All news in category “Vendor and Hyperscaler Watch”

🔐 Google has extended client-side encryption (CSE) for Gmail to Android and iOS for organizations using the Enterprise Plus with Assured Controls edition. Messages and attachments are encrypted on-device with customer-managed keys and require admins to enable the mobile clients in the CSE admin console. The feature is opt-in, requires premium licensing, and disables some Gmail capabilities (including AI features and full search) for encrypted content. Non-Gmail recipients receive a secure web portal to read and reply.

⚡ This post outlines an event-driven architecture that pairs BigQuery continuous queries with Pub/Sub Single Message Transforms and ADK-powered agents on Vertex AI Agent Engine to detect, route, and resolve anomalies in real time. Continuous queries push precise, filtered events into Pub/Sub where SMTs reshape payloads for agent webhooks. Deployed agents investigate autonomously, escalate complex cases, and log analytics back into BigQuery for observability.

⚙️ Amazon CloudWatch pipelines now supports conditional processing and a new Drop Events processor, letting you apply transformations only to matching log entries. You can set processor-level 'run when' conditions or entry-level conditions across 21 processors such as Add Entries, Grok, and Rename Key. The Drop Events processor filters unwanted entries from third-party connectors to reduce noise and lower costs. These features are available at no additional charge where pipelines are generally available; standard CloudWatch Logs ingestion and storage rates still apply.

🚀 Cloudflare announced it has provisioned 500 Tbps of external interconnection capacity across 330+ cities, a milestone reflecting 16 years of global network scaling. This figure represents aggregate provisioned ports to transit providers, IXPs, private peers and CNI — not peak traffic, with the unused portion reserved as the DDoS budget. The company attributes resilience to running security and developer platforms on every server and to automated, server‑level mitigation using eBPF, dosd and global propagation via Quicksilver.

🔍 Google outlines a set of curation accelerators within Google Data Cloud that automate cataloging, metadata enrichment, profiling, lineage, and pipeline generation to shorten time-to-insight. Key capabilities include Cloud Storage auto-discovery via Dataplex Universal Catalog, semantic metadata augmentation with Data Insights, automated data quality and lineage controls, and AI agents that generate ingestion and transformation code. The platform also provides built-in AI SQL functions, embeddings, and continuous queries to support multimodal and real-time curation. These features are designed to reduce manual ETL work so teams can focus on analysis, ML, and business decisions.

☁️ AWS Deadline Cloud now supports creating monitors in multiple AWS Regions without requiring changes to your IAM Identity Center configuration. You can deploy render farms and place resources closer to artists and studios worldwide, and run or compare workloads across Regions to optimize rendering strategy or diversify instance types. Deadline Cloud automatically routes authentication to your IAM Identity Center instance in its primary Region, keeping identity data in place and avoiding replication.

🛡️ Amazon CloudWatch pipelines introduces compliance and governance controls to help preserve data integrity and restrict pipeline creation. You can enable a keep original toggle to store raw logs before any transformation, and processed entries now include metadata indicating they were transformed. New IAM condition keys let administrators limit pipeline creation by log source and type. These capabilities are provided at no additional cost and are available in Regions where pipelines is supported.

🤖 In collaboration with Google DeepMind, the team built an AI pose-estimation pipeline that converts single 2D video into a 63-joint 3D biomechanical model for U.S. Olympians. The system uses learned temporal priors to infer occluded joints and delivers near-instant results by running models on statically provisioned TPU slices. Orchestration, scaling, and security are managed with Vertex AI and VPC private endpoints.

🔍 QueryData launches in preview, offering near-100% accuracy translating natural language into database queries across AlloyDB, Cloud SQL (MySQL and PostgreSQL) and Spanner. Built on Google Cloud’s Gemini LLM and augmented by rich database context, it uses schema ontologies, query blueprints and ambiguity detection to generate precise queries. Deterministic security is enforced via Parameterized Secure Views (PSVs), and integration is supported through a unified QueryData API, the MCP Toolbox for Databases, and context-engineering tools including an Evalbench framework.

🔒 Google Cloud now enables essential AI and cloud security by default via an enhanced Security Command Center (SCC) Standard tier automatically turned on for eligible customers. The free Standard tier includes a unified AI protection dashboard with detection for unprotected Gemini inference, LLM and agent guardrail reporting, and four baseline AI posture controls. It also adds expanded misconfiguration checks, DSPM, Compliance Manager, agentless vulnerability scanning, and in-context findings in Cloud Hub, GCE, and GKE dashboards.

