems.

🛠️ Cloudflare OS provides each employee with an agent-backed workspace grounded in company context, skills, and systems. It supports agent-driven docs, apps, and workflows while enforcing security via Gatekeepers and observation-based access control. The platform runs server code in Dynamic Workers and client code in sandboxed frames, integrates with MCP and AI Gateway, and is open sourced for organizations to deploy and customize.

🛡️ Cloudflare announces Identity-aware AI Gateway with Cloudflare Access in open beta and User Insights generally available to AI Gateway customers. The integration attaches verified user identities to each request as cf.user_id, enabling per-user spend limits, filtering, and auditing. AI Gateway centralizes model access (OpenAI, Anthropic, Google, Workers AI) and routes agent harnesses like Copilot through a single control plane. User Insights builds behavioral baselines from traffic to surface anomalous accounts and cost inefficiencies without blocking traffic.

🚀 Filestore, Google Cloud’s first-party NFS file service, now runs on Colossus, Google’s distributed storage system, to deliver greater scalability, flexibility, and operational efficiency. The update decouples capacity from performance so IOPS can be provisioned independently, and offers deep GKE integration including CSI driver support and multishares for smaller persistent volumes. Backed by Colossus, Filestore targets high-concurrency AI and agentic workflows with NFS-based shared workspaces, improved failure recovery, and integrated security via IAM, UIDs/GIDs, and IP ACLs.

🔒 Fortinet announces that FortiOS v7.6.x has achieved IEC 62443-4-2 Security Level 4 (SL4) certification, the highest component assurance level for industrial automation and control systems. This complements the company’s IEC 62443-4-1 ML2 accreditation for secure product development and validates FortiOS technical capabilities across identification, integrity, confidentiality, availability, and response requirements. The certification applies across FortiGate platforms running v7.6.x, reinforcing operational resilience for OT and critical infrastructure environments.

🧭 Sam Rhea, Cloudflare’s CIO, describes how the company built Cloudflare OS to enable safe, productive AI use across teams. Initially cautious in 2025, the company accelerated when powerful AI agents emerged, prompting internal pilots for engineers and non-engineers. Cloudflare OS combines off-the-shelf components with custom services, a contextual Codex for engineering, and a Model Context Protocol to enforce scoped permissions. The platform routes model calls through an AI Gateway for filtering, logging, and cost and model controls.