🧭 This article explains why agentic workflows need near-100% accuracy when they query enterprise databases and how comprehensive context engineering can deliver it. It introduces QueryData as a tool that combines three context pillars—Schema Ontology, Query Blueprints, and Value Searches—to guide LLMs toward correct, auditable SQL. A real-estate tenant onboarding example illustrates the risk of compounding errors, and the post recommends templates, facets, and database-aware value lookups to ensure both accuracy and explainability for human-in-the-loop verification.

🤖 Google positions Gemini Enterprise as a unified agentic platform and offers Gemini for Government to help public sector organizations move beyond pilots to agency-wide deployments that accelerate mission outcomes. Agencies including the CDAO, DOT, and FDA are deploying agents for administrative tasks, regulatory reviews, and scientific collaboration, while state and local governments modernize services and constituent support. Google highlights an integrated stack built for velocity, precision, cost efficiency, and security, cites industry recognition, and invites leaders to engage at Google Cloud Next.

🔍 Prism is an open-source evaluation framework that helps teams run repeatable, measurable tests for Conversational Analytics agents in BigQuery and Looker. It enables developers to define test suites, assertions, and latency limits to validate generated SQL, returned data, and conversational behavior. Prism’s Trace View and Comparison Dashboard provide execution transparency and regression tracking so teams can identify failures and iterate with confidence.

📊 Google is reintroducing Data Studio (formerly Looker Studio) as the central home for Google Data Cloud assets, emphasizing unified access to reports, BigQuery conversational agents, and data apps built in Colab. The redesigned product will sit alongside Looker, targeted to personal, ad-hoc exploration while Looker remains the governed enterprise BI solution. A free edition continues to serve individuals and a Data Studio Pro tier offers AI, enterprise security, and management features; existing assets will be migrated transparently.

🚀 Amazon announced second-generation Amazon FSx for NetApp ONTAP is now available in four additional Regions: Europe (London), Asia Pacific (Hyderabad), South America (Sao Paulo), and AWS GovCloud (US-West). The second-generation file systems deliver greater performance scalability and flexibility compared with first-generation deployments, enabling up to 12 highly-available (HA) pairs per file system. That configuration provides workloads with up to 72 GBps of throughput and up to 1 PiB of provisioned SSD storage. You can deploy second-generation Multi-AZ file systems with a single HA pair, and Single-AZ file systems with up to 12 HA pairs, broadening choices for redundancy and capacity.

🤖 SAP Concur and Google Cloud modernized expense automation by upgrading ExpenseIt from OCR-first processing to an agentic AI workflow that reasons about missing data. The system combines a deterministic text-extraction core with a Gemini-powered Receipt Analysis Agent that triggers only for ambiguous receipts. Using routing, contextual reasoning, and tool access to travel and calendar data, the agent infers missing fields and completes entries, reducing manual corrections and speeding expense submission.

🔁 This guide explains how to migrate on-premises application load balancer configurations to Google Cloud Application Load Balancer using a pragmatic, phased approach. It recommends a four-step plan: discovery and mapping, choosing cloud equivalents, test and validate, and a phased canary cutover. For common patterns use declarative features like URL maps and Cloud Armor; for bespoke logic use Service Extensions. The post emphasizes monitoring, rollback planning, and operator training.

🛡️ Google’s Pixel team integrated a memory-safe Rust DNS parser into the cellular baseband on Pixel 10 to reduce a class of memory-safety vulnerabilities in a high-risk component. The project adapts the community hickory-proto crate for no_std, adds FFI shims, and builds Rust into the modem firmware via the existing GN/Pigweed build. The team prioritized community support and correctness over aggressive size optimization, reporting a combined code cost of ~371 KB and leaving size pruning to future work.

🔐 Amazon Quick now supports document-level access control lists (ACLs) for Amazon S3 knowledge bases, enabling granular permissions for documents and folders. You can configure ACLs with a centralized global ACL configuration file or with per-document metadata files for faster, targeted permission updates. ACLs are permanent at knowledge base creation and documents without an ACL entry are not ingested. The feature is available in all AWS Regions and is documented in the Amazon Quick User Guide.

📧 AWS Billing and Cost Management Dashboards now support scheduled email delivery for dashboard reports. You can configure daily, weekly, or monthly deliveries that send secure links to password-protected PDF reports optimized for offline viewing, and manage recipients through AWS User Notifications. The feature is available at no additional cost in all commercial AWS Regions (excluding AWS China Regions) and is accessible via AWS SDKs and the CLI